views:

879

answers:

3

Whenever I try to access a NTLM authenticated intranet site, Safari takes forever to process and then comes back with "The sever is unavailable" or if allowed by the site, loads with out authenticating. I can access these same sites with no problems in both Firefox and Internet Explorer. The sites are hosted on IIS6 and are being generated with either ASP, ASP.Net 1.1 or ASP.Net 2.0.

Any insight on why Safari choking on these sites? Are there any work-arounds to get NTLM to correctly authenticate with Safari?


Update:

In further playing with it I have determined that NTLM will work (with the page loading reasonably fast) if I am using the FQDN for the site (i.e. http://mysite doesn't work, but http://mysite.domain.prv will work). Unfortunately, this will not work due to other constraints on the project.

Does anyone know why the FQDN would work but the shorter name will not? Is this something that can be worked around or is it "Sorry out of luck"?


Update 2:

According to the Wireshark packet sniffer, safari sends a SYN to the correct severs IP address. The intranet sever responds with a SYN, ACK, to which safari sends an ACK. This is the end in communication between safari and the sever. When attempting to access the intranet site by FQDN these three packets were the same but were then followed by a HTTP GET request, which then successfully loaded the page.

Because Safari is connecting to the correct IP address, I find it hard to believe that Safari just doesn't support NetBIOS/WINS names. Additionally, because the NTLM packets are never exchanged as safari never sends the initial GET request, I'm certain that NTLM has nothing to do with this issue.

Does anyone know the status of safari's support of NetBIOS/WINS?

A: 

In a similar situation with a Java based B2B client, I was successful in using http://ntlmaps.sourceforge.net/ to traverse the proxy.

Zorantula
Are the alternatives to using ntlmaps? I'd rather not add another piece of software to the mix and I fail to see why it should go through a proxy to access the company intranet.
Nathaniel Reinhart
In my case we were unable to modify the B2B client. Until Safari or WebKit natively support NTLM, I wouldn't think there to be a better solution.
Zorantula
A: 

Any insight on why Safari choking on these sites?

Because NTLM is not a web standard. You can't expect any given web browser to support it.

Until recently only IE supported it at all. And Firefox's support has to be specifically configured.

bobince
According to Google, Safari (at least the windows incarnation of it) has supported NTLM since version 3.0.4 in late 2007.
Nathaniel Reinhart
A: 

Firefox has always been able to traverse NTLM sites. I know because I'm stuck with this god awful custom ASP solution and SharePoint site to use in our intranet... Firefox is a dream.

Apple.. fix Safari kthx?