Showing questions tagged: Show all questions

Enabling forms/passwords autofill/remembrance only for intranet domain

Hello everyone, I know it is possible to disable forms/passwords autofill and password remembrance only for certain sites, but is it possible via preferences or policies … (read more)

Hello everyone,

I know it is possible to disable forms/passwords autofill and password remembrance only for certain sites, but is it possible via preferences or policies to enable those features only for a few sites / domains ?


For example if I wanted to enable those features only for my intranet domain, how would I do it ?

No luck so far with these prefs which saddly only have binary true/false values: signon.rememberSignons / signon.autofillForms / prefs.privacy.disable_button.view_passwords

Best regards

Asked by Assig 5 days ago

Last reply by Mike Kaply 3 days ago

Force close and re-open Firefox if updates not applied

Chrome Enterprise has a feature where the users are given 5 days to apply an update otherwise it will force close and relaunch. I've applied the Firefox GPO setting 'Appl… (read more)

Chrome Enterprise has a feature where the users are given 5 days to apply an update otherwise it will force close and relaunch. I've applied the Firefox GPO setting 'Application Autoupdate' but is there something similar to this force close for FireFox if the user does not apply outstanding updates?

Asked by d.cruickshank 4 days ago

Last reply by Mike Kaply 3 days ago

How to add aditional language to Firefox using .xpi files

Dear Mozilla Community, We are using Firefox ESR 68.2.0 in a terminal server environment managing the browser via javascript file aboutconfig. Initially the browser was i… (read more)

Dear Mozilla Community,

We are using Firefox ESR 68.2.0 in a terminal server environment managing the browser via javascript file aboutconfig. Initially the browser was installed as English US but would like to install GB English since the date format is different.

I saw that additional languages can be installed using .xpi language files but couldn't find the directory where it will be installed and how to set the new language as default using about:config so that all terminal users have the new language. The browser doesn't have direct internet access so I would like to download the language pack first and roll it out via script if possible.

Any help in this matter is much appreciated. Thanks in advance

Asked by Daniel Gärtner 5 days ago

Last reply by cor-el 3 days ago

  • Solved

ADFS SSO error 500 (Firefox ESR, ADFS 3.0, Kerberos, SAML)

Hello everyone, It is my first time here. I am asking for your help on something that has been bugging me for a week: I have recently deployed Firefox ESR 78.0.2 in my co… (read more)

Hello everyone,

It is my first time here. I am asking for your help on something that has been bugging me for a week: I have recently deployed Firefox ESR 78.0.2 in my company after spending months studying about configuration files, policies file, UEV etc. and it works !

My problem now is about SSO with ADFS 3.0: no matter what I try, I either get a blank page or a Forms Based Authentication prompt when accessing a site that is configured for adfs sso and works seamlessly with IE 11 and Chrome.

What I want to achieve: SSO authentication using Kerberos (not NTLM) against ADFS without setting the ExtendedProtectionTokenCheck parameter to "None".

After countless research on the Internet, here's what I tried: - add "Mozilla5/0" "Firefox" and "Firefox/78.0" to the adfs WIASupportedUserAgents (and restart ADFS service of course) -> makes chrome sso work, but not Firefox

- mess with those preferences: network.negotiate-auth.trusted-uris / network.negotiate-auth.delegation-uris / network.negotiate-auth.allow-proxies / network.negotiate-auth.allow-non-fqdn / network.negotiate-auth.using-native-gsslib / network.auth.use-sspi / network.automatic-ntlm-auth.trusted-uris / network.automatic-ntlm-auth.allow-proxies / network.automatic-ntlm-auth.allow-non-fqdn / network.auth.force-generic-ntlm / signon.autologin.proxy

- changing my user agent by setting preference general.useragent.override to "Firefox"

- allow every cookies possible..

- troubleshoot http requests / response with SAML Tracer extensions for Firefox

When I get a blank page (typically when network.auth.force-generic-ntlm is at false, which is what I want), I get an error 500 (see screenshot)

When I get a Forms Based Authentication prompt, I get an error 401 Unauthorized (which I think is normal since FBA is not set up in ADFS parameters).

In both case I can see that Firefox is atleast trying to negociate authentication first with Kerberos, then with NTLM.


I am frustrated because I see many posts where people resolved their issues only messing with the ADFS WIASupportedUserAgents parameter and the FF prefs network.negotiate-auth.trusted-uris / network.negotiate-auth.delegation-uris

Of course, if I disable the ADFS "ExtendedProtectionTokenCheck" for testing, everything works. Does anyone know if there is something else that can interfere with Firefox's SSO ? Could it be another FF preference ? Or maybe my ADFS is misconfigured for what I want ?

