See the UPDATE below for new information about the actual HTTP requests going on under the hood.
So I started a new job back in October. It's mostly a Windows shop, and they use IIS and Active Directory for a bunch of internal stuff. They have an intranet site at
In Chrome on Mavericks, when I go there, I get the expected little HTTP auth dropdown:
where I can type my username and password. I'm not very swift with Active Directory, but I guess
msgd is the Active Directory domain I'm on, so I type
msgd\lheidbreder and my password, and I can log in successfully in Chrome.
Way back in October, the first time I tried this in Safari, I got some weird behavior; like, I saw the password thing, but then it didn't work when I put in my credentials. I don't remember exactly what it did.
But after that first attempt, and on every attempt since then, when I try to go to
intranet.companyname.com, Safari shows a blank screen:
The screen doesn't change, and the progress bar fills up about 20% and stays there.
I ran an app to snoop HTTP requests, and I found out what this was doing behind the scenes. It's not just sitting there; Safari is actually requesting the page almost 1000 times per second, and each time, it gets a 401 error and an HTML error page with the title "You are not authorized to view this page".
On one example request from the middle of a load attempt, Safari sends this
And the server responds with this
On the next request, Safari sends an identical
Authorization header, and then the server responds with a very slightly different
Repeat ad infinitum.
I've tried deleting everything that matches
intranet in Keychain Access and clearing my entire cache/cookies, to see if I could restore the original weird behavior, but it didn't work.
Do I have some kind of funky domain stuff going on? What else can I try to diagnose this?