Avatar for Username

Caută ajutor

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Află mai multe

Acest fir de discuție a fost arhivat. Adresează o întrebare nouă dacă ai nevoie de ajutor.

Firefox v30 does not handle NTLM v2 properly

  • 4 răspunsuri
  • 5 au această problemă
  • 2 vizualizări
  • Ultimul răspuns de tomb-11

tomb-11
tomb-11
more options

Following upgrade to Firefox v30, with network.negotiate-auth.allow-insecure-ntlm-v1 defaulting to 'false', users are unable to authenticate, even though NTLM v2 is being used. NTLM v1 had to be re-enabled for backward compatibility and network.negotiate-auth.allow-insecure-ntlm-v1 had to be set to 'true' for Firefox to support authentication.

Following upgrade to Firefox v30, with network.negotiate-auth.allow-insecure-ntlm-v1 defaulting to 'false', users are unable to authenticate, even though NTLM v2 is being used. NTLM v1 had to be re-enabled for backward compatibility and network.negotiate-auth.allow-insecure-ntlm-v1 had to be set to 'true' for Firefox to support authentication.

Toate răspunsurile (4)

user633449
user633449
more options

NTLMv2 won't work on Firefox on non-windows machines.

tomb-11
tomb-11 Deținătorul întrebării
more options

That should be fixed.

user633449
user633449
more options

https://developer.mozilla.org/en-US/Firefox/Releases/30/Site_Compatibility#Security and the related links should be interesting.

tomb-11
tomb-11 Deținătorul întrebării
more options

Release notes for v30 state: "network.negotiate-auth.allow-insecure-ntlm-v1 

   Introduced in Forefox 30 on April 25th, 2014, disables use of our own internal implementation of NTLM module that talks only NTLMv1."

For Firefox to be a viable browser in corporate networks, the NTLM module needs to be updated to talk NTMLv2.