ClearFoundation Tracker - ClearOS
View Issue Details
0001890ClearOSapp-web-proxy - Web Proxypublic2014-08-06 15:222014-11-13 10:18
user2 
user2 
normalminorhave not tried
closedfixed 
 
6.6.0 Beta 26.6.0 Beta 2 
0001890: Firefox authentication issues with NTLM
Reported via chat:

What appears to happen is that when you are using an NTLM authentication mechanism that when you use Firefox it will process the auth methods in order. IE will simply use both and then succeed but Firefox will prompt for username and password. If you hit cancel, it will let you through but then it re-prompts you for each object...hitting cancel enough times will make it work.

It seems that if we merely change the order of the squid_auth.conf file to have the NTLM method first in environments with NTLM that the bug goes away.
No tags attached.
Issue History
2014-08-06 15:22user2New Issue
2014-08-06 15:23user2Statusnew => confirmed
2014-08-06 18:31dloperNote Added: 0001265
2014-08-06 18:32dloperNote Edited: 0001265bug_revision_view_page.php?bugnote_id=1265#r143
2014-11-11 21:11user2Statusconfirmed => resolved
2014-11-11 21:11user2Fixed in Version => 6.6.0 Beta 2
2014-11-11 21:11user2Resolutionopen => fixed
2014-11-11 21:11user2Assigned To => user2
2014-11-13 10:18user2Statusresolved => closed

Notes
(0001265)
dloper   
2014-08-06 18:31   
(edited on: 2014-08-06 18:32)
Changing this:

# This file is managed by the ClearOS API. Use squid.conf for customization.
auth_param basic children 30
auth_param basic realm ClearOS Professional - Web Proxy
auth_param basic credentialsttl 2 hours
auth_param basic program /usr/lib64/squid/pam_auth
external_acl_type system_group ipv4 %LOGIN /usr/lib64/squid/squid_unix_group -p
# NTLM
auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp --require-membership-of=DOMAIN+web_proxy_plugin
auth_param ntlm children 30
auth_param ntlm keep_alive on


To THIS:

# NTLM
auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp --require-membership-of=DOMAIN+web_proxy_plugin
auth_param ntlm children 30
auth_param ntlm keep_alive on
# This file is managed by the ClearOS API. Use squid.conf for customization.
auth_param basic children 30
auth_param basic realm ClearOS Professional - Web Proxy
auth_param basic credentialsttl 2 hours
auth_param basic program /usr/lib64/squid/pam_auth
external_acl_type system_group ipv4 %LOGIN /usr/lib64/squid/squid_unix_group -p

Seems to fix the problem.