netscape.security.PrivilegeManager.enablePrivilege() call was deprecated in Firefox 15 and can't be used.
It completely breaks IPA browser configuration in signed .jar file. (https://test.example.com/ipa/config/browserconfig.html).
FF team recommends to make FF extension for any code which uses privileged code.
https://bugzilla.mozilla.org/show_bug.cgi?id=546848 https://bugzilla.mozilla.org/show_bug.cgi?id=757046
I think making FF extension just for configuring kerberos auth for one site is bad. I propose to give priority to ticket #823
We can offer configuration steps for: FF <= 14, FF >= 15, IE and Chrome. For FF <= 14 I would keep the configure.jar method.
Ticket has been cloned to Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=859968
References to network.negotiate-auth.delegation-uris will be removed in a future patch.
master:[[br]] 696fce5[[br]] 247a3a4[[br]] 206b6ca[[br]] b4e1950[[br]]
ipa-3-0:[[br]] 1212e86[[br]] e13a88a[[br]] 2ba1fb5[[br]] 8b9d0e1
Patch to remove reference to network.negotiate-auth.delegation-uris.
master: 4e72bc7
ipa-3-0: f9bafb2
Fix MIME type for XPI files:
master: 9bb927e[[BR]] ipa-3-0: 64b01a6
Backport to 2-2: - 41ff6aa Create Firefox extension on upgrade and replica-install - 8f59974 replica-install: Don't copy Firefox config extension files if they're not in the replica file - 53d29ac Add mime type to httpd ipa.conf for xpi extension - 1429538 Configuration pages changed to use new FF extension - 8849853 Build and installation of Kerberos authentication extension - 631a001 Kerberos authentication extension makefiles - 8c6699f Kerberos authentication extension
Metadata Update from @pvoborni: - Issue assigned to pvoborni - Issue set to the milestone: FreeIPA 3.0 RC2
Login to comment on this ticket.