[Mozilla Enterprise] Policies feedback

Mon Jun 25 10:54:09 UTC 2018

Dear Felipe,

actually in our case we just want to provide defaults to the users to 
have a sane starting/reset condition.
Users should not be limited to change this setting if they have a good 
reason (R&D).

Since Ubuntu's distribution.ini does not contain any value we just 
diverted it out of the way:
dpkg-divert --add --rename --divert 
/usr/lib/firefox/distribution/distribution.ini.unused 
/usr/lib/firefox/distribution/distribution.ini

Since then, policies are working excellent. :-)
Maybe it is a good idea to mention the distribution.ini issue/limitation 
(and possible workarounds) somewhere in the policies documentation.

Best regards,
  Thimo Emmerich

On 22.06.2018 23:39, Felipe Gomes wrote:
> Thanks for providing feedback!
>
> This is exactly the bug you pointed out... It happens because when 
> there's a distribution.ini file present, during its load process the 
> default prefs gets reset..  This was noticed in bug 
> https://bugzilla.mozilla.org/show_bug.cgi?id=1428923, but since "most" 
> use cases for policies use locked prefs, it wasn't considered a big 
> issue..
>
> It's a valid bug that we want to fix, but it's non trivial because 
> this area is fragile... it's hard to know all the different things 
> that people are doing with distribution.ini and how a subtle change 
> might break things..
>
> If you use the Locked option in the policies it should work as a 
> workaround. If there are policies that you need that a Locked option 
> is not supported (and is not the default), let us know so we can try 
> to provide more workarounds.
>
>
> Best,
> Felipe
>
>
> On Thu, Jun 21, 2018 at 11:14 AM, Emmerich, Thimo 
> <Thimo.Emmerich at sony.com <mailto:Thimo.Emmerich at sony.com>> wrote:
>
>     Hi Mike,
>
>     thanks for the quick reply.
>
>
>     On 21.06.2018 15:58, Mike Kaply wrote:
>>     I assume you have a distribution.ini because you are on Linux?
>     Yes, we are using Ubuntu 14.04 - 18.04. The first one is phasing out.
>
>>     As far as the trusted sites goes, that shouldn't have been
>>     enterprise only and I will be removing it.
>>
>>     As a matter of fact, on Linux, none of this should have been
>>     enterprise only and I will be removing that restriction.
>>
>>     The plan is for Firefox 62 to have all of these changes in.
>>     Unfortunately we had other work so it didn't make it into 61.
>>
>>     We're targeting the rest of the enterprise work for 62/ESR 60.2.
>     Thats good news! I am not sure if Windows guys will also apply
>     policies in the future, but if they do I think it will be SSO
>     settings first.
>
>     Best regards,
>      Thimo
>
>>
>>     Mike
>>
>>     On Thu, Jun 21, 2018 at 1:43 AM, Emmerich, Thimo
>>     <Thimo.Emmerich at sony.com <mailto:Thimo.Emmerich at sony.com>> wrote:
>>
>>         Dear all,
>>
>>         thanks for providing the policies with latest FF60 release.
>>         It is a very useful feature for distributing company specific
>>         settings across client machines.
>>
>>         Unfortunately I observed that policies suffer from the same
>>         distribution.ini bug as autoconfig does (see
>>         https://bugzilla.mozilla.org/show_bug.cgi?id=947838#c15
>>         <https://bugzilla.mozilla.org/show_bug.cgi?id=947838#c15> for
>>         details).
>>
>>         The last item in our autoconfig is the configuration of SSO
>>         (trusted uris). Is there a special reason to not support it
>>         in non-ESR releases?
>>
>>         Best regards,
>>
>>          Thimo Emmerich
>>
>>
>>         -- 
>>         Mit freundlichen Grüßen / with kind regards
>>
>>           Thimo Emmerich
>>
