The Apache Haus Forum

Forum Topics => Apache 2.4 => Topic started by: medico6601 on October 22, 2017, 02:46:23 PM

Title: Problem with mod_authn_ntlm on Safari
Post by: medico6601 on October 22, 2017, 02:46:23 PM
Hi there, I'm Medy
Version: Apache/2.4.17 (Win64) mod_authn_ntlm/1.0.0 OpenSSL/1.0.2d ufabet (http://www.ufa365.com/สมัครufabet/)
We have a simple page which is behind windows authentication for SSO.
When a user tries to get to it with Safari browser it keeps on prompting them for their network credentials even when correct information is entered. When the same user uses FireFox or Chrome or IE it works.
This becomes an issue as most of the users will be using iPad to get into the application.
This is what I see in the logs:
[ssl:debug] [pid 12084:tid 2572] ssl_engine_kernel.c(238): [client xx.yy.77.197:38339] AH02034: Initial (No.1) HTTPS request received for child 249 (server example.com:443 สมัครufabet (http://www.ufa365.com/สมัครufabet/)
[authz_core:debug] [pid 12084:tid 2572] mod_authz_core.c(806): [client xx.yy.77.197:38339] AH01626: authorization result of Require valid-user : denied (no authenticated user yet)
[authz_core:debug] [pid 12084:tid 2572] mod_authz_core.c(806): [client xx.yy.77.197:38339] AH01626: authorization result of <RequireAny>: denied (no authenticated user yet ทางเข้าufabet (http://www.ufa365.com/สมัครufabet/)
[auth_ntlm:debug] [pid 12084:tid 2572] mod_ntlm_authentication.c(496): [client xx.yy.77.197:38339] SSPI00001: Entering authenticate_sspi_user()
Title: Re: Problem with mod_authn_ntlm on Safari
Post by: Gregg on October 23, 2017, 08:10:10 PM
Being this is a bug in Safari that I thought got fixed a year ago, don't know what to tell you. There was never a workaround that I heard worked. I do wonder if mod_authn_socache (http://httpd.apache.org/docs/2.4/mod/mod_authn_socache.html) would help.
Title: Re: Problem with mod_authn_ntlm on Safari
Post by: mario on November 15, 2017, 10:12:50 AM
That is a *coff coff* "feature" of the safari. Is does not cache the credentials. So it asks for the credentials for every item on your page ( css,js,images, etc.).

I never got that working proper with safari.