18.03 KB, text/plain
163.42 KB, text/plain
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.3) Gecko/20040910 Build Identifier: Mozilla/5.0 (Windows; U; WinNT4.0; en-US; rv:1.7.3) Gecko/20041026 Firefox/1.0RC1 I am in a corporate network that uses Microsoft ISA server to access the internet. This proxy requires NTLM authentication (domain username and password). The domain is an Active Directory one. The PC OS is NT4.0 workstation and the Firefox proxy settings are configured properly. Firefox 0.9.3 is working perfectly behind this proxy, while Firefox 1.0PR and 1.0RC1 fail to access outside pages with the following error: "HTTP 407 Proxy Authentication Required - The ISA Server requires authorization to fulfill the request. Access to the Web Proxy service is denied. (12209) Internet Security and Acceleration Server" Firefox 0.9.3 pops up a window to request the username and password needed to authenticate on the proxy server, it carries on the auth correctly and then it shows the requested web page. Firefox 1.0PR (and also 1.0RC1) instead does not pop up any window for asking the proxy authentication details and it shows directly the error page generated by the proxy server. Clearly something broke up in the transition from 0.9.3 to 1.0xx. Reproducible: Always Steps to Reproduce: 1.Install Firefox 1.0PR or 1.0RC1 2.Set proxy server settings to use internal LAN ISA server (proxy1:80) 3.Try to access whichever page on the internet Actual Results: The browser cannot display any page outside the intranet or that requires NTLM authentication. The browser fails authentication with ISA proxy server. Expected Results: Negotiate correctly NTLM authentication as 0.9.3 did.
I will upload 2 network stack traces: one generated with 1.0RC1 (not working) and one generated with 0.9.3 (working).
Summary: Firefox does not authenticate on ISA server proxy → Firefox does not authenticate on ISA proxy server
Version: unspecified → 1.0 Branch
Created attachment 163717 [details] HTTP Log from Firefox 1.0RC1 when accessing ISA proxy server Firefox 1.0RC1 cannot authenticate on ISA proxy server via NTLM
Created attachment 163718 [details] HTTP Log from Firefox 0.9.3 when accessing ISA proxy server Firefox authenticates correctly with ISA proxy server via NTLM
This issue looks like a blocking problem for all the users behind a corporate M$ proxy. If you need further information, please let me know.
this seems to be no bug, but a change of configuration (about:config, network.automatic-ntlm-auth.allow-proxies to be set to FALSE), see MozillaZine - Firefox Bugs forum: http://forums.mozillazine.org/viewtopic.php?t=143344 Whatever the reason for this change from FF0.9x to FF0.10x might be - the default should be FALSE. THANKS to F@B :-)
I checked on my machine the default configuration of network.automatic-ntlm-auth.allow-proxies setting and it was set to TRUE. I can confirm that changing network.automatic-ntlm-auth.allow-proxies to FALSE solves the problem. I don't know what should be the default and why it was changed. I just hope that this information will be at least mentioned in the README of the future 1.0 release. Andreas, thanks for your help.
This bug has been automatically resolved after a period of inactivity (see above comment). If anyone thinks this is incorrect, they should feel free to reopen it.
Status: UNCONFIRMED → RESOLVED
Last Resolved: 13 years ago
Resolution: --- → EXPIRED
You need to log in before you can comment on or make changes to this bug.