Proxy authentication (Zscaler) and Firefox Sync
Hallo, my company's network as been recently upgraded with the Zscaler proxy solution. I was able to regain internet access by following that thread Firefox: This connection is untrusted + Behind corporate firewall (https://superuser.com/questions/115349/firefox-this-connection-is-untrusted-behind-corporate-firewall) . Unfortunately that dind't worked out for Firefox Sync. I'm able to log-in (verified by getting a mail from Firefox Accounts) but Firefox isn't stil able to sycn. I suspect that is somehow related to the certification signing process/getting token8gaining access what is properly blocked by zscaler:
Code:
1443703953083 FirefoxAccounts ERROR error POSTing /certificate/sign: {"code":401,"errno":109,"error":"Unauthorized","message":"Missing authentication","info":"https://github.com/mozilla/fxa-auth-server/blob/master/docs/api.md#response-format"}
Before FF 29 it seems it was possible to solve that issue see here: http://www.discourse.net/2010/12/how-to-solve-the-dreaded-firefox-sync-error-while-signing-in-problem/#comment-1358006
Asking IT to allow Firefox Sync/adding an exception is not an option. I'm glad that FF runs instead using the outdated IE 9. I'm fully aware of IT policies etc, that hasn't been a problem for some years.
All Replies (6)
If its the post error it sounds like an outbound issue, on the spot for the proxy web filtering.
Firefox Sync will try to make a connection on a timer. I am guessing you might have to add the sync urls to have permission to make those connections. These urls are listed in about:config under services.sync.clusterURL and https://token.services.mozilla.com/1.0/sync/1.5
thx I've already tried adding cluster URL in certificates -> server -> add exception but
- services.sync.clusterURL: https://sync-264-us-west-2.sync.services.mozilla.com/1.5/31260094/ "has a valid certifcate no need to download certificate
- same for https://token.services.mozilla.com/1.0/sync/1.5
may it will be different for #2 when I try it on Monday on my office PC
HI, it FF says the same on my office machine. Attached are screenshots of the 2 certificates
sync-log
1445238627600 Sync.Service INFO Loading Weave 1.43.0 1445238627603 Sync.Engine.Clients DEBUG Engine initialized 1445238627605 Sync.Engine.Clients DEBUG Resetting clients last sync time 1445238627658 Sync.Engine.Bookmarks DEBUG Engine initialized 1445238627661 Sync.Engine.Forms DEBUG Engine initialized 1445238627664 Sync.Engine.History DEBUG Engine initialized 1445238627666 Sync.Engine.Passwords DEBUG Engine initialized 1445238627668 Sync.Engine.Prefs DEBUG Engine initialized 1445238627671 Sync.Engine.Tabs DEBUG Engine initialized 1445238627671 Sync.Engine.Tabs DEBUG Resetting tabs last sync time 1445238627676 Sync.Engine.Addons DEBUG Engine initialized 1445238627677 Sync.Service INFO Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0 1445238627679 Sync.SyncScheduler DEBUG Clearing sync triggers and the global score. 1445238627680 Sync.Status DEBUG Status.service: success.status_ok => success.status_ok 1445238627680 Sync.Service DEBUG Caching URLs under storage user base: https://sync-264-us-west-2.sync.services.mozilla.com/1.5/31260094/ 1445238627680 Sync.Status DEBUG Status.service: success.status_ok => success.status_ok 1445238627680 Sync.AddonsReconciler INFO Registering as Add-on Manager listener. 1445238627680 Sync.AddonsReconciler DEBUG Adding change listener. 1445238627681 Sync.Tracker.History INFO Adding Places observer. 1445238627796 Sync.Engine.Greasemonkey DEBUG Engine initialized 1445238627799 Sync.Engine.AdblockPlus DEBUG Engine initialized 1445238627800 Sync.Status DEBUG Status.service: success.status_ok => success.status_ok 1445238629895 FirefoxAccounts DEBUG FxAccountsWebChannel registered: account_updates with origin https://accounts.firefox.com 1445238631431 Sync.Tracker.Greasemonkey WARN Changed IDs file greasemonkey contains non-object value. 1445238631525 FirefoxAccounts INFO returning partial account data as the login manager is locked. 