79384 - Authenticated site which bypasses auth proxy breaks subsequent proxy authentication.

Status: VERIFIED FIXED

(Core :: Networking: HTTP, defect)

Description

[Stuart Marshall]

Sorry if I'm duplicating here - but I don't think I am, I've just read through 
everything proxy related.

I'll try and give as much information here, the problem is easily repeatable on 
our local setup.

Basically : When using multiple password connections Mozilla gets very confused 
and ends up asking for proxy authentication for every GET it does from a server 
(eg. for each image).

Detailed  : I connect to the outside Internet through MS Proxy Server 2.0, 
using my standard NT username and password. Everything works fine.

I then access a site locally (ie. *NOT* through the Proxy - I've bypassed this 
in the Proxy setup), but this site uses Apache's htaccess functionality and 
requires a different username and password to that of the outgoing proxy. 
Things continue to work until I leave the local site...

Now, every page I visit requires the username and password to be entered for 
every GET. If I'm browsing external pages (through MS Proxy 2.0) then I need to 
enter my proxy username/password repeatedly. If I'm browsing locally (on the 
htaccess password protected stuff) then I need to enter this username and 
password information for every GET also.

It seems the only way to proceed is to shut down and restart - but as soon as I 
visit the two locations again I run into problems.

NB, this does *NOT* happen with NS6.x - or with any other browser I've tried. 
It has happened with every Mozilla release I've ever used though.. feel free to 
email for any additional info.

Comment 1

[Ken Snider]

Confirmed with SOCKS Proxy accessing proxy-excluded site w/authentication

Probably needs a testcase, I can't provide one in my setup. :)

Confirming. Adding to Authentication Meta.

Comment 2

[benc]

qa to me, -qawanted keyword

Other people have reported this problem, but I am still trying to nail down an
exact set of steps so I can reproduce an analyze the problem.

A couple questions:

1- Can you check if mozilla 0.9 still has this problem?

2- What are the exact steps, preferably w/ a new profile just for this bug:

- create new profile named "79384"
- configured proxy settings
- describe exact steps for where you surf, what you see, etc.
- do you have access to server logs (if you don't know how to read them, don't
post them here yet...)

NOTE: the problem sounds like it is auth related, so that you are using htaccess
is not highly important at this point.

Comment 3

[Stuart Marshall]

Answers to questions as follows :-

1. Yes - the problem definitely exists in 0.9 (now managed to test this on both 
Linux & WinNT)

2.

 - Created new profile "79384"

 - Configured Proxy -> "Manual Proxy Configuration"
                       "http proxy - hfxproxy, port 80.

 - Attempted to open http://www.mozilla.org
   ... prompted for my proxy username/password (entered as required)
   ... page loaded successfully - no problems found.

 - Now navigate to http://scotel
   - (internal machine here; note this should still at this stage fetch the 
page through the proxy - nothing bypassed here)
   ... promtped for username and password (htaccess) - note these values are 
NOT the same as my proxy username/password.
   ... page loaded successfully - no problems found.

 - Now navigate back to http://www.mozilla.org
   ... page loads successfully - no problems found. ***BUT*** (did it load from 
the cache?)

 - Click Refresh whilst still at http://www.mozilla.org

 - Mozilla prompts me for username and password (assume this is now asking for 
my ORIGINAL hfxproxy authentication)

 - Enter values as before...
 ... Page loads successfully.

 - Now navigate to http://www.yahoo.co.uk
 ... Page loads successfully.

 - Now navigate back to http://scotel/
 ... Starts to render page (renders text only)
 ... Asks for username and password for scotel (htaccess password??)

 - Enter username/password as required
 ... renders ONE image
 ... Asks again for username and password - entered as required
 ... renders ONE additional image
 ... Asks again for username and password...
 ... Eventually renders complete page.

 - Navigate back to http://www.mozilla.org
 ... renders perfectly - BUT
 ... refresh then causes a prompt for username & password (proxy)
 ... enter username and password and the page loads successfully.

 - I think you get the idea -

Here's the Apache log file for the LOCALLY accessed pages (sorry, I don't have 
access to the external stuff) :-

20.9.110.10 - stuart [10/May/2001:10:57:03 +0100] "GET / HTTP/1.0" 200 647
20.9.110.10 - stuart [10/May/2001:10:57:04 +0100] "GET /cgi-bin/tips HTTP/1.0" 2
00 422
20.9.110.10 - stuart [10/May/2001:10:57:04 +0100] "GET /cgi-bin/header HTTP/1.0"
 200 425
20.9.110.10 - - [10/May/2001:10:59:19 +0100] "GET /cgi-bin/footer HTTP/1.0" 401
497
20.9.110.10 - stuart [10/May/2001:10:59:23 +0100] "GET /cgi-bin/footer HTTP/1.0"
 200 300
20.9.110.10 - stuart [10/May/2001:10:59:34 +0100] "GET /cgi-bin/transhist HTTP/1
.0" 200 40461
20.9.110.10 - stuart [10/May/2001:10:59:38 +0100] "GET /images/csc.gif HTTP/1.0"
 200 1184
20.9.110.10 - stuart [10/May/2001:10:59:38 +0100] "GET /images/paper.jpg HTTP/1.
0" 200 1878

What I do notice is that on the 10/May/2001:10:59:19 +0100 request there's no 
username (stuart) - does this mean the first request AFTER visiting mozilla.org 
in my example "forgot" the username/password for the local site?

Note I get EXACTLY the same result if I bypass our external proxy for local 
sites.

Comment 4

[Gagan]

darin fixed (or is fixing) something related to authentication recently. Frames
is similar behavior to proxies. cc'ing him.

Comment 5

[neeti]

-->darin

Comment 6

[neeti]

gagan mentioned you are working on this

Comment 7

[Darin Fisher]

can this problem be verified on a recent nightly build (post 5/11)?

Comment 8

[Stuart Marshall]

Checked with Nightly build (05/16), problem still there.

Comment 9

[Darin Fisher]

there were some authentication caching bugs fixed in the past couple weeks...
can you reproduce this problem using a recent nightly build?

Comment 10

[Stuart Marshall]

Cannot reproduce on build from 06/07/00 - looks to be fixed!

:-)

As far as I'm concerned it can be closed (didn't want to do this incase others
need to verify this).

Comment 11

[Darin Fisher]

marking FIXED per reporters comments.

Comment 12

[benc]

VERIFIED:
I did a lot of surfing while running when running Proxy functionals, and didn't
see this.