Join us and the lead editor of IRL, Mozilla's multi-award-winning podcast, for a behind-the-scenes look at the pod and to contribute your ideas for the next season, themed: "AI and ME." Mark your calendar and join our Community Call on Wednesday, Aug 7, 17:00–17:45 UTC. See you there!

Avatar for Username

Eheka Pytyvõha

Emboyke pytyvõha apovai. Ndorojeruremo’ãi ehenói térã eñe’ẽmondóvo pumbyrýpe ha emoherakuãvo marandu nemba’etéva. Emombe’u tembiapo imarãkuaáva ko “Marandu iñañáva” rupive.

Kuaave

Ko téma oñeñongatúma. Ejapo porandu pyahu eikotevẽramo pytyvõ.

Proxy not working

  • 6 Mbohovái
  • 0 oguereko ko apañuãi
  • 1 Hecha
  • Mbohovái ipaháva Mike Kaply

akas89
akas89
more options

Hello, from Terminal Servers, it is not possible to browse the Internet via FortiGate's explicit proxy from the Firefox browser, while there is no problem with Chrome or Edge. When the user tries to browse external sites, the proxy sends the error page "You need to authenticate to use this service". It seems that Firefox does not pass user authentication to FortiGate. The proxy authenticates users per session via Kerberos tickets.

Firefox version: 115.5.0esr

I also performed the following settings to pass the Kerberos ticket to the proxy without success: https://people.redhat.com/mikeb/negotiate/

I also noticed that it is not possible to change the "network.negotiate-auth.allow-proxies" setting from "false" to "true." Is this my problem? Is it normal that it cannot be changed?

Attached are the settings.

Thank you in advance.

Hello, from Terminal Servers, it is not possible to browse the Internet via FortiGate's explicit proxy from the Firefox browser, while there is no problem with Chrome or Edge. When the user tries to browse external sites, the proxy sends the error page "You need to authenticate to use this service". It seems that Firefox does not pass user authentication to FortiGate. The proxy authenticates users per session via Kerberos tickets. Firefox version: 115.5.0esr I also performed the following settings to pass the Kerberos ticket to the proxy without success: https://people.redhat.com/mikeb/negotiate/ I also noticed that it is not possible to change the "'''network.negotiate-auth.allow-proxies'''" setting from "false" to "true." Is this my problem? Is it normal that it cannot be changed? Attached are the settings. Thank you in advance.
Mba’erechaha japyhypyre oñondivegua

Opaite Mbohovái (6)

Mike Kaply
Mike Kaply
  • Top 25 Contributor
  • Moderator
more options

It definitely should not be locked and it should default to true.

What do you see when you go to about:policies?

akas89
akas89 Porandu apoha
more options

It was a nested GPO that blocked that function. Now it is enabled but still the user does not pass authentication to the proxy. The same settings on a Laptop allow browsing Internet via proxy.

Mike Kaply
Mike Kaply
  • Top 25 Contributor
  • Moderator
more options

So you're saying the exact same configuration works on one machine and not the other?

akas89
akas89 Porandu apoha
more options

The same configuration (Firefox version + proxy settings) works on any server/client, but does not work on a Terminal Server virtual machine (on which several users are connected at the same time).

Mike Kaply
Mike Kaply
  • Top 25 Contributor
  • Moderator
more options

I think this might be a case where opening a bug in bugzilla is the right thing.

This isn't enterprise specifically but seems to be a problem with networking

https://bugzilla.mozilla.org/enter_bug.cgi?product=Core&component=Networking

Mike Kaply
Mike Kaply
  • Top 25 Contributor
  • Moderator
more options

Were you able to open a bug?