Red Hat Bugzilla – Bug 807408
Xulrunner 10 and greater based ESC Can not display external enrollment UI
Last modified: 2016-09-16 14:14:42 EDT
Description of problem:
ESC provides means of displaying customized external HTML based token enrollment UI. The purpose of this feature is to allow the customer to produce customized UI with some of their own branding. This feature is also used in the special Security Officer Mode.
After experimenting with a version of ESC on Linux using the latest 10 series of Xulrunner, this UI does not display properly. This could be due to an error in the markup for which the new Gecko engine does not tolerate or possibly some tighter security restrictions on HTML scripting making use of ESC's local XPCOM components used to detect and enroll actual tokens. More investigation will be needed to diagnose the exact cause.
Turns out that the latest Gecko has an issue with the "progressmeter" tag in the /var/lib/pki-tps/cgi-bin/home/Enroll.html file.
Removing the "hidden=true" attribute allows the file to be displayed and for it to work properly.
Security officer station functions are not working on RHEL 5.8., for example, login to the SO work-station and click on the "Format Card" throws error message "Can't get UniversalXPConnect: TypeError: Components.classes['@redhat.com/rhCoolKey'] is undefined".
Possibly related to the issue that Jack mentioned in the description. Screen shot attached.
Created attachment 574078 [details]
On RHEL 5.8 with z-stream patches SO workstation throwing error when format card is clicked..
$ rpm -q esc coolkey firefox xulrunner
Created attachment 574083 [details]
Screen shot of external UI display problem during enrollment.
Noticed the issue on ESC RHEL 6.4z errata
Using pki-tps-10.3.3-9.el7pki.x86_64 seeing the following error when clicked on the auto enrollment button
"Problem loading Phone Home Information, check your network connection, re-insert the card, and try again!"