Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Request is not forwarded on first attempt in Chrome and Firefox #37

Open
uabajwah opened this issue Aug 7, 2018 · 2 comments
Open

Request is not forwarded on first attempt in Chrome and Firefox #37

uabajwah opened this issue Aug 7, 2018 · 2 comments

Comments

@uabajwah
Copy link

uabajwah commented Aug 7, 2018

I am facing an issue when using mod_authn_ntlm. It is working fine on edge and IE but when I try this on chrome and firefox it doesn't work as expected. Let me explain the issue.

we have an application which is running on https and we have enabled NTLM authentication. By providing all the settings as mentioned in the documentation we are able to access our application within the domain flawlessly. however when we try to access the application outside of the domain and providing valid credentials on chrome and firefox the first request is sent and popup is prompted for username and password to get logged in when provided the request which is in pending state fails and our application's normal login page is visible if we refresh the page or close the login button a new Login request is made and without providing any username or password it is successful.

I want to know which thing is causing the issue. Below are the settings that I made

<Location ~ "/auth/(login|logoutall)" >
	#AllowOverride None
	AuthName "Private location"
	AuthType SSPI
	NTLMAuth On
	NTLMAuthoritative On
	<RequireAll>
		<RequireAny>
			Require valid-user
			#require sspi-user EMEA\group_name
		</RequireAny>
		<RequireNone>
			Require user "ANONYMOUS LOGON"
			Require user "NT-AUTORITÄT\ANONYMOUS-ANMELDUNG"
		</RequireNone>
	</RequireAll>
	# use this to add the authenticated username to your header
	# so any backend system can fetch the current user
	# rewrite_module needs to be loaded then
	RewriteEngine On
	RewriteCond %{LA-U:REMOTE_USER} (.+)
	RewriteRule . - [E=RU:%1]
	RequestHeader set DOMAIN_USER %{RU}e
</Location>

stuck with this. hoping to see the response at earliest

@JBlond
Copy link
Contributor

JBlond commented Aug 7, 2018

The formated version of the config https://gist.github.com/JBlond/ceafae63ef99fecd5c22cb8168a56fa5

@YvesR
Copy link

YvesR commented May 23, 2019

When you do enter credentials from outside the domain you add the domain to username?
This is mandatory in this case.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants