Kukhonjiswa imibuzo ethegiwe: Veza yonke imibuzo
  • Okugcinwe kunqolobane

can't deploy private CA with GPO

Hi all I'm trying to deploy my public CA to my Firefox on Windows enviroment. We need because I have set up a SSL inspection that resign public certs of websites in order… (funda kabanzi)

Hi all

I'm trying to deploy my public CA to my Firefox on Windows enviroment. We need because I have set up a SSL inspection that resign public certs of websites in order to perform inspection.

The CA cert is deployed through a GPO to every computer's store, and then, a policy from custom Firefox ESR admx's is telling clients to use Windows certificate store. But no way is working. I can't see the cert imported.

My public CA cert is deployed in the store, inside the folders you can see in the screen and i checked every computer had received it correctly.

Please help!! Thanks

Asked by Dark345 1 unyaka odlule

Last reply by Mike Kaply 1 unyaka odlule

  • Kusonjululiwe
  • Okugcinwe kunqolobane

installed latest non-ESR version of Firefox over ERS, all bookmarks are gone

An application requested the latest version of Firefox. I installed it. I found I had two versions of Firefox installed. One was ESR. The latest version of Firefox had bo… (funda kabanzi)

An application requested the latest version of Firefox. I installed it. I found I had two versions of Firefox installed. One was ESR. The latest version of Firefox had bookmarks. The ESR version did not have bookmarks. I checked with IT support and found I needed to uninstalled the latest non-ESR version. Now I have no bookmarks. It doesn't matter how I try and import them, they do not display in the bookmarks library. When I'm on a website that I know is bookmarked, the star turns blue. The bookmarks toolbar has nothing on it. They must be somewhere, but there is a disconnect. Without bookmarks, I cannot continue using Firefox.

Asked by julielynbloom 2 iminyaka edlule

Answered by Mike Kaply 2 iminyaka edlule

  • Okugcinwe kunqolobane

pdfjs.defaultZoomValue in autoconfig.js not applying as expected.

On a central file server repository we have a firefox autoconfig.js text file that we use a GPO to copy over top of the existing autoconfig.js file. We've used this befo… (funda kabanzi)

On a central file server repository we have a firefox autoconfig.js text file that we use a GPO to copy over top of the existing autoconfig.js file. We've used this before and can verify in about:config a few of our custom values are shown.

I wanted to add a new one today so the line I added to the end of the file is: pref("pdfjs.defaultZoomValue", page-width);

I ran gpupdate /force and sure enough the file updated at this path on my PC: C:\Program Files\Mozilla Firefox\defaults\pref

I opened firefox and under about:config to pdfjs.defaultZoomValue it was still showing the default value which is blank.

Any idea how I can get this preference distributed? We need PDFs to default open to page-width, not some zoom level. Its taking many extra clicks to get work done.

Asked by kjstech 1 unyaka odlule

Last reply by kjstech 1 unyaka odlule

  • Okugcinwe kunqolobane

MY E-MAIL ADDRESS = I am using another .COM = Gmail yes?

So just curious . . .when I transferred my GMAIL address / email to Mozilla FF, does my e-mail address ever actually become a FF.com, or does FF just BORROW my GMAIL addr… (funda kabanzi)

So just curious . . .when I transferred my GMAIL address / email to Mozilla FF, does my e-mail address ever actually become a FF.com, or does FF just BORROW my GMAIL address via encrypted e-mail domain for its FF network to use for me and leave it that way?

Thank you!

Asked by M R Coates 1 unyaka odlule

Last reply by cor-el 1 unyaka odlule

  • Kusonjululiwe

Default behaviour when opening .pdf files

Good morning Mozilla Community, I have a question regarding the behaviour when opening a .pdf file from web email. We are using FF 68.11.0esr on a terminal server environ… (funda kabanzi)

Good morning Mozilla Community,

I have a question regarding the behaviour when opening a .pdf file from web email. We are using FF 68.11.0esr on a terminal server environment and we customize it via config file.

When opening a .pdf or even office docs, Firefox asks what to do with this file. When selected open with Adobe Reader and check mark that it should do this from now on with all pdf files it doesn't do that. The next time when I try to open a .pdf the same dialog window appears again but it remembered the check mark. But it should open the file directly in Adobe Reader without showing the dialog window. I tried to do it in "safe mode" and even "refreshed" Firefox but no improvement.

Does anyone might know why Firefox is not remembering my setting for opening files? See attached screenshots. Thanks in advance for your support in this matter. It is much appreciated.

Asked by Daniel Gärtner 3 izinyanga ezidlule

Answered by Daniel Gärtner 3 izinyanga ezidlule

  • Okugcinwe kunqolobane

are there examples of extension ID values you use for disabling extensions via gpo?

We've been trying to test using gpo policies to disable or block specific extensions for Enterprise FF (ver 72 if that matters). The instructions are clear about where t… (funda kabanzi)

We've been trying to test using gpo policies to disable or block specific extensions for Enterprise FF (ver 72 if that matters). The instructions are clear about where to put the unique extension ID however they don't show an example ID value so we haven't been able to get this working yet. We've tried the following formats but none have worked yet. Using the Weather extension for testing:

{a79a9c4c-9c3f-4bf4-9e58-6574cc0b7ecb} "{a79a9c4c-9c3f-4bf4-9e58-6574cc0b7ecb}" {a79a9c4c-9c3f-4bf4-9e58-6574cc0b7ecb}.xpi

The screenshot shows the first attempt. Is this right? If not, what's the correct format to use here? If it is right, is there something else we have to do besides this?

Thanks.

Asked by opiesan 11 izinyanga ezidlule

Last reply by Mike Kaply 8 izinyanga ezidlule

Azure Conditional Access

Hi, I've been researching this somewhat and I'm not exactly sure where/what the exact problem is to be honest. So far IE, Edge (new Chromium at least) and Chrome, with th… (funda kabanzi)

Hi,

I've been researching this somewhat and I'm not exactly sure where/what the exact problem is to be honest. So far IE, Edge (new Chromium at least) and Chrome, with the add-on from Microsoft work fine and authentication properly with Conditional Access setup in an Azure environment but for some reason Firefox does not, you get "You can't get there from here" message.

Now from what I gather this is due to the way Conditional Access works and Firefox not being able to reply with the correct device authentication/ADAL when prompted for it. What I'm asking is, is this something that Mozilla can solve on their own or is this something that Microsoft has to work out on their end?

I'm fine with opening a bug report on Bugzilla but I wanted to dig a bit deeper and hopefully understand the issue at hand on this as to not waste developer(s) time if this is something that Microsoft should fix.

Source1: https://social.technet.microsoft.com/Forums/en-US/eafe0951-3929-46d1-bcbd-bbe5c006f0e4/firefox-not-compatible-with-conditional-access-why?forum=microsoftintuneprod Source2: https://old.reddit.com/r/firefox/comments/b2jtnq/wtf_microsoft/

Asked by Jax-Ur 2 izinyanga ezidlule

Last reply by Mike Kaply 1 inyanga edlule

  • Kusonjululiwe
  • Okugcinwe kunqolobane

What is the correct URLs to set Google as the default search provider and make it permanent?

I am attempting to make Google the default search engine for Firefox 60 ESR. I am trying User Configuration. Default Search Engine = Google (not sure if just put a random… (funda kabanzi)

I am attempting to make Google the default search engine for Firefox 60 ESR.

I am trying User Configuration.

Default Search Engine = Google (not sure if just put a random name or the actual URL) Prevent Search Engine Installs = Enabled Search Engine One: - Name = Google - URL Template = {google:baseURL}suggest?q={searchTerms} - Method = GET

System: Win10 1803

Asked by becauseimbatman 2 iminyaka edlule

Answered by Mike Kaply 2 iminyaka edlule

  • Kusonjululiwe
  • Okugcinwe kunqolobane

Distribute Exception set via cert_override.txt company wide

Hey everyone, I'm currently working for a company where we need to distribute a set of exceptions for 4 internal websites. For many reasons the firefox currently does not… (funda kabanzi)

Hey everyone,

I'm currently working for a company where we need to distribute a set of exceptions for 4 internal websites. For many reasons the firefox currently does not trust the certificate that has been issued and users will receive the prompt "Warning: Potential Security Risk Ahead" and the user can click on "Advanced" -> "Accept the risk and continue" Now this is something we would like to prevent from happening.

The obvious solution would be to have a proper certificate in place but that is the long term solution and we need a quick workaround with the same result -> access the page without the prompt. The prompt is gone once we set the exception and copy the "Cert_override.txt" to the user profile. Now I have a script that I could use to copy the file to all profiles but that would be the absolute last thing I would want to do.

