382834 - asked for password multiple times

Status: RESOLVED WORKSFORME

(Core :: Networking: HTTP, defect)

Description

[Jerry Dubuke]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.4) Gecko/20070515 Firefox/2.0.0.4
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.4) Gecko/20070515 Firefox/2.0.0.4

 This is an IIS server running with Digest authentication on a W2K3 server. In IE6 it asks me for my userid/password one time as I expect. In FF it asks me for my userid/password multiple times - anywhere between 2 and 5 for the home page, and then again multiple times every time I try to access a subpage.
I created a test user on this site test1/test1 for you to play with.
Please advise! I was hoping it was a problem with an earlier version, but I am now on the latest and greatest FF version and I still have this problem

Reproducible: Always

Steps to Reproduce:
1.try to access the site http://test1.gpdservices.com:2080
2.when asked to login, login with test1 and test1
3.notice that you will be asked many times for the same information and you will eventually get in
Actual Results:  
the login/password dialog keeps reappearing

Expected Results:  
access to the site after putting the information in one time (as IE6 does)

This is preventing me from rolling a site out to my customer, since they are on Corporate policy to use FF instead of IE.
help??
I would rather that this site not be made public...

Comment 1

[Jerry Dubuke]

I am not sure how the bug reporting process works...how do i know someone is looking at a problem? I imagine you are getting a lot of bug reports since the product is so widespread, so I am not sure if I should just check here periodically?
Thank You,
Jerry

Comment 2

[Daniel Veditz [:dveditz]]

Making the bug security sensitive hides the bug from most Mozilla community members, which means the normal bug handling gets bypassed. At the same time since it's not an exploitable issue it's going to get ignored by the "OMG we're being hacked!" security teams who can see the hidden bugs.

The test server seems to be unresponsive, hopefully revealing the test password won't cause any harm at this point -- unhiding the bug.

Can any one else reproduce this with Digest Auth on any other server?

Comment 3

[Justin Dolske [:Dolske]]

This is probably a duplicate of bug 317801 or bug 378152, if you look at some of the comments there you should be able to compare what's going on.

Comment 4

[Jerry Dubuke]

I was able to reproduce this bug on three different Windows 2003 servers. I had to change the test password for security reasons, which is why the server is not responding. I know this is still an issue, since it was brought to my attention by 2 separate customers of mine.
Jerry

Comment 5

[RNicoletto]

Test site is no more available. Is there any other way to reproduce?

Comment 6

[Jerry Dubuke]

this bug is 2 years old - i took the test server down.

Comment 7

[RNicoletto]

(In reply to comment #6)
> this bug is 2 years old - i took the test server down.

Since bug 475053 recently landed on trunk it would be a good thing to re-test this bug to see if there's been any improvement.

Comment 8

[Pierre THOMAS]

Bonjour,

For several months, and today with Firefox 14.0.1, each times I start Firefox it ask me the master password at least 4 times (this is very disagreeable !).
How to solve this bug ?
The home page of my Firefox is zimbra.free.fr webmail to access my mail account.
I use a lot of extensions ...
My PC OS is Windows XP.

Pierre

Comment 9

[kud]

Same here.

On all every devices I've got.