Package: firefox Version: 74.0-1 Severity: normal Tags: patch Dear Maintainer,
Firefox invokes the winbind helper program ntlm_auth for NTLM SSO authentication but calls it without a path. This results in failure to authenticate unless firefox is explicitly invoked from /usr/bin. The issue was originally reported by David Woodhouse against Fedora [1] and has been resolved by a patch to call the absolute path [2]. [1] https://bugzilla.redhat.com/show_bug.cgi?id=689058 [2] https://src.fedoraproject.org/rpms/firefox/blob/master/f/rhbz-1173156.patch Please consider applying this patch in Debian as well. (See this comment [3] for why to prefer an absolute path over execvpe().) [3] https://bugzilla.redhat.com/show_bug.cgi?id=689058#c6 As a work-around for the typical desktop environment where firefox is invoked with the current directory set to $HOME, I verified that NTLM SSO authentication works after symlinking /usr/bin/ntlm_auth to $HOME. Regards, Peter