So my question is: is there any way to set an exception system wide instead of on a user profile basis? We are not using the Firefox ADMX templates but just a mozilla.cfg. Reading about the ADMX templates it also doesn't look like it would be possible via a policy, is that correct? Do you guys have any suggestions as to what we can do here?

Any helpful hints would be appreciated.

Thank you.

Asked by Randoms 8 izinyanga ezidlule

Answered by Randoms 7 izinyanga ezidlule

  • Okugcinwe kunqolobane

Firefox ESR 52.8 needed for Silverlight

We are using 52.8 for Silverlight and are in the process of migrating away but still need to use Silverlight for the near future. Since Wednesday 5 September we have seen… (funda kabanzi)

We are using 52.8 for Silverlight and are in the process of migrating away but still need to use Silverlight for the near future.

Since Wednesday 5 September we have seen Firefox auto update constantly, sometimes it takes 4-6 attempts to install v52.8 to get it to stay and even they sometimes it still updates to 60 or Quantum. We have disabled updates, turned off the app.update.url, silent and other "tips" but we still see it updating frequently.

Has there been an update within Mozilla that is now forcing updates to EOL products since 52.8 is EOL now? like a percentile of users are receiving the updates daily? Any way around the update push to keep them on 52.8 till we remove Silverlight?

Asked by PhoenixFighter 2 iminyaka edlule

Last reply by jscher2000 2 iminyaka edlule

  • Kusonjululiwe
  • Okugcinwe kunqolobane

GPO ineffective - Firefox ESR

We're looking at using the GPO functionality to start managing our existing Firefox deployments. We've loaded the ADMX file and have created a test GPO that does 2 things… (funda kabanzi)

We're looking at using the GPO functionality to start managing our existing Firefox deployments. We've loaded the ADMX file and have created a test GPO that does 2 things:

1. Enable AutoUpdate 2. Creates 2 bookmarks

We've deployed the GPO to a few machines, confirmed the GPO is applying via GPResult, and confirmed that there are corresponding entries in HKLM\Software\Policies\Mozilla\Firefox but we're not seeing the changes occurring in the browser. AutoUpdate is still disabled and greyed out (via the previously deployed local JSON config file) and the bookmarks aren't present.

Any idea why we wouldn't see the changes as effective in the browser? Browser is running 60.4.0 ESR (32-bit).

Asked by cowspotter 1 unyaka odlule

Answered by Mike Kaply 1 unyaka odlule

  • Kusonjululiwe
  • Okugcinwe kunqolobane

Using mozilla.cfg and group policies

In the past we've modified mozilla.cfg to make modifications to Firefox for our organization. Mozilla.cfg is still deployed. I attempted to use Group Policy in an attem… (funda kabanzi)

In the past we've modified mozilla.cfg to make modifications to Firefox for our organization. Mozilla.cfg is still deployed. I attempted to use Group Policy in an attempt to test how well it worked however it does not appear to work at all. Can you use Group Policies to configure Firefox if Mozilla.cfg is also deployed?

Asked by Daniel Kaliel 1 unyaka odlule

Answered by Wesley Branton 1 unyaka odlule

  • Kusonjululiwe
  • Okugcinwe kunqolobane

GPO Integrated_authentication not applying to prefs.js

I've configured the GPO to enable NTLM authentication for a specific site: Computer Configuration --> Policies --> Administrative Templates --> Mozilla --> Fi… (funda kabanzi)

I've configured the GPO to enable NTLM authentication for a specific site: Computer Configuration --> Policies --> Administrative Templates --> Mozilla --> Firefox --> Authentication --> NTLM

I apply this GPO to the local Win 10 Pro machine with Firefox 60 installed - GPUPDATE /FORCE

when I check HKLM --> SOFTWARE --> POLICIES --> MOZILLA --> FIREFOX --> AUTHENTICATION --> NTLM I see the site I added via GPO

however when I check the prefs.js file I cannot see user_pref("network.automatic-ntlm-auth.trusted-uris")

Asked by barnacle 2 iminyaka edlule

Answered by Mike Kaply 2 iminyaka edlule

  • Kusonjululiwe
  • Okugcinwe kunqolobane

Avoid automatic connection

Hello, I have some problems with the installation and execution of Firefox 52.7 ESR. First of all, I have an enviroment where the communication to Internet go throught a … (funda kabanzi)

Hello,

I have some problems with the installation and execution of Firefox 52.7 ESR. First of all, I have an enviroment where the communication to Internet go throught a proxy and from the PC where is installed this browser only are allowed a few URLs.

