91117 - failure to authenticate

Status: VERIFIED FIXED

(Core :: Networking: HTTP, defect)

Description

[Allin Cottrell]

Using Mozilla 0.92, can't log onto campus information system.  
Prompted for login and password, but this just loops.  I think the
system is java-based.  Connection is on port 443.
Works OK with Netscape Communicator 4.77 and lower.
After failed login attempts, netstat shows open connections from
Mozilla to port 443 on the server in question.

Comment 1

[hirata masakazu]

could be a cookies problem like bug 91238?

Comment 2

[Mitchell Stoltz (not reading bugmail)]

We can't do much about fixing the bug if we can't reproduce it. We need some
more details, at least. Does the login involve java? Does it involve SSL
(https)? Is the password prompt on a webpage, or does it come up in a dialog?
What does the dialog look like? Is this campus information system accessible
from the outside world? If not, can you give us an example we can access?

Comment 3

[Allin Cottrell]

Sorry, here's some more detail.  I'm afraid you won't be able to test
the page directly, since it's an intranet thing (over which I have
no control).

* I go to the URL http://www.wfu.edu/WIN/WinLaunchPage.html
* I want to follow the link "Log on to WIN"; I notice that the
  token in the status bar corresponding to this link is
  "javascript:createWin()".
* I click the link and get (a) a new, blank, mozilla window, plus
  (b) a separate dialog box, prompting for "username and password
  for WFU Intranet (WIN) at win.wfu.edu:443" (also shows password
  manager buttons beneath).
* I complete the dialog box and press OK.  Another instance of the
  dialog box immediately appears.  This continues if I complete the
  dialog more than once.
* When I finally press Cancel in the dialog box, to get out of the
  loop, the new mozilla window displays the text "No validation
  token presented".

As I mentioned previously, Netscape 4.7X gets into this intranet
system OK.

Comment 4

[Mitchell Stoltz (not reading bugmail)]

Sounds like http basic-auth, over to Networking. Allin, is https involved
anywhere? Ever see the lock icon closed during this process?

Comment 5

[Allin Cottrell]

I can't find any evidence that https is involved.
When I log on using Netscape 4.77 the lock icon is
not shown as closed in the _original_ window.
(The intranet material is displayed in a new window 
that doesn't have a status bar or lock icon.)

Comment 6

[benc]

Mitchell: if it's basic auth over HTTPS, analysis will be a pain.

Allin: Can we start with a screen snapshot?

Comment 7

[Allin Cottrell]

Attachment: archive containing jpeg screenshots

Comment 8

[Allin Cottrell]

Bug is still present in Mozilla 0.93.  I tried doing my own build of this
version -- got the same problem but some info that I hope might be helpful.

* excerpt from mozilla trace *
Document javascript:createWin() loaded successfully
WARNING: js returned no result -- not replacing window contents, file nsURILoade
r.cpp, line 186
we don't handle eBorderStyle_close yet... please fix me
WEBSHELL+ = 6
Disabling Quirk StyleSheet
nsWidget::~nsWidget() of toplevel: 19 widgets still exist.
WEBSHELL- = 5
###!!! ASSERTION: NS_ENSURE_TRUE(!mIsPending) failed: '!mIsPending', file nsHttp
Channel.cpp, line 1937
###!!! Break: at file nsHttpChannel.cpp, line 1937
we don't handle eBorderStyle_close yet... please fix me
WEBSHELL+ = 6
Disabling Quirk StyleSheet
nsWidget::~nsWidget() of toplevel: 19 widgets still exist.
WEBSHELL- = 5
Disabling Quirk StyleSheet
Enabling Quirk StyleSheet
Document https://win.wfu.edu/win/app.wincore.LaunchWIN loaded successfully
WEBSHELL- = 4
WEBSHELL- = 3
nsWidget::~nsWidget() of toplevel: 14 widgets still exist.
*end excerpt *

This the document that Mozilla is failing on is indeed https.
(Despite the "loaded successfully" message I'm getting the message
I reported previously about no authentication token presented.)

Comment 9

[André Dahlqvist]

Since you can only test this yourself Allin, can you please get a recent nightly
build and see if you can still reproduce this problem? The most recent nightly
builds of mozilla are always available from
http://ftp.mozilla.org/pub/mozilla/nightly/latest-trunk/.

Please test it and report your findings here.

Comment 10

[Allin Cottrell]

Fixed in the nighly build 2001091108!  Great.

Comment 11

[John Unruh]

Verified per reporter's comment.