10

I am running a PHP site which requires windows authentication on IIS Server. The authentication is fed via Active Directory.

For some reason the site is not prompting users to login only on Firefox and only on MacOS and I am getting this page instead of a dialog window prompting to login. And the 401 page is displayed while no credentials were entered before. And still not working after clearing the browser cache and rebooting my Mac. enter image description here

I am not sure if this is a DNS issue, a server related issue, a firewall issue or a browser issue or an operarting system issue.

All the people with macs are on the same network and they are all affected (with this issue on Firefox only)

It works fine on other browsers on the Mac (Not for Firefox on the Mac), and works fine on all the browsers on Windows (including Firefox on Windows). NTLM is enabled as a provider on the server http://msdn.microsoft.com/en-us/library/aa292114(v=vs.71).aspx enter image description here

Yannick Y
  • 2,778
  • 1
  • 16
  • 22

1 Answers1

14

As part of Firefox 30′s release, Mozilla made a change to disable support for NT LAN Manager version 1 (NTLMv1) network authentication. This change affects sites using Microsoft’s SharePoint or IIS services. The Windows version of Firefox 30 should switch to using NTLMv2 authentication automatically, but NTLMv2 is not supported by Firefox on non-Windows platforms.

The result for non-Windows platforms is that access may be blocked when Firefox 30 users try to access those kinds of sites.

To Enable NTLMv1 in Firefox

  1. Open Firefox
  2. In the address bar, enter the following: about:config
  3. If prompted, click on the I’ll be careful, I promise! button.
  4. Search for the following: network.negotiate-auth.allow-insecure-ntlm-v1
  5. Once the network.negotiate-auth.allow-insecure-ntlm-v1 setting is located, double-click on the setting. That should change the entry in the Value column from false to true.
  6. Once the network.negotiate-auth.allow-insecure-ntlm-v1 setting has been set to true, close the Firefox browser window.
  7. Open a new browser window and attempt to access the SharePoint-based or IIS-backed site. You should now be able to log in.

:)

Source: http://derflounder.wordpress.com/2014/06/13/firefox-30-blocks-access-on-non-windows-platforms-to-sharepoint-and-iis-sites/

Yannick Y
  • 2,778
  • 1
  • 16
  • 22
  • 1
    Also set "network.negotiate-auth.allow-non-fqdn" to true if you want to use an internal website without refering to it via fully qualified domain name – doublehelix Jan 26 '15 at 17:36
  • In my Firefox 37.0.1 on Mac OSX, the parameter mentioned by @Yannick didn't exist. However, I found a `network.auth.force-generic-ntlm-v1` boolean parameter, and setting this to true now allows my corporate Sharepoint pages to load again properly. Thanks! – Phil Ryan Apr 20 '15 at 04:14