From 27f97386a0259a8b12700e5d671a2de86c98661f Mon Sep 17 00:00:00 2001

From: Petr Vobornik <pvoborni@redhat.com>

Date: Thu, 17 Sep 2015 17:41:06 +0200

Subject: [PATCH] webui: use manual Firefox configuration for Firefox >= 40

The intended course of action is to show manual configuration in

browserconfig.html instead of configuration with the extension

for versions of Firefox >= 40.

The reasoning is:

* plan for enterprise environments was not published yet which

  forces as to use AMO (addons.mozilla.org)

* with AMO the user experience is worse than a manual configuration

steps for AMO:

* go to AMO page

* installed the extension

* go back to IPA page

* probably refresh

* click configure

* confirm

manual config:

* go to about:config

* set  network.negotiate-auth.trusted-uris with *domain.name

https://fedorahosted.org/freeipa/ticket/4906

Reviewed-By: Martin Basti <mbasti@redhat.com>

---

 install/html/browserconfig.html | 25 ++++++++++++++++++++++---

 install/html/ffconfig_page.js   | 24 +++++++++++++++++++++---

 2 files changed, 43 insertions(+), 6 deletions(-)

diff --git a/install/html/browserconfig.html b/install/html/browserconfig.html

index d721a4ad2a3b684a4bf45602584fee78f4613360..9c5cf68211281723e12b518f346aac43c1541cdc 100644

--- a/install/html/browserconfig.html

+++ b/install/html/browserconfig.html

@@ -69,7 +69,7 @@

-            

+            

                 
Step 2

@@ -85,7 +85,7 @@

-            

+            

                 
Step 3

                 
Configure browser

                 
Browser successfully configured

@@ -94,8 +94,27 @@

                 
Configuration was not successful, unknown error uccured.

+            

+                
Step 2

+                

+                    

+                        In the address bar of Firefox, type about:config to display the list of current configuration options.

+                    

+                    

+                        In the Filter field, type negotiate to restrict the list of options.

+                    

+                    

+                        Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.

+                    

+                    

+                        Enter the name of the domain against which you want to authenticate, for example, .example.com.

+                    

+                

+            

+

-                
Step 4

+                
Step 4

+                
Step 3

                 
Return to Web UI

diff --git a/install/html/ffconfig_page.js b/install/html/ffconfig_page.js

index 4e59db0aa5424d3c664d3d651843b26b440d50a9..536332ee8358fb007da840b587df92e627dd7b58 100644

--- a/install/html/ffconfig_page.js

+++ b/install/html/ffconfig_page.js

@@ -87,7 +87,7 @@

         if (!browser.mozilla) {

             $('#wrongbrowser').show();

-            set_enabled(['#step1', '#step2', '#step3'], false);

+            set_enabled(['#step2b'], false);

         } else {

             // Disable for all version of FF older than 15. Theoretically

             // the extension is compatible with version 3.6, 10 and later

@@ -95,8 +95,26 @@

             // resource from chrome.manifest

             if (compare_version(browser.version, '15') === -1) {

                 $('#step2a').show();

-                set_enabled(['#step2', '#step3'], false);

-            }// else if (compare_version(version, '15') === -1) {

+                $('#step2').show();

+                $('#step3').show();

+                $('#step4header').show();

+                $('#step3bheader').hide();

+                set_enabled(['#step2', '#step3', '#step2b'], false);

+            }  else if (compare_version(browser.version, '40') === -1) {

+                // FF is > 15 < 40

+                // show krb extension method

+                $('#step2').show();

+                $('#step3').show();

+                $('#step4header').show();

+                $('#step3bheader').hide();

+                $('#step2b').hide();

+            }

+            // else

+            // Firefox since version 40 has new extension signing policy

+            // this policy prevents to use self-signed FF extension and

+            // thus a manual config is needed - which is the default (step2b)

+

+            // else if (compare_version(version, '15') === -1) {

 //                 $('#step2a').show();

 //                 $('#older-compatible').show();

 //                 $('#older-required').hide();

-- 

2.4.3