Hi there, I'm Medy
Version: Apache/2.4.17 (Win64) mod_authn_ntlm/1.0.0 OpenSSL/1.0.2d ufabet (http://www.ufa365.com/%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3ufabet/)
We have a simple page which is behind windows authentication for SSO.
When a user tries to get to it with Safari browser it keeps on prompting them for their network credentials even when correct information is entered. When the same user uses FireFox or Chrome or IE it works.
This becomes an issue as most of the users will be using iPad to get into the application.
This is what I see in the logs:
[ssl:debug] [pid 12084:tid 2572] ssl_engine_kernel.c(238): [client xx.yy.77.197:38339] AH02034: Initial (No.1) HTTPS request received for child 249 (server example.com:443 สมัครufabet (http://www.ufa365.com/%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3ufabet/)
[authz_core:debug] [pid 12084:tid 2572] mod_authz_core.c(806): [client xx.yy.77.197:38339] AH01626: authorization result of Require valid-user : denied (no authenticated user yet)
[authz_core:debug] [pid 12084:tid 2572] mod_authz_core.c(806): [client xx.yy.77.197:38339] AH01626: authorization result of <RequireAny>: denied (no authenticated user yet ทางเข้าufabet (http://www.ufa365.com/%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3ufabet/)
[auth_ntlm:debug] [pid 12084:tid 2572] mod_ntlm_authentication.c(496): [client xx.yy.77.197:38339] SSPI00001: Entering authenticate_sspi_user()
Being this is a bug in Safari that I thought got fixed a year ago, don't know what to tell you. There was never a workaround that I heard worked. I do wonder if mod_authn_socache (http://httpd.apache.org/docs/2.4/mod/mod_authn_socache.html) would help.
That is a *coff coff* "feature" of the safari. Is does not cache the credentials. So it asks for the credentials for every item on your page ( css,js,images, etc.).
I never got that working proper with safari.