Version: Apache/2.4.17 (Win64) mod_authn_ntlm/1.0.0 OpenSSL/1.0.2d
We have a simple page which is behind windows authentication for SSO.
When a user tries to get to it with Safari browser it keeps on prompting them for their network credentials even when correct information is entered. When the same user uses FireFox or Chrome or IE it works.
This becomes an issue as most of the users will be using iPad to get into the application.
This is what I see in the logs:
[ssl:debug] [pid 12084:tid 2572] ssl_engine_kernel.c(238): [client xx.yy.77.197:38339] AH02034: Initial (No.1) HTTPS request received for child 249 (server example.com:443)
[authz_core:debug] [pid 12084:tid 2572] mod_authz_core.c(806): [client xx.yy.77.197:38339] AH01626: authorization result of Require valid-user : denied (no authenticated user yet)
[authz_core:debug] [pid 12084:tid 2572] mod_authz_core.c(806): [client xx.yy.77.197:38339] AH01626: authorization result of <RequireAny>: denied (no authenticated user yet)
[auth_ntlm:debug] [pid 12084:tid 2572] mod_ntlm_authentication.c(496): [client xx.yy.77.197:38339] SSPI00001: Entering authenticate_sspi_user()
Safari doesn't remeber the credentials. So it prompts for every resource that is in that page ( image, css, etc.) I wasn't able so far to solve that problem for myself.