Received: (qmail 46735 invoked by uid 501); 18 Apr 2001 13:33:09 -0000 Message-Id: <20010418133309.46734.qmail@apache.org> Date: 18 Apr 2001 13:33:09 -0000 From: Jamie Wilson Reply-To: jamie@jtwis.com To: submit@bugz.apache.org Subject: IE 5.5 Possible Authentication Problem X-Send-Pr-Version: 3.110 >Number: 7584 >Category: mod_auth-any >Synopsis: IE 5.5 Possible Authentication Problem >Confidential: no >Severity: non-critical >Priority: medium >Responsible: apache >State: closed >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: apache >Arrival-Date: Wed Apr 18 06:40:01 PDT 2001 >Closed-Date: Mon Apr 23 11:40:46 PDT 2001 >Last-Modified: Mon Apr 23 11:40:46 PDT 2001 >Originator: jamie@jtwis.com >Release: 1.3.19 >Organization: >Environment: SunOS master 5.8 Generic_108528-05 sun4u sparc SUNW,Ultra-250 gcc version 2.95.2 19991024 (release) >Description: I am seeing a problem with clients who are using IE 5.5 and Windows 98. When they try to access a mod_auth protected page, they instantly get the 401 ErrorDocument, and are never prompted for a Username and Password. Looking in the access_log shows the following: (client instantly fails) 65.27.32.16 - - [15/Apr/2001:21:20:23 -0400] "GET /news HTTP/1.0" 401 2316 "http://www.newsranger.com" "Mozilla/4.0 (compatibl e; MSIE 5.5; Windows 98)" 65.27.32.16 - - [15/Apr/2001:21:20:24 -0400] "GET /images/logo.jpg HTTP/1.0" 304 - "http://www.newsranger.com/news" "Mozilla/4 .0 (compatible; MSIE 5.5; Windows 98)" 65.27.32.16 - - [15/Apr/2001:21:20:24 -0400] "GET /images/submit.jpg HTTP/1.0" 304 - "http://www.newsranger.com/news" "Mozilla /4.0 (compatible; MSIE 5.5; Windows 98)" All client patches are installed on the PC. HTTP/1.1 is turned off in IE. Have also tried adding this to httpd.conf with no luck: BrowserMatch "MSIE 5\." downgrade-1.0 nokeepalive force-no-vary I have snoop output if it is needed to analyze this problem. >How-To-Repeat: Using IE 5.5 and Windows 98, go to http://www.newsranger.com/news 401 ErrorDocument is instantly displayed. >Fix: Clients can use any other browser (including Mozilla 6) and it works 100% fine. >Release-Note: >Audit-Trail: State-Changed-From-To: open-feedback State-Changed-By: marc State-Changed-When: Wed Apr 18 09:33:40 PDT 2001 State-Changed-Why: It works fine for me with IE that identifies itself as IE 5.50.4522.1800 on W2K. I don't see anything wrong in the output the server is sending, so it could be some wacky client bug. Please send the snoop output and I can double check the server isn't doing anything wrong. From: "Jamie [jtwis.com]" To: "Jamie [jtwis.com]" Cc: Subject: RE: mod_auth-any/7584: IE 5.5 Possible Authentication Problem Date: Thu, 19 Apr 2001 09:20:15 -0400 =20 I would certainly guess this is an IE 5.5 specific bug, but maybe=20 it's something apache can handle better? I would have never=20 reported this, but I have seen so many clients report the same=20 exact problem. Here is the URL to snoop output and our access_log: http://www.jtwis.com/apache/ > > -----Original Message----- > > From: marc@apache.org [mailto:marc@apache.org] > > Sent: Wednesday, April 18, 2001 12:34 PM > > To: apache-bugdb@apache.org; jamie@jtwis.com; marc@apache.org > > Subject: Re: mod_auth-any/7584: IE 5.5 Possible Authentication = Problem > >=20 > >=20 > > [In order for any reply to be added to the PR database, you need] > > [to include in the Cc line and make sure the] > > [subject line starts with the report component and number, with ] > > [or without any 'Re:' prefixes (such as "general/1098:" or ] > > ["Re: general/1098:"). If the subject doesn't match this ] > > [pattern, your message will be misfiled and ignored. The ] > > ["apbugs" address is not added to the Cc line of messages from ] > > [the database automatically because of the potential for mail ] > > [loops. If you do not include this Cc, your reply may be ig- ] > > [nored unless you are responding to an explicit request from a ] > > [developer. Reply only with text; DO NOT SEND ATTACHMENTS! ] > >=20 > >=20 > > Synopsis: IE 5.5 Possible Authentication Problem > >=20 > > State-Changed-From-To: open-feedback > > State-Changed-By: marc > > State-Changed-When: Wed Apr 18 09:33:40 PDT 2001 > > State-Changed-Why: > > It works fine for me with IE that identifies itself as IE=20 > > 5.50.4522.1800 on W2K. I don't see anything wrong in the output=20 > > the server is sending, so it could be some wacky client bug. =20 > > Please send the snoop output and I can double check the server=20 > > isn't doing anything wrong. > >=20 > >=20 From: "Jamie [jtwis.com]" To: Cc: Subject: RE: mod_auth-any/7584: IE 5.5 Possible Authentication Problem Date: Thu, 19 Apr 2001 09:28:06 -0400 Here is some more information on the specific client version: Help->About Internet Explorer: Version: Customized:5.50.4522.1800C Update-Versions:SP1;Q279328;Q286045; Alsom going directly to a password protected file yields the same = result, i.e. going to http://www.newsranger.com/news/index.html gives the same 401 as going to http://www.newsranger.com/news From: "Jamie [jtwis.com]" To: "Jamie [jtwis.com]" , Cc: Subject: RE: mod_auth-any/7584: IE 5.5 Possible Authentication Problem Date: Sat, 21 Apr 2001 11:12:58 -0400 Another client version: IE 5 5.50.4134.0600=20 State-Changed-From-To: feedback-closed State-Changed-By: marc State-Changed-When: Mon Apr 23 11:40:42 PDT 2001 State-Changed-Why: I can see no problems in the response that Apache is generating in the given snoop output, so this is almost certainly some client bug; there is no obvious way to work around it without knowing what type of crack IE is on, so I'm afraid we can't do much. The only random suggestion I have is to try removing the http-equiv meta tags in your HTML, especially the charset one. >Unformatted: [In order for any reply to be added to the PR database, you need] [to include in the Cc line and make sure the] [subject line starts with the report component and number, with ] [or without any 'Re:' prefixes (such as "general/1098:" or ] ["Re: general/1098:"). If the subject doesn't match this ] [pattern, your message will be misfiled and ignored. The ] ["apbugs" address is not added to the Cc line of messages from ] [the database automatically because of the potential for mail ] [loops. If you do not include this Cc, your reply may be ig- ] [nored unless you are responding to an explicit request from a ] [developer. Reply only with text; DO NOT SEND ATTACHMENTS! ]