1445238631677 FirefoxAccounts DEBUG FxAccountsProfileClient: Initialized 1445238631678 FirefoxAccounts DEBUG FxAccountsProfileClient: Requested profile 1445238631679 FirefoxAccounts DEBUG getOAuthToken enter 1445238631702 FirefoxAccounts INFO returning partial account data as the login manager is locked. 1445238631738 FirefoxAccounts DEBUG FxAccountsOAuthGrantClient Initialized 1445238631739 FirefoxAccounts DEBUG getOAuthToken fetching new token from: https://oauth.accounts.firefox.com/v1 1445238631739 FirefoxAccounts DEBUG enter getAssertion() 1445238632211 Sync.Status DEBUG Status.service: success.status_ok => success.status_ok 1445238632213 FirefoxAccounts INFO returning partial account data as the login manager is locked. 1445238632247 Sync.Service DEBUG User-Agent: Firefox/41.0.2 FxSync/1.43.0.20151014143721. 1445238632247 Sync.Service INFO Starting sync at 2015-10-19 09:10:32 1445238632247 Sync.Service DEBUG In sync: should login. 1445238632248 Sync.Status DEBUG Status.service: success.status_ok => success.status_ok 1445238632248 Sync.Status DEBUG Status.service: success.status_ok => success.status_ok 1445238632309 Sync.BrowserIDManager INFO Waiting for user to be verified. 1445238632309 FirefoxAccounts DEBUG already verified 1445238632309 Sync.BrowserIDManager INFO Starting fetch for key bundle. 1445238632310 Sync.BrowserIDManager INFO Unable to fetch keys (master-password locked?), so aborting token fetch 1445238632310 Sync.BrowserIDManager INFO Background fetch for key bundle done 1445238632310 Sync.Status DEBUG Status.login: success.login => success.login 1445238632310 Sync.Status DEBUG Status.service: success.status_ok => success.status_ok 1445238632310 Sync.Service INFO Logging in the user. 1445238632310 Sync.Service DEBUG Caching URLs under storage user base: https://sync-264-us-west-2.sync.services.mozilla.com/1.5/31260094/ 1445238632431 FirefoxAccounts DEBUG got keyPair 1445238632431 FirefoxAccounts DEBUG getCertificateSigned: true true 1445238634221 Hawk DEBUG (Response) /certificate/sign: code: 401 - Status text: Unauthorized 1445238634221 Sync.RESTResponse TRACE Processing response headers. 1445238634222 Hawk DEBUG Clock offset vs https://api.accounts.firefox.com/v1: -2222 1445238634222 Hawk DEBUG Received 401 for /certificate/sign: retrying 1445238634657 Hawk DEBUG (Response) /certificate/sign: code: 401 - Status text: Unauthorized 1445238634657 Sync.RESTResponse TRACE Processing response headers. 1445238634657 Hawk DEBUG Clock offset vs https://api.accounts.firefox.com/v1: -1657 1445238634658 FirefoxAccounts ERROR error POSTing /certificate/sign: {"code":401,"errno":109,"error":"Unauthorized","message":"Missing authentication","info":"https://github.com/mozilla/fxa-auth-server/blob/master/docs/api.md#response-format"} 1445238634658 FirefoxAccounts ERROR HAWK.signCertificate error: {"code":401,"errno":109,"error":"Unauthorized","message":"Missing authentication","info":"https://github.com/mozilla/fxa-auth-server/blob/master/docs/api.md#response-format"} 1445238634658 FirefoxAccounts ERROR FxA rejecting with error AUTH_ERROR, details: {"code":401,"errno":109,"error":"Unauthorized","message":"Missing authentication","info":"https://github.com/mozilla/fxa-auth-server/blob/master/docs/api.md#response-format"} 1445238634660 FirefoxAccounts ERROR Could not retrieve profile data: Error: AUTH_ERROR (resource://gre/modules/FxAccounts.jsm:1377:18) JS Stack trace: FxAccountsInternal.prototype._error@FxAccounts.jsm:1377:18 < FxAccountsInternal.prototype._errorToErrorClass@FxAccounts.jsm:1365:14 < FxAccountsInternal.prototype.getOAuthToken<@FxAccounts.jsm:1309:13 < TaskImpl_run@Task.jsm:315:40 < Handler.prototype.process@Promise-backend.js:925:21 < this.PromiseWalker.walkerLoop@Promise-backend.js:801:7 < this.PromiseWalker.scheduleWalkerLoop/<@Promise-backend.js:740:39 < openModalWindow@nsPrompter.js:370:5 < ModalPrompter.prototype.openPrompt@nsPrompter.js:553:9 < ModalPrompter.prototype.nsIPrompt_promptPassword@nsPrompter.js:774:9 < ModalPrompter.prototype.promptPassword@nsPrompter.js:586:20 < ensureMPUnlocked@util.js:571:7 < this.BrowserIDManager.prototype.unlockAndVerifyAuthState@browserid_identity.js:464:10 < verifyLogin@service.js:707:5 < onNotify@service.js:1011:12 < WrappedNotify@util.js:148:21 < WrappedLock@util.js:103:16 < WrappedCatch@util.js:77:16 < login@service.js:1022:12 < sync/<@service.js:1272:14 < WrappedCatch@util.js:77:16 < sync@service.js:1268:5 < exports.Utils.yield@utils.js:361:12 < INIParser.prototype.process@filterStorage.js:870:7 < exports.IO.readFromFile/onProgress@io.js:97:15 < exports.IO.readFromFile/<@io.js:182:11 < TaskImpl_run@Task.jsm:314:40 < Handler.prototype.process@Promise-backend.js:922:23 < this.PromiseWalker.walkerLoop@Promise-backend.js:801:7 < this.PromiseWalker.scheduleWalkerLoop/<@Promise-backend.js:740:39 < this.Utils.openWindow@utils.jsm:154:10 < this.Utils.prompt@utils.jsm:287:1 < sm_restorePrompt@SessionManagerHelper.js:744:37 < sm_check_for_crash@SessionManagerHelper.js:679:32 < SessionManagerHelper.observe@SessionManagerHelper.js:243:5 < SessionStartup.prototype._onSessionFileRead@nsSessionStartup.js:132:5 < Handler.prototype.process@Promise-backend.js:922:23 < this.PromiseWalker.walkerLoop@Promise-backend.js:801:7 < this.PromiseWalker.scheduleWalkerLoop/<@Promise-backend.js:740:39 1445238634664 FirefoxAccounts ERROR FxA rejecting with error UNKNOWN_ERROR, details: Error: AUTH_ERROR (resource://gre/modules/FxAccounts.jsm:1377:18) JS Stack trace: FxAccountsInternal.prototype._error@FxAccounts.jsm:1377:18 < FxAccountsInternal.prototype._errorToErrorClass@FxAccounts.jsm:1365:14 < FxAccountsInternal.prototype.getOAuthToken<@FxAccounts.jsm:1309:13 < TaskImpl_run@Task.jsm:315:40 < Handler.prototype.process@Promise-backend.js:925:21 < this.PromiseWalker.walkerLoop@Promise-backend.js:801:7 < this.PromiseWalker.scheduleWalkerLoop/<@Promise-backend.js:740:39 < openModalWindow@nsPrompter.js:370:5 < ModalPrompter.prototype.openPrompt@nsPrompter.js:553:9 < ModalPrompter.prototype.nsIPrompt_promptPassword@nsPrompter.js:774:9 < ModalPrompter.prototype.promptPassword@nsPrompter.js:586:20 < ensureMPUnlocked@util.js:571:7 < this.BrowserIDManager.prototype.unlockAndVerifyAuthState@browserid_identity.js:464:10 < verifyLogin@service.js:707:5 < onNotify@service.js:1011:12 < WrappedNotify@util.js:148:21 < WrappedLock@util.js:103:16 < WrappedCatch@util.js:77:16 < login@service.js:1022:12 < sync/<@service.js:1272:14 < WrappedCatch@util.js:77:16 < sync@service.js:1268:5 < exports.Utils.yield@utils.js:361:12 < INIParser.prototype.process@filterStorage.js:870:7 < exports.IO.readFromFile/onProgress@io.js:97:15 < exports.IO.readFromFile/<@io.js:182:11 < TaskImpl_run@Task.jsm:314:40 < Handler.prototype.process@Promise-backend.js:922:23 < this.PromiseWalker.walkerLoop@Promise-backend.js:801:7 < this.PromiseWalker.scheduleWalkerLoop/<@Promise-backend.js:740:39 < this.Utils.openWindow@utils.jsm:154:10 < this.Utils.prompt@utils.jsm:287:1 < sm_restorePrompt@SessionManagerHelper.js:744:37 < sm_check_for_crash@SessionManagerHelper.js:679:32 < SessionManagerHelper.observe@SessionManagerHelper.js:243:5 < SessionStartup.prototype._onSessionFileRead@nsSessionStartup.js:132:5 < Handler.prototype.process@Promise-backend.js:922:23 < this.PromiseWalker.walkerLoop@Promise-backend.js:801:7 < this.PromiseWalker.scheduleWalkerLoop/<@Promise-backend.js:740:39 1445238677089 Sync.BrowserIDManager DEBUG unlockAndVerifyAuthState re-fetched credentials and is returning: success.status_ok 1445238677090 Sync.Service DEBUG Fetching unlocked auth state returned success.status_ok 1445238677091 FirefoxAccounts DEBUG already verified 1445238677092 Sync.BrowserIDManager INFO Getting an assertion from: https://token.services.mozilla.com/1.0/sync/1.5 1445238677092 FirefoxAccounts DEBUG enter getAssertion() 1445238677139 FirefoxAccounts DEBUG getKeyPair: already have a keyPair 1445238677139 FirefoxAccounts DEBU
Apologies for the delay, the hunch is that you are running into this issue: bug 1118958
The resources for Filing a bug in bugzilla.mozilla.org are listed below:
don't mind at least I know I'm not alone with that problem. Let's hope that those guys can help me out.