NTLM v2 authentication

Support and discussions for the x86/x64 Linux version of Pale Moon and specific Linux distribution questions related to the browser.

Moderator: trava90

Forum rules
If your question is about general use of the browser and not specific to Linux, then please use the General Support board.
Locked
Anon658153

NTLM v2 authentication

Post by Anon658153 » 2016-01-29, 00:56

Is NTLM v2 authentication enabled on the Linux build of Pale Moon? It's not working for me.

Steps to reproduce:

1. Loading a website in Pale Moon on Linux that requires NTLM v2 only authentication will receive a 401 unauthorized error and no password prompt.
2. Enabling the option "network.negotiate-auth.allow-insecure-ntlm-v1" and loading the same site gives a password prompt, but valid credentials are not accepted.
3. Loading the same site with Firefox or Chrome on Linux gives a password prompt and valid credentials are accepted.

I used the pminstaller.sh script to install Pale Moon.

Thanks.

User avatar
trava90
Contributing developer
Contributing developer
Posts: 1627
Joined: 2013-05-20, 18:19
Location: Earth
Contact:

Re: NTLM v2 authentication

Post by trava90 » 2016-01-30, 20:35

As far as I can tell, Pale Moon on Linux does not currently support NTLM v2. I'll work on a patch for this and will contact you via PM with a build to test if you're willing.

(For reference: bug #423758)

Anon658153

Re: NTLM v2 authentication

Post by Anon658153 » 2016-01-31, 01:08

If you write a patch for it I'd be happy to test it for you. I don't currently have a build environment for Pale Moon but I could probably set one up in a virtual machine over the next couple of days.

Thanks.

Anon658153

Re: NTLM v2 authentication

Post by Anon658153 » 2016-01-31, 18:16

Trava90: I got your PM and downloaded your test build. It works to authenticate against my test server configured for NTLM v2 only authentication. I tested with both my existing profile and a new profile created with the test version.

Thanks for your quick response. I didn't expect a test build until sometime later this week at the earliest. :thumbup: :D

For reference, the test server I'm using is a Windows Server 2012 R2 VM with Active Directory and IIS 8.5. LAN Manager authentication level is set to "Send NTLMv2 response only. Refuse LM & NTLM" in the default domain poilicy. I've enabled authentication on the default site in IIS.

User avatar
trava90
Contributing developer
Contributing developer
Posts: 1627
Joined: 2013-05-20, 18:19
Location: Earth
Contact:

Re: NTLM v2 authentication

Post by trava90 » 2016-02-01, 03:06

Great, glad to hear it works! :thumbup: I've submitted a pull request for this to be added in a future version on Pale Moon.

Locked