Infinite loop in password dialog-- "cancel" button ineffective




14 years ago
13 years ago


(Reporter: 81h10vl02, Assigned: bugzilla)


Firefox Tracking Flags

(Not tracked)




14 years ago
User-Agent:       Mozilla/5.0 (X11; U; Linux i686; rv:1.7.3) Gecko/20041003 Firefox/0.10
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; rv:1.7.3) Gecko/20041003 Firefox/0.10

When connecting to an IIS site that uses NTLM authentication, I wish to cancel
the request for the page since I lack a valid login.  When the username/password
dialog appears I press cancel, only to be presented with another dialog.  Cancel
should prevent a future request for the same page.

Reproducible: Always

Steps to Reproduce:
1. Open the / URL on an NTLM-protected IIS server
2. Firefox password dialog appears
3. Press cancel
4. Go to step 2

Actual Results:  
"Cancel" in the dialog generates another GET to the same site, which pops up
another password request

Expected Results:  
Firefox should not re-request the page after cancel and should instead keep
either a blank page or the previous page displayed.

A packet trace of the conversation shows the below, with some fields substituted
with comments in parens.

----- browser sends -----
GET / HTTP/1.1
Host: (hostname)
User-Agent: Mozilla/5.0 (X11; U; Linux i686; rv:1.7.3) Gecko/20041003 Firefox/0.10
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: (if applicable)
Cookie: SITESERVER=ID=(Big Ugly Hex Number)
Authorization: Negotiate (NTLM info)

----- browser gets in response -----
HTTP/1.1 401 Access Denied
Server: Microsoft-IIS/5.0
Date: Fri, 21 Jan 2005 23:06:41 GMT
WWW-Authenticate: Negotiate (NTLM stuff)
Content-Length: 4033
Content-Type: text/html
.... (HTML) .....

After pressing "cancel", the same GET is repeated.

I've also tried this with Javascript disabled just in case the returned HTML was
somehow responsible for the reload, but this didn't help.

This problem is similar to bugs 263542, 269138, 129085, 69385, 244718, and
others.  These all seem to be more specific than this bug in that they involve
IMAP, particular username characters, etc.

I'm settting the priority to major since once the loop starts the only way to
get out is to shut down Firefox.

  -- Steve
This is an automated message, with ID "auto-resolve01".

This bug has had no comments for a long time. Statistically, we have found that
bug reports that have not been confirmed by a second user after three months are
highly unlikely to be the source of a fix to the code.

While your input is very important to us, our resources are limited and so we
are asking for your help in focussing our efforts. If you can still reproduce
this problem in the latest version of the product (see below for how to obtain a
copy) or, for feature requests, if it's not present in the latest version and
you still believe we should implement it, please visit the URL of this bug
(given at the top of this mail) and add a comment to that effect, giving more
reproduction information if you have it.

If it is not a problem any longer, you need take no action. If this bug is not
changed in any way in the next two weeks, it will be automatically resolved.
Thank you for your help in this matter.

The latest beta releases can be obtained from:
This bug has been automatically resolved after a period of inactivity (see above
comment). If anyone thinks this is incorrect, they should feel free to reopen it.
Last Resolved: 13 years ago
Resolution: --- → EXPIRED
You need to log in before you can comment on or make changes to this bug.