533467 - Prompt proxy password multiple times in one page every page

Status: NEW

(Firefox :: General, defect)

Description

[kennethxu]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2b4; .NET CLR 3.5; ffco7) Gecko/20091124 Firefox/3.6b4
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2b4; .NET CLR 3.5; ffco7) Gecko/20091124 Firefox/3.6b4

After upgrading from 3.6b1 to 3.6b4, FireFox asks me to enter proxy password multiple times in one single page, and doesn't so for every page. I did save the password the first time it prompts me.

The proxy is Microsoft solution using Windows Authentication which works fine with FF 3.5 and was also file with 3.6b1.

Reproducible: Always

Steps to Reproduce:
1. Set to a Microsoft proxy using windows authentication.
2. Go to gmail. 
3. Enter domain user id and password, let password manager manages it.
Actual Results:  
FF continue to prompt for the proxy password multiple times.

Expected Results:  
Proxy password should be asked for only once.

Comment 1

[philip.gillissen]

Same situation, it also occurs on 3.5.6 for Win XP SP3.

Comment 2

[Tom]

Can confirm this behaviour seemed to start with 3.5.6 (Win XP SP3).

Never had issue with NTLM password prompts with 3.5.5 but started as soon as I upgraded.  Behaviour is as described above - I am prompted again and again whilst browsing (typically 4 or 5 times per page loaded).  I get multiple prompts regardless of whether I cancel the prompt or enter credentials.  Page eventually loads regardless of what I do.  However, I was rarely prompted at all with 3.5.5!  (There used to be the odd site that caused a proxy credentials prompt with 3.5.5 - always the same site, but I just cancelled whenever I saw it.  It was most certainly the exception rather than the rule).

I tried a new profile - problem still there.
I tried re-installing - problem still there.
I installed 3.5.5 again - problem resolved (no longer prompted).

It seems something broke with NTLM proxy password prompts with 3.5.6.

Comment 3

[Tom]

Believe this is now fixed when I received an update to 3.5.7 today.

Therefore this bug is probably a duplicate of 535193 <https://bugzilla.mozilla.org/show_bug.cgi?id=535193>

Comment 4

[Andrew Vermaak]

This problem is forcing me back to IE8!! :-((( I love Firefox but can't function at work productively when I continually get domain password prompts every time FF requests info from the Internet. Thankfully it doesn't affect me at home! It seems to ask credentials for every frame on every page and specifically with Google it prompts for each letter as you type your search request! I've tried persisting with it but where FF originally enabled me to work faster and more efficiently it's now having the reverse effect and slowing me down considerably. Please advise when I'll be able to return to FF urgently!

Comment 5

[Tom]

Hi Andrew,
Out of interest, are you using 3.5.6 or 3.5.7?  For me, the problem was fixed in 3.5.7.
Regards, Tom

Comment 6

[Eric Schewe]

This issue appears to have remained in the final release of 3.6. I'm receiving multiple login prompts as the original reported described. We use a proxy server called CensorNet with NTLM authentication which integrates with Active Directory.

My workstation (Windows 7 64-bit) isn't a member of the domain so when using Firefox I'm prompted for credentials over and over again. I didn't get a chance to try it using a workstation which is a member of the domain. I'll test this next time I'm on site.

What logs would be useful for me to submit with this bug?

Comment 7

[Eric Schewe]

More information.

A workstation which is a member of the domain running Windows XP Pro and Firefox 3.6 has no problems and no authentication prompts.

A workstation running Windows XP Pro and Forefox 3.6 which isn't a member of the domain requires me to authenticate multiple times per domain I browse to.

Problem goes away if I downgrade back to Firefox 3.5.7.

Comment 8

[vili]

I think the problem is fixed now.

Comment 9

[akmal]

still reproducible with mozilla 1.9.1

Comment 10

[u235898]

related to Bug 338549 and still existing in Firefox 25!

Comment 11

[u235898]

Seems to, this bug also appears for any addon that tries to connect to network getting the proxy challenge.

Btw, still in FF 36!!!! It isn't that fun anymore. I can regret those using Chrome, "because it works" ;/

Comment 12

[u235898]

(I doubt there is something unclear: the bug (as I see it and I suppose kenneth meant it) regards the password challenge for the master password where proxy credentials are saved. It appears n-times for unlocking the vault. Perhaps some others just don't use password manager or vault encryption and password handling is fine?!
Another cause for "some see it, some not": The issue is not applicable for all "NTLM" types but perhaps just for some?)

Comment 13

[YUKI "Piro" Hiroshi]

This still happen on Firefox 45. Detailed steps to reproduce:

1. Prepare an HTTP forward proxy.
  1.1. Prepare an Ubuntu 14.04LTS server - for example, "10.0.2.2"
  1.2. Install Apache2 with following commands:
       $ sudo apt-get install apache2 apache2-utils
       $ sudo a2enmod proxy_http
       $ sudo a2enmod proxy_connect
  1.3. Prepare a login information for the "testuser" user.
       $ sudo htpasswd -c /etc/apache2/.htpasswd testuser
  1.4. Create a configuration file for forward proxying.
       $ vi /etc/apache2/conf-enabled/forward_proxy.conf
       $ cat /etc/apache2/conf-enabled/forward_proxy.conf
       ProxyRequests On
       ProxyVia On
       
       <Proxy *>
         AuthType Basic
         AuthName "Password Required"
         AuthUserFile /etc/apache2/.htpasswd
         Require user clearcode
       </Proxy>
  1.2. Restart Apache2.
       $ ssudo service apache2 restart
2. Set Firefox to use the HTTP forward proxy. For example:
   * network.proxy.type = 1
   * network.proxy.http = "10.0.2.2"
   * network.proxy.http_port = 80
   * network.proxy.share_proxy_settings = true
3. Set an webpage including two ore more embedded resources as the home page (start page).
   For example: http://www.clear-code.com/
4. Visit the webpage to cache it.
5. Exit Firefox.
6. Start Firefox.
7. A password prompt for the proxy appears.
   Then login as the "testuser" user.

Actual result:
One more password prompt appears.

Expected result:
No other password prompt appear.

Additional information:
I've created an addon as a workaround for this problem.
https://addons.mozilla.org/firefox/addon/no-duplicated-authentication/?src=cb-dl-created