Best regards

Asked by Assig 1 week ago

Answered by Mike Kaply 1 week ago

  • Solved

Mozila VPN / Firefox VPN

Will I be able to select the VPN server country for my individual log-in times? Specifically, Will I be able to watch Star Trek - Discovery available in Europe, but no … (read more)

Will I be able to select the VPN server country for my individual log-in times? Specifically, Will I be able to watch Star Trek - Discovery available in Europe, but no in USA on Netflix? Thanks.

Asked by michael.glik 2 weeks ago

Answered by Eve 2 weeks ago

Enable Firefox AutoUpdate

Hi, We are looking forward to use Firefox GPO to handle all the customization within firefox including auto-update. We have the ESR 68.7 currently deployed in prod with a… (read more)

Hi,

We are looking forward to use Firefox GPO to handle all the customization within firefox including auto-update. We have the ESR 68.7 currently deployed in prod with auto-update disabled. We now would like to move forward with auto-update enabled. Created GPO with all other settings including auto-update enabled as follows:

1. Deployed the Firefox ADMX file supporting ESR 68 and above with following 2 settings enabled:

   AppAutoUpdate = Enabled
   DisableAppUpdate = Disabled

The updates does get downloaded on first launch and tries installing on second launch of the application but get an UAC prompting credentials.

Just wanted to know can an unattended auto-update be achieved when logged in as a standard domain user (without admin rights)?

Asked by DS 2 weeks ago

extension shows after url entered but extension is NOT in firefox list of extensions

while going to www.sunfounder.com Norton sites that extension is malicious, this is only site causing this to occur, when firefox is started in safe mode, it does not lin… (read more)

while going to www.sunfounder.com Norton sites that extension is malicious, this is only site causing this to occur, when firefox is started in safe mode, it does not link to malicious site. extension is not in extension list.

Asked by GeraldBSheble 3 weeks ago

Does Firefox ESR 68.10.0 update the awesomebar?

Hello, I'm using Firefox ESR 68.9.0. It frequently asks me to update to 68.10.0. I switched to ESR to avoid the awesomebar or urlbar updates, especially after the method… (read more)

Hello, I'm using Firefox ESR 68.9.0. It frequently asks me to update to 68.10.0. I switched to ESR to avoid the awesomebar or urlbar updates, especially after the method to disable it in about:config was removed. I want to know whether ESR 68.10.0 has the updated awesomebar. If so, in ESR 68.10.0, can it be disabled?

Asked by Marzike 4 weeks ago

Last reply by cor-el 4 weeks ago

Would like to have unlimited passes in add-on since I am paying

I signed up to pay $5/month but it does not seem to apply to the Firefox add-on, only the whole-device VPN. Could you tell me how to make this apply to the add-on also? … (read more)

I signed up to pay $5/month but it does not seem to apply to the Firefox add-on, only the whole-device VPN. Could you tell me how to make this apply to the add-on also?

I cannot use the whole-device VPN on some systems.

Thanks

Asked by scottnesbitt 4 weeks ago

security.osclientcerts.autoload in FIrefox 68.9.0

Hi. I have a problem using the p12 certificates stored in Windows. security.osclientcerts.autoload is set in the registry under CU and LM under \SOFTWARE\Policies\Mozilla… (read more)

Hi.

I have a problem using the p12 certificates stored in Windows. security.osclientcerts.autoload is set in the registry under CU and LM under \SOFTWARE\Policies\Mozilla\Firefox\Preferences >>"security.osclientcerts.autoload"=dword:00000001 When checking about:config it's also set to true. The good thing: The certificates show up in Firefox version 77.0.1, where the certificates are listed. The bad thing: as standard browser we use is Firefox ESR version 68.9.0, where the certificates are not listed.

What I have seen by now security.osclientcerts.autoload has been implemented in ESR version 68.4.x .... is that the only version oder also for newer ones ?

And if also for newer ones, what could be the problem,.... and / or the solution for this problem ?

Appreciate for your help.

Kind regards Tom

Asked by t.hirtl 1 month ago

Last reply by Mike Kaply 1 month ago

Should I Choose a Connection That is Close or Far From My Device?

When using a VPN is it best to choose a connection that is closest to my device or does it matter? Is there any difference in performance or security if I choose a connec… (read more)

When using a VPN is it best to choose a connection that is closest to my device or does it matter?

Is there any difference in performance or security if I choose a connection in my city, across the continent or a different country?

Asked by jr4of6 1 month ago

Last reply by Eve 1 month ago

GPO to manage bookmark links

Hi, We are using Firefox ESR 68.7.0 (64-bit) and would like to use firefox GPO to manage bookmarks such that whenever Firefox is upgraded, the user bookmark remains intac… (read more)

Hi,

We are using Firefox ESR 68.7.0 (64-bit) and would like to use firefox GPO to manage bookmarks such that whenever Firefox is upgraded, the user bookmark remains intact.

What should be the GPO setting to achieve this?

Thanks!

Asked by DS 1 month ago

Last reply by cor-el 1 month ago