[Mozilla Enterprise] 2 factor authentication errors with charismathics via Remote desktop. 78 ESR

[Mike Kaply]

Would it be possible to use mozregression to see if you can figure out when
it broke?

https://mozilla.github.io/mozregression/

I know that might be difficult with your setup.

Mike

On Wed, Aug 19, 2020 at 7:03 PM Dylan Romero <dylan.romero6 at gmail.com>
wrote:

> Victor,
>
> I've seen this also while testing 78 but only while using a Remote Desktop
> Session over VPN.  I thought it may have been due to VPN speed and or
> latency, but what you are describing is very similar to what I have seen.
> When trying to authenticate with smartcards over RDP and VPN, Firefox seems
> to freeze for a few seconds and the report that it timed out trying to
> authenticate.  I didn't see this issue with 68.
>
> Thanks,
> Dylan Romero
>
>
> On Wed, Aug 19, 2020, 5:28 PM Hoang (US), Victor T <
> victor.t.hoang at boeing.com> wrote:
>
>> Just wondering if anyone has observed any issues with Single Sign On or 2
>> factor authentication going from 68.x to 78.x ESR on remote devices.
>>
>>
>>
>> My organization has a strange issue where remote desktop devices (or
>> VM’s) aren’t able to authenticate with badges, but firefox seems to see the
>> charismathics badge reading application (with the correct policy loaded).
>> The issue is that there is no status changes and it results in a
>> User_not_logged_in error after it times out. From what I can see, the
>> difference from 68 to 78 is that there seems to be no redirect or TLS
>> handshake that pops up in the status bar in the bottom left of 78 ESR (if
>> anyone might know anything). This issue doesn’t persist when using the
>> local device itself, just when using Remote Desktop Connection or a VM on a
>> server. Perhaps this is a security setting in Firefox 78 that I’m just
>> unaware of?
>>
>>
>>
>> Thanks all,
>>
>>
>>
>> Victor Hoang
>>
>>
>> _______________________________________________
>> Enterprise mailing list
>> Enterprise at mozilla.org
>> https://mail.mozilla.org/listinfo/enterprise
>>
>> To unsubscribe from this list, please visit
>> https://mail.mozilla.org/listinfo/enterprise or send an email to
>> enterprise-request at mozilla.org with a subject of "unsubscribe"
>>
>> _______________________________________________
> Enterprise mailing list
> Enterprise at mozilla.org
> https://mail.mozilla.org/listinfo/enterprise
>
> To unsubscribe from this list, please visit
> https://mail.mozilla.org/listinfo/enterprise or send an email to
> enterprise-request at mozilla.org with a subject of "unsubscribe"
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.mozilla.org/pipermail/enterprise/attachments/20200819/692fa982/attachment.html>