Page 1 of 1

NTLM v2 authentication

Posted: 2016-01-29, 00:56
by Anon658153
Is NTLM v2 authentication enabled on the Linux build of Pale Moon? It's not working for me.

Steps to reproduce:

1. Loading a website in Pale Moon on Linux that requires NTLM v2 only authentication will receive a 401 unauthorized error and no password prompt.
2. Enabling the option "network.negotiate-auth.allow-insecure-ntlm-v1" and loading the same site gives a password prompt, but valid credentials are not accepted.
3. Loading the same site with Firefox or Chrome on Linux gives a password prompt and valid credentials are accepted.

I used the pminstaller.sh script to install Pale Moon.

Thanks.

Re: NTLM v2 authentication

Posted: 2016-01-30, 20:35
by trava90
As far as I can tell, Pale Moon on Linux does not currently support NTLM v2. I'll work on a patch for this and will contact you via PM with a build to test if you're willing.

(For reference: bug #423758)

Re: NTLM v2 authentication

Posted: 2016-01-31, 01:08
by Anon658153
If you write a patch for it I'd be happy to test it for you. I don't currently have a build environment for Pale Moon but I could probably set one up in a virtual machine over the next couple of days.

Thanks.

Re: NTLM v2 authentication

Posted: 2016-01-31, 18:16
by Anon658153
Trava90: I got your PM and downloaded your test build. It works to authenticate against my test server configured for NTLM v2 only authentication. I tested with both my existing profile and a new profile created with the test version.

Thanks for your quick response. I didn't expect a test build until sometime later this week at the earliest. :thumbup: :D

For reference, the test server I'm using is a Windows Server 2012 R2 VM with Active Directory and IIS 8.5. LAN Manager authentication level is set to "Send NTLMv2 response only. Refuse LM & NTLM" in the default domain poilicy. I've enabled authentication on the default site in IIS.

Re: NTLM v2 authentication

Posted: 2016-02-01, 03:06
by trava90
Great, glad to hear it works! :thumbup: I've submitted a pull request for this to be added in a future version on Pale Moon.