>>         -------------------------------------------
>>
>>         European Technology Center (EuTEC)
>>
>>         Phone:    +49 (0) 711 / 5858 - 282
>>         E-mail: thimo.emmerich at eu.sony.com
>>         <mailto:thimo.emmerich at eu.sony.com>
>>         Internet: www.stuttgart.sony.de <http://www.stuttgart.sony.de>
>>
>>         Sony Europe Limited, Zweigniederlassung Deutschland
>>         Stuttgart Technology Center
>>         Hedelfinger Str. 61, 70327
>>         <https://maps.google.com/?q=Hedelfinger+Str.+61,+70327&entry=gmail&source=g>
>>         Stuttgart, Germany
>>
>>         Registered at the Court of Berlin-Charlottenburg HRB 129332 B
>>
>>         Main Establishment: Sony Europe Limited
>>         The Heights, Brooklands, Weybridge, Surrey, KT13 0XW, United
>>         Kingdom
>>         Companies House Cardiff 2422874
>>         Directors: Shigeru Kumekawa, Atsushi Kobayashi, Ricky Londema
>>
>>         _______________________________________________
>>         Enterprise mailing list
>>         Enterprise at mozilla.org <mailto:Enterprise at mozilla.org>
>>         https://mail.mozilla.org/listinfo/enterprise
>>         <https://mail.mozilla.org/listinfo/enterprise>
>>
>>         To unsubscribe from this list, please visit
>>         https://mail.mozilla.org/listinfo/enterprise
>>         <https://mail.mozilla.org/listinfo/enterprise> or send an
>>         email to enterprise-request at mozilla.org
>>         <mailto:enterprise-request at mozilla.org> with a subject of
>>         "unsubscribe"
>>
>>
>
>     -- 
>     Mit freundlichen Grüßen / with kind regards
>
>        Thimo Emmerich
>
>     -------------------------------------------
>
>     European Technology Center (EuTEC)
>
>     Phone:    +49 (0) 711 / 5858 - 282
>     E-mail:thimo.emmerich at eu.sony.com <mailto:thimo.emmerich at eu.sony.com>
>     Internet:www.stuttgart.sony.de <http://www.stuttgart.sony.de>
>
>     Sony Europe Limited, Zweigniederlassung Deutschland
>     Stuttgart Technology Center
>     Hedelfinger Str. 61, 70327 Stuttgart, Germany
>
>     Registered at the Court of Berlin-Charlottenburg HRB 129332 B
>
>     Main Establishment: Sony Europe Limited
>     The Heights, Brooklands, Weybridge, Surrey, KT13 0XW, United Kingdom
>     Companies House Cardiff 2422874
>     Directors: Shigeru Kumekawa, Atsushi Kobayashi, Ricky Londema
>
>
>     _______________________________________________
>     Enterprise mailing list
>     Enterprise at mozilla.org <mailto:Enterprise at mozilla.org>
>     https://mail.mozilla.org/listinfo/enterprise
>     <https://mail.mozilla.org/listinfo/enterprise>
>
>     To unsubscribe from this list, please visit
>     https://mail.mozilla.org/listinfo/enterprise
>     <https://mail.mozilla.org/listinfo/enterprise> or send an email to
>     enterprise-request at mozilla.org
>     <mailto:enterprise-request at mozilla.org> with a subject of
>     "unsubscribe"
>
>

-- 
Mit freundlichen Grüßen / with kind regards

   Thimo Emmerich

-------------------------------------------

European Technology Center (EuTEC)

Phone:    +49 (0) 711 / 5858 - 282
E-mail:   thimo.emmerich at eu.sony.com
Internet: www.stuttgart.sony.de

Sony Europe Limited, Zweigniederlassung Deutschland
Stuttgart Technology Center
Hedelfinger Str. 61, 70327 Stuttgart, Germany

Registered at the Court of Berlin-Charlottenburg HRB 129332 B

Main Establishment: Sony Europe Limited
The Heights, Brooklands, Weybridge, Surrey, KT13 0XW, United Kingdom
Companies House Cardiff 2422874
Directors: Shigeru Kumekawa, Atsushi Kobayashi, Ricky Londema

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.mozilla.org/pipermail/enterprise/attachments/20180625/4b4c9eb5/attachment-0002.html>