559186 - NTLM credentials entered into a browser prompt are not accepted

Status: RESOLVED INCOMPLETE

(Core :: Networking: HTTP, defect)

Description

[Jeff Davalos]

User-Agent:       Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.2; .NET CLR 1.1.4322; MS-RTC LM 8; MS-RTC EA 2)
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3

Several web sites our company works with are configured for single sign-on.  When using Firefox on a corporate network with a domain joined PC where domain controllers are reachable, Firefox does not prompt for credentials when accessing web sites configured for single sign-on.  This is expected and acceptable behavior.

When using Firefox off-network (not on a corporate network where domain controllers are available) , Firefox should prompt for credentials (NTLM) and accept them (pass them to the requesting application).

With versions of Firefox released after 3.5.9 (3.5.9 is the last working version I can verify), but specifically with 3.6.3, off-network credentials prompts are not working.  Firefox is prompting for credentials, but is not accepting them.  This process will repeat until the user decides not to enter credentials and presses "Cancel" on the authentication prompt.  At this point access to the application is denied.

Reproducible: Always

Steps to Reproduce:
1.Open URL configured for single sign-on from any PC or Mac (it doesn't matter if it is domain joined or not)
2.Enter credentials at prompt
3.
Actual Results:  
Credentials are never accepted and are continually prompted for.

Expected Results:  
Credentials should be passed to the requesting application.

Credentials should be passed to the requesting application.

Comment 1

[Matthias Versen [:Matti]]

Please retest with a 1.9.2 branch nightly build because bug 542318 could have fixed that (3.6.3 should not contain the fix)
Please create and attach a http with the instructions given in bug 542318 f the nightly doesn't fix it.

Comment 2

[Jeff Davalos]

Matthias, how do I obtain/install the 1.9.2 branch nightly build?

Comment 3

[Robert Longson [:longsonr]]

http://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/

<date>-mozilla-1.9.2 builds are branch nightlies.

Comment 4

[Jeff Davalos]

I have tried:
firefox-3.6.3pre.en-US.win32.zip
firefox-3.6.4pre.en-US.win32.zip
firefox-3.6.5pre.en-US.win32.zip

but the same results are seen:  continual prompts for credentials (credentials are not accepted).

How do I provide http information?

Comment 5

[Jeff Davalos]

Can someone provide direction??

Comment 6

[Boris Zbarsky [:bzbarsky]]

> How do I provide http information?

See http://www.mozilla.org/projects/netlib/http/http-debugging.html

This could be related to bug 556291 as well, possibly....  Honza, can you take a look?

Comment 7

[Honza Bambas (:mayhemer)]

Will check the log when it is available.  Davalos, could you please also add a log module 'timestamp' when creating the log? (i.e.: NSPR_LOG_MODULES=timestamp,nsHttp:5,...).  Thanks.

Comment 8

[Stefan]

If you are using a Proxy, then this might be a Duplicate of Bug 602814

Comment 9

[Honza Bambas (:mayhemer)]

Did fixing bug 570496 helped fixed this issue?

Releasing this bug for now as also no additional info needed had been added so far.