I had installed a previous version of Mozilla 45 and I had no problem but when I uninstall the previous one and install the 52.7 version I find problem with a couple communications that seems to make the browser.

These outbound communication are:

   redirector.gvt1.com:443
   http://ciscobinary.openh264.org/openh264-win32-0410d336bb748149a4f560eb6108090f078254b1.zip

I have tried to avoid these communication by configuration in about:config but it didn't work.

Can anyone help me to avoid these communication? Does anyone know why the browser do it?

Thank you in advance.

Asked by antonio.osuna 2 iminyaka edlule

Answered by antonio.osuna 2 iminyaka edlule

  • Kusonjululiwe
  • Okugcinwe kunqolobane

Problem with search engine added with GPO (Qwant Lite) and accent

Hello, I want to add Qwant Lite as default search engine in Firefox 60.3.0 ESR with GPO. I have succefully done it, but there is a problem when I make a research with any… (funda kabanzi)

Hello,

I want to add Qwant Lite as default search engine in Firefox 60.3.0 ESR with GPO. I have succefully done it, but there is a problem when I make a research with any character with accent (é, è, à, ...) Example : "testé" become "test%E9"

I have tested with the Qwant Lite Extension, which have exactly the same parameters than my GPO, and there is no problem, so I don't understand why...

Asked by Izanagi52 2 iminyaka edlule

Answered by Izanagi52 2 iminyaka edlule

  • Kusonjululiwe
  • Okugcinwe kunqolobane

How do I keep the X showing to close non-active tabs with one click?

I'm currently using Firefox Quantum 64.0.2. Basically, I'd like the X that lets me close a tab with just a click to stay visible. Currently, it's only visible on the a… (funda kabanzi)

I'm currently using Firefox Quantum 64.0.2. Basically, I'd like the X that lets me close a tab with just a click to stay visible. Currently, it's only visible on the active tab. Is there an add-on, a tweak in about:config, or some userChrome.css code available to keep that X visible all the time on all the tabs?

Asked by carpevis 1 unyaka odlule

Answered by carpevis 1 unyaka odlule

  • Kusonjululiwe
  • Okugcinwe kunqolobane

Managed Bookmarks Subfolder question

Hello, I have successfully deployed bookmarks using ADMX but I am not being able to create subfolders inside of the main folder I created. The Idea is to set it up like t… (funda kabanzi)

Hello,

I have successfully deployed bookmarks using ADMX but I am not being able to create subfolders inside of the main folder I created. The Idea is to set it up like this -\Managed Bookmarks

 -Link1
 -Link2
  \Subfolder1
      -Link1
      -Link2
   \Subfolder2
        -Link1
        -Link2

Can someone please help? I was able to get this done with Edge Chromium and Chrome.

Thanks, -Bruce

Asked by brucesa 8 izinyanga ezidlule

Answered by Mike Kaply 3 izinyanga ezidlule

  • Kusonjululiwe
  • Okugcinwe kunqolobane

security.osclientcerts.autoload in FIrefox 68.9.0

Hi. I have a problem using the p12 certificates stored in Windows. security.osclientcerts.autoload is set in the registry under CU and LM under \SOFTWARE\Policies\Mozilla… (funda kabanzi)

Hi.

I have a problem using the p12 certificates stored in Windows. security.osclientcerts.autoload is set in the registry under CU and LM under \SOFTWARE\Policies\Mozilla\Firefox\Preferences >>"security.osclientcerts.autoload"=dword:00000001 When checking about:config it's also set to true. The good thing: The certificates show up in Firefox version 77.0.1, where the certificates are listed. The bad thing: as standard browser we use is Firefox ESR version 68.9.0, where the certificates are not listed.

What I have seen by now security.osclientcerts.autoload has been implemented in ESR version 68.4.x .... is that the only version oder also for newer ones ?

And if also for newer ones, what could be the problem,.... and / or the solution for this problem ?

Appreciate for your help.

Kind regards Tom

Asked by t.hirtl 6 izinyanga ezidlule

Answered by Mike Kaply 6 izinyanga ezidlule