Red Hat Bugzilla – Bug 1261074
Adjust Firefox configuration to new extension signing policy
Last modified: 2016-01-06 07:03:35 EST
Description of problem:
This is a clone for upstream bug:
Customer is using firefox 40.0.3
Version-Release number of selected component (if applicable):
I have not reproduced but seems it can be reproduced always with firefox version 40.
Steps to Reproduce:
Install extension for kerberos auth kerberosauth.xpi in firefox 40.X
the extension will show as corrupted.
The workaround is here:
Basically, add in about:config the property:
network.negotiate-auth.trusted-uris: .<domain name>
The intended course of action is to show manual configuration in browserconfig.html instead of configuration with the extension for versions of Firefox >= 40.
The reasoning is:
* plan for enterprise environments was not published yet which forces as to use AMO (addons.mozilla.org)
* with AMO the user experience is worse than a manual configuration
steps for AMO:
* go to AMO page
* installed the extension
* go back to IPA page
* probably refresh
* click configure
* go to about:config
* set network.negotiate-auth.trusted-uris with *domain.name
Created attachment 1077898 [details]
Created attachment 1077899 [details]
IPA server version ::
Attached images for behavior changes.
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.