Bug 1397448 - Kerberos authentication hangs the whole browser
Summary: Kerberos authentication hangs the whole browser
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: firefox
Version: 7.3
Hardware: x86_64
OS: Linux
unspecified
urgent
Target Milestone: rc
: ---
Assignee: Jan Horak
QA Contact: Desktop QE
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-11-22 14:37 UTC by Don Pellegrino
Modified: 2017-03-16 14:21 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2017-03-16 14:21:31 UTC
Target Upstream Version:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Mozilla Foundation 1014061 0 None None None 2016-11-22 14:37:07 UTC

Description Don Pellegrino 2016-11-22 14:37:07 UTC
Description of problem:

When navigating to a site hosted on Microsoft IIS that uses Kerberos authentication, the Firefox browser may hang indefinitely leading to loss of user data in other tabs.

Version-Release number of selected component (if applicable):

45.5.0

How reproducible:

Consistently reproducible in an test environment with Microsoft IIS hosting a site using Kerberos authentication. RHEL 7.3 with Firefox client having an active ticket via kinit in place. However, some sites work and some lead to a hang. Root cause is still undetermined.

Steps to Reproduce:
1. Run kinit to establish a Kerberos ticket and verify with klist
2. Navigate to a Microsoft IIS hosted site with Kerberos authentication in Firefox.
3. Observe that all of Firefox become unresponsive.

Additional info:

This behavior appears to be described in upstream bug https://bugzilla.mozilla.org/show_bug.cgi?id=1014061

Comment 2 Don Pellegrino 2016-12-05 14:59:23 UTC
It looks like the upstream bug is fixed in Firefox 49 as per the upstream bug report. Therefore, it is a question as to whether the fix is important enough to back-port to Firefox ESR and flow into RHEL.

Alternatively, Bug 1399658 represents another approach to getting upstream Firefox code available in RHEL.

Comment 3 Jan Horak 2017-03-16 14:21:31 UTC
Since we have rebased to Firefox 52 in RHEL 7.3 I think this issue should be resolved. Closing as current release. If you have different experience, do not hesitate to reopen this bug.


Note You need to log in before you can comment on or make changes to this bug.