ClearOS Bug Tracker


View Issue Details Jump to Notes ] Issue History ] Print ]
IDProjectCategoryView StatusDate SubmittedLast Update
0001890ClearOSapp-web-proxy - Web Proxypublic2014-08-06 15:222014-11-13 10:18
Reporteruser2 
Assigned Touser2 
PrioritynormalSeverityminorReproducibilityhave not tried
StatusclosedResolutionfixed 
PlatformOSOS Version
Product Version 
Target Version6.6.0 Beta 2Fixed in Version6.6.0 Beta 2 
Summary0001890: Firefox authentication issues with NTLM
DescriptionReported via chat:

What appears to happen is that when you are using an NTLM authentication mechanism that when you use Firefox it will process the auth methods in order. IE will simply use both and then succeed but Firefox will prompt for username and password. If you hit cancel, it will let you through but then it re-prompts you for each object...hitting cancel enough times will make it work.

It seems that if we merely change the order of the squid_auth.conf file to have the NTLM method first in environments with NTLM that the bug goes away.
TagsNo tags attached.
Attached Files

- Relationships

-  Notes
(0001265)
dloper (administrator)
2014-08-06 18:31
edited on: 2014-08-06 18:32

Changing this:

# This file is managed by the ClearOS API. Use squid.conf for customization.
auth_param basic children 30
auth_param basic realm ClearOS Professional - Web Proxy
auth_param basic credentialsttl 2 hours
auth_param basic program /usr/lib64/squid/pam_auth
external_acl_type system_group ipv4 %LOGIN /usr/lib64/squid/squid_unix_group -p
# NTLM
auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp --require-membership-of=DOMAIN+web_proxy_plugin
auth_param ntlm children 30
auth_param ntlm keep_alive on


To THIS:

# NTLM
auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp --require-membership-of=DOMAIN+web_proxy_plugin
auth_param ntlm children 30
auth_param ntlm keep_alive on
# This file is managed by the ClearOS API. Use squid.conf for customization.
auth_param basic children 30
auth_param basic realm ClearOS Professional - Web Proxy
auth_param basic credentialsttl 2 hours
auth_param basic program /usr/lib64/squid/pam_auth
external_acl_type system_group ipv4 %LOGIN /usr/lib64/squid/squid_unix_group -p

Seems to fix the problem.


- Issue History
Date Modified Username Field Change
2014-08-06 15:22 user2 New Issue
2014-08-06 15:23 user2 Status new => confirmed
2014-08-06 18:31 dloper Note Added: 0001265
2014-08-06 18:32 dloper Note Edited: 0001265 View Revisions
2014-11-11 21:11 user2 Status confirmed => resolved
2014-11-11 21:11 user2 Fixed in Version => 6.6.0 Beta 2
2014-11-11 21:11 user2 Resolution open => fixed
2014-11-11 21:11 user2 Assigned To => user2
2014-11-13 10:18 user2 Status resolved => closed