282235 - Passwords for NTLM on an intranet are being passed to the server correctly, when too long

Status: RESOLVED INVALID

(Toolkit :: Password Manager, defect)

Description

[Ryan Kellerman]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0

Using a Microsoft IIS server on a Windows 2000 Server based Active Directory
domain.  If the end user decides to use a pass phrase instead of a password the
password seems to be too long for FireFox to handle correctly.  For example if
the username is JesseDuke and the password is "boy I sure do love that Daisey
because she is so good to me." the authentication will failure.  The security
Windows Event log will report an error message of:

The logon to account: username
 by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
 from workstation: workstationname
 failed. The error code was: 3221225572

Unfortunately this seems to be the error whenever there is an authentication
failure of any kind.

Reproducible: Always

Steps to Reproduce:
1. Setup an Active Directory using Windows Server 2000 SP4
2. Setup IIS on a standalone server that allows access only via integrated logons.
3. Create a username and password with password at least 32 (I'm guessing on the
number, I can research this further if you like, but I've got a feeling this is
a hard coded limt the developer will recognize pretty quickly) charachters long.
4. Install Mozilla FireFox 1.0 and try to access a page on that web server.
5. Use the username and password you created.

Actual Results:  
Authentication fails.

Expected Results:  
Passed the credentials to the backend server and allowed access to the web page.

Comment 1

[Matthias Versen [:Matti]]

Do you get the same if you don't used a saved password (!) from the password
manager ?
(That would mean that this bug is in the wrong product and component)

Comment 2

[Matthias Versen [:Matti]]

no response