84446 - Connection could not be established, when connecting to Microsoft ISA server

Status: RESOLVED DUPLICATE of bug 35159

(Core :: Networking: HTTP, defect)

Description

[hancik]

From Bugzilla Helper:
User-Agent: Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)
BuildID:    20010529

When I set PROXY manual to our M$ ISA server with authentification, Mozilla 
doesn't display dialog for username and password and I'm rejected by the server.
Problem is the same with Linux and Windows version.

Reproducible: Always
Steps to Reproduce:
1.Open Mozilla, configure Proxy server to MS ISA
2.Check some web site.


Actual Results:  The page cannot be displayed
There is a problem with the page you are trying to reach and it cannot be 
displayed.

Please try the following:

    * Click the Refresh button, or try again later.
    * Open the www.mozilla.org home page, and then look for links to the 
information you want.
    * If you typed the page address in the Address bar, make sure that it is 
spelled correctly.
    * Verify that the Internet access policy on your network allows you to view 
this this page.
    * If you believe you should be able to view this directory or page, please 
contact the Web site administrator by using the e-mail address or phone number 
listed on the www.mozilla.org home page.

HTTP 407 Proxy Authentication Required - The ISA Server requires authorization 
to fulfill the request. Access to the Web Proxy service is denied. (12209)
Internet Security and Acceleration Server

Technical Information (for support personnel)

    * Background:
      The gateway could not retrieve the requested page.

    * ISA Server: server.domain.com
      Via:
      URL: http://www.mozilla.org/releases/
      Time: 6/7/2001 7:17:21 AM GMT



Expected Results:  So, see the page.

Comment 1

[timeless]

does it require basic, realm, ntauth, ...?

Comment 2

[Conor Lennon]

Sounds like it might use NTLM authentification which isn't supported yet 
(Covered by Bug 23679)
Can you confirm that it uses NTLM authentification?

Comment 3

[hancik]

I don't know anything about configuration of ISA server. Am I possible to find 
out which authentification method is required by the server ?
I'm not a administrator of this server.

Comment 4

[Conor Lennon]

You can determine the authentication from the HTTP header.
Is your ISA server accessible from the internet?
There are some web sites that will display a web pages HTTP header.
I'm sure you can find a programme on the internet that you can download to
display internal HTTP headers.
I use a perl script.

Comment 5

[benc]

I've got a document that explains how to do this w/ TELNET. I have to do some
functional tests first, but I can give you something to type by the end of today.

Comment 6

[benc]

Proxy auth for NTLM is in bug 35159.

Comment 7

[Keyser Sose]

*** This bug has been marked as a duplicate of 35159 ***

Comment 8

[benc]

If you can get a trace of the attempt to connect, you shoulud see some
"authenticate lines..."

If you have one that says "NTLM", then this is a valid dupe.