[Mozilla Enterprise] Firefox 67.0 changes result in much head-banging

Mike Kaply mkaply at mozilla.com
Wed Aug 28 20:20:23 UTC 2019


I'm going to add a parameter to the Authentication prefs so you can choose
not to lock them.

Mike

On Thu, May 23, 2019 at 4:27 PM Stephen Dowdy <sdowdy at ucar.edu> wrote:

> On 5/23/19 2:00 PM, Mike Kaply wrote:
> > I'll hold off on answers to the profile per install (need to do some
> research), but there have been no changes to Autoconfig that would cause
> the behavior that you are seeing.
> >
> > Are you not using policies at all (A lot of those get locked).
>
> Mike,
>
> Ack!  That'd likely be it.  I set them up when they first were announced,
> and ran into issues (i'm not sure if y'all ever fixed the issue with
> Homepage not allowing multi-values (e.g.)
>
>     "Homepage": {
>       "Additional": [
>         "http://www2.mydomain.org/",
>         "http://www3.mydomain.org/"
>       ],
>       "URL": "http://www.mydomain.org/"
>     },
>
> which is what i was blocking on back then.  But i did leave other things
> in, like SPNEGO/Delegated which *ARE* the things that are locked in
> preferences.
> (i also have them duplicated in my historical mozilla.cfg, which is why i
> was wondering how they got locked!).
>
> Now, that that's solved, back to my original intent of setting *Default*
> prefs so things like SPNEGO work for my users, but allowing them to add
> other servers i'm not aware of (perhaps in other departments, such as Human
> Resources, Finance, other divisions/labs, etc), i am guessing that Policies
> are NOT going to provide that for me, unless there's a "suggestions.json"
> file, too ;)   Thinking on it, "Policies" do usually imply requirements
> rather than suggestions/defaults, so i may have to bail on using them for
> my purposes.  Unfortunately, i thought the goal was to supplant a lot of
> Prefs structure in favor of Policies :-/.
>
> Thanks for the quick response!
>
> --stephen
>
> P.S.
> https://github.com/mozilla/policy-templates
> Be advised if you wish to load a certificate from a UNC path you must use
> double backslahes. Example: \SERVER\CERTS\CERT5.PEM
>  --- Typo
> ------------------------------------------------------------------------------^
> (missing s)
>
>
> --
> Stephen Dowdy  -  Systems Administrator  -  NCAR/RAL
> 303.497.2869   -  sdowdy at ucar.edu        -
> http://www.ral.ucar.edu/~sdowdy/
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.mozilla.org/pipermail/enterprise/attachments/20190828/d0daf2b9/attachment.html>


More information about the Enterprise mailing list