Comments on Confessions of a Passionate Tester: How to handle the Windows Authentication pop-up wi...

Hmm... I'm not sure about this, what about whe...

2011-10-24T10:25:08.762-04:00

Hmm... I'm not sure about this, what about when your testing application is not on your own machine but on some remote server...how to locate this authentication window or to skip it, but if you skip this authentication window, in this case we have big security issue. Aren't we?

Hi Dawn, 1000 thanks for this great post, you save...

2011-10-14T04:08:57.360-04:00

Hi Dawn,
1000 thanks for this great post, you save my life ... well, at least my week ;-) - a comment to share with others: I follow your instructions and at the end, I copy-paste the generated firefox profile to my \Lib\site-packages\SeleniumLibrary\firefoxprofile folder that is used when I run Robotframework test suites.

Hi Anoop- If you do not create a custom FireFox p...

2011-03-16T10:09:44.735-04:00

Hi Anoop-

If you do not create a custom FireFox profile, then the server that is asking for authentication will nto be in the "trusted sites" list and it will not work. The section where you go into the about:config and search for ntlm is effectively considering the server under test a "trusted site" for that profile (which stops the authentication dialog from appearing).

I am not sure which part you think is a security vulnerability, but adding this web server to a "trusted sites" list is something you have to do manually, and presumably you would only do that if you are inside a protected network, for example.

Hi Dawn, I tried your steps without creating a ne...

2011-03-16T06:30:20.993-04:00

Hi Dawn,
I tried your steps without creating a new firefox profile to know whether its works fine. Unfortunately it didn't. Is it works only in customized firefox profile?

BTW.. It seems to be security vulnerability from the FireFox side. Is it?

Thanks a ton Dawn!! It worked for me!!!!

2010-05-27T10:22:26.503-04:00

Thanks a ton Dawn!!
It worked for me!!!!

Hi Menty666 and Mari-- To the best of my knowledg...

2010-05-07T19:42:44.374-04:00

Hi Menty666 and Mari--

To the best of my knowledge, if you enter the trusted uri's, there is nowhere to pt credentials in. My guess at this point is that it will use the credentials of the logged in user when opening the browser window.

Mari, I am glad to hear that something worked for you.

Well, it seems that with that method, the http://u...

2010-05-07T16:43:33.978-04:00

Well, it seems that with that method, the http://user:password@server:port/something/... method works!

Thanks a lot, everything works just fine here for me now!

I'd like to know the same as menty666. Where d...

2010-05-07T16:28:12.401-04:00

I'd like to know the same as menty666. Where do you put the credentials to authenticate?

Dawn, your post is pretty interesting considering I have the same issue here.

out of curiosity, where do you then put in the cre...

2010-04-16T11:09:17.841-04:00

out of curiosity, where do you then put in the credentials? It seems the profile change says 'don't ask for this URI', but the server still needs to know who you are, right?

Hi Jussi-- I think that if I fought hard enough...

2010-03-16T21:05:18.231-04:00

Hi Jussi--

I *think* that if I fought hard enough, I could *probably* get it arranged to have it turned off at my current place. However, after reading about other people struggling with this issue, I felt it was worth treating as if it's not possible :)

I'd love to hear more about how these auths work. Are there different types of Windows Integrated auth -- ones that use AD, and ones that don't? How do they work? Can we work around them as test automators?

Hmm, to me that authentication method just doesn&#...

2010-03-16T17:43:57.412-04:00

Hmm, to me that authentication method just doesn't sound testable. I might raise an issue (that might get outright rejected) that a more testable auth method would be preferred.

Of course, if the auth relies on Active Directory then you are just out of lck ;-)