Closed Bug 554122 Opened 14 years ago Closed 2 years ago

AD/NTLM Authentication not working

Categories

(Core :: Networking: HTTP, defect, P3)

x86
All
defect

Tracking

()

RESOLVED WORKSFORME

People

(Reporter: saurav.raaj, Unassigned, NeedInfo)

References

Details

(Whiteboard: [necko-triaged])

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.3a3) Gecko/20100315 MozillaDeveloperPreview/3.7a3 (.NET CLR 3.5.30729)
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.3a3) Gecko/20100315 MozillaDeveloperPreview/3.7a3 (.NET CLR 3.5.30729)

Single-Sign-On was working few days back. After upgrading to Vista SP2, the result is always a pop-up asking for LDAP/AD credentials. Most of the corporate sites suddenly do not seem to work, which were previously working fine.

Searched the forums, but did not see issue reported with Vista SP2. Is this a known issue. I haven't changed any settings other than the latest installation of SP2.

Reproducible: Always

Steps to Reproduce:
1. Go to a website which has SSO enabled
2. Login with windows login/password
3. Close FF and start again, same issue (since the cookies are deleted)
This is happening with all versions of FF. I have tried on 3.6, 3.6 Beta 1, 3.6 Beta 2, 2.7 Alpha 3, and also 3.5.3 and 3.5.8
This also occurs on XP Pro SP2 for us.  This is blocking our deployment of SSO to moodle and other intranet resources, a much demanded feature.

Please can somebody look at this as a matter of urgency.
Blocks: 250014
We have this reported on Fedora 14 both with our packaged FF3.6.* and upstream binary of 4.0.1.

See below original reporter's comments:

Firefox is supposed to use /usr/bin/ntlm_auth to make single-sign-on work with
NTLM.

But although I have network.automatic-ntlm-auth.trusted-uris set to 'intel.com'
and I'm viewing a page within that domain, it doesn't seem to even try.

Setting up Samba/winbind to test this is a PITA; I have a simpler test tool at
http://david.woodhou.se/ntlm_auth_v2.c which works with Chromium (when patched
with the patch at http://code.google.com/p/chromium/issues/detail?id=53186 )

But firefox isn't even *running* it.

-----------------------------

I tried an upstream firefox 4 binary from getfirefox.com, running with a
completely fresh profile (except of course that I'd set
network.automatic-ntlm-auth.trusted-uris to "intel.com"). Then I went to a web
site in that domain that uses NTLM authentication.

The atime on the /usr/bin/ntlm_auth helper didn't change, and I got asked for a
password. The same happens in safe mode.
OS: Windows Vista → All
Also bug 571943 is most likely a duplicate of this one.
Version: unspecified → 4.0 Branch
This bug was reported using a pre-release version of Firefox 4. Now that Firefox 4.0.1 final has been released, can you please update and retest your bug? A fresh profile would be a good starting place to test, 
http://support.mozilla.com/kb/Managing+profiles. If you continue to see the issue, can you please update this bug with your results?

Filter: firefox4prebugsunco
I still have this issue on Firefox 4, 4.01, and 5 beta
With Firefox 21.0 this was *sporadically* working for me. It turns out to be trying to run "ntlm_auth" with no path:

7113  execve("ntlm_auth", ["ntlm_auth", "--helper-protocol", "ntlmssp-client-1", "--use-cached-creds", "--username", "dwmw2"], [/* 88 vars */]) = -1 ENOENT (No such file or directory)

If I run firefox from /usr/bin then it works; from elsewhere it doesn't.
Are you still seeing this issue when using a current version?
Flags: needinfo?(saurav.raaj)
Flags: needinfo?(francesco.catani)
Flags: needinfo?(dwmw2)
Yes... or at least "no, but only because Fedora patches it to fix it for itself".

https://bugzilla.redhat.com/show_bug.cgi?id=689058
http://pkgs.fedoraproject.org/cgit/rpms/firefox.git/tree/rhbz-1173156.patch
Flags: needinfo?(dwmw2)
Actually, I think comment 3 was (and my own responses were) probably misplaced; the Linux issue is bug 634334 and not relevant to Windows.
(In reply to Wayne Mery (:wsmwk) from comment #8)
> Are you still seeing this issue when using a current version?

Unfortunately I can't check anymore, as we are using other authentication system
Flags: needinfo?(francesco.catani)
In reply to Wayne Mery::
Yes, this bug still exists.....

(In reply to annajaworskaniucha from comment #12)

In reply to Wayne Mery::
Yes, this bug still exists.....

yes i saw that too http://idltechnologies.com

Component: General → Networking: HTTP
Flags: needinfo?(saurav.raaj)
Product: Firefox → Core
Version: 4.0 Branch → unspecified
Priority: -- → P3
Whiteboard: [necko-triaged]

Unfortunately I can't check anymore, as we are using other authentication system https://passwordrecoverys.com

Flags: needinfo?(remilraja123)

(In reply to annajaworskaniucha from comment #12)

In reply to Wayne Mery::
Yes, this bug still exists.....

yes i saw that too https://datinghelpguide.com/

Flags: needinfo?(remilraja123)

Unfortunately I can't check anymore, as we are using other authentication system https://customerqueryonline.com/how-can-i-get-match-com-refund/

Hello! I have tried to reproduce the issue using firefox 97.0a1 (2021-12-09) on Windows 10 unfortunately I wasn't able to reproduce the issue.

Wayne could you please provide a website from where to test this or we can close this issue as WFM?

Flags: needinfo?(vseerror)

Not something I ever reproduced.
That said, I've used several sites with SSO in recent years and not had a problem.

Flags: needinfo?(vseerror) → needinfo?(sergiu.negritas)

Hello Wayne and thank you for your reply!

As per the last comment and the fact that I wasn't able to reproduce the issue with the latest firefox versions on some several sites with SSO login I will mark this issue as RESOLVED->WORKSFORME.

If this issue is still valid or it can be reproduced again please feel free to reopen it or file another one.

Thank you!

Status: UNCONFIRMED → RESOLVED
Closed: 2 years ago
Flags: needinfo?(sergiu.negritas)
Resolution: --- → WORKSFORME

(In reply to annajaworskaniucha from comment #12)

In reply to Wayne Mery::
Yes, this bug still exists.....

Yes saw that too https://cashappquery.com/

I also saw same some days ago https://findfurnacerepairs.com/

Flags: needinfo?(minecraftskinshub)
You need to log in before you can comment on or make changes to this bug.