NTLM authentication information - there is never any prompt or place to enter credentials
We are testing using Android tablets in our current IT infrastructure and we're running into a few snags. We can join the network, we have the proxy set in the Wi-Fi settings, and we are able to navigate to internal resources by their IP address, however we cannot navigate through the proxy (Smoothwall) using NTLM authentication.
Trying to navigate via the stock browser lands us on our proxies default NTLM Authentication Failed page (as to be expected, as there is no support for NTLM on the stock browser) however via Firefox I simply get the stock 'Unable to Connect' page.
I have tried multiple options in the about:config page (network.automatic-ntml-auth.allow-non-fqdn, network.automatic-ntml-auth.allow-proxies, network.automatic-ntml-auth.trusted-uris, network.ntlm.send-Im-response, network.negotiate-auth.delegation-uris) but have had no success.
There seems to be nowhere in Firefox's settings to input proxy authentication credentials, and there is never any prompt to do so when trying to browse the internet. I have deleted the cache (and all other settings) to ensure I am not returning a cached copy and still it does not work. What settings do I need to set in order to navigate through the proxy with NTLM authentication?
Samsung Galaxy Tab (GT-P1000), Android 2.3.3 (Gingerbread), Firefox 25.0.1
All Replies (5)
does it make a difference when you set the proxy again in firefox?
https://support.mozilla.org/en-US/questions/954078#answer-419305
Hi, In Firefox Beta version 26, at the moment there is:
network.proxy.no_proxies_on
that requires a string for a dns or ip address.
Or other solutions:
- http://www.liquidstate.net/blog/techn.../enabling-ntlm-authentication-single-sign-on-in-firefox/- Typing in the address here you can troubleshoot the connection by turning on debugging and setting up a port forwarding. https://developer.mozilla.org/en-US/d.../Firefox_for_Android
- Add on for version 25.01 for android [http://www.liquidstate.net/blog/techn.../enabling-ntlm-authentication-single-sign-on-in-firefox/]
If you try beta, let us know if that works, I do not have an environment to test this.
phillipp, I have set network.proxy.http, network.proxy.http_port, network.proxy.ssl and network.proxy.ssl_port (both to the ip address and port of the proxy server as all of our traffic heading to the outside web has to navigate through the proxy, no matter its destination. Unfortunately this still hasn't worked.
I also have both the proxy ip address and the domain set in network.automatic-ntlm-auth.trusted-uris. Any idea what I'm doing wrong?
Modified by SMSC
Does Smoothwall have a rule blocking traffic from Firefox? It may be a good idea to run the issue by them as well if you have tried all the firefox options and other browsers work.
Modified by guigs
I also found this:
// (bug 535193) For NTLM, just use the uri host, do not do canonical host lookups.
// The incoming serviceName is in the format: "protocol@hostname", SSPI expects
// "<service class>/<hostname>", so swap the '@' for a '/'.
ref: http://dxr.mozilla.org/mozilla-centra.../nsAuthSSPI.cpp