firefox.adm + Firefox 5.0.1 + Group Policy for SSO

Post Reply
jadeddog
Posts:5
Joined:Thu Apr 11, 2013 4:21 pm
firefox.adm + Firefox 5.0.1 + Group Policy for SSO

Post by jadeddog » Thu Apr 11, 2013 4:43 pm

I am new to using the firefox.adm template, so I apologize in advance for any dumb questions.

We have a Microsoft Active Directory domain where some users have Firefox on their systems. We have existing Firefox policies that used the following templates: firefoxdefaults and firefoxlock. These existing GPOs did stuff like set the homepage and other simple things like that. They worked fine.

We are implementing some Single Sign-On (SSO) stuff and to do so you have to set the following settings in Firefox to true: network.negotiate-auth.delegation-uris and network.negotiate-auth.trusted-uris.

So I added the firefox.adm template to the GPO and then set the Computer Configuration\Policies\Administrative Templates\Mozilla Firefox/Default Settings/Mozilla Advanced Options/networkshow settings as needed. Applied the GPO and the registry keys at HKLM\SOFTWARE\Policies\Mozilla\lockPref are now set with our domain on the affected desktops. However when I go to about:config from within Firefox, the network.negotiate-auth.delegation-uris and network.negotiate-auth.trusted-uris settings do not have this setting.

What are we doing wrong? Thanks for any help.

Curtis
Posts:4
Joined:Thu Apr 04, 2013 9:48 pm

Re: firefox.adm + Firefox 5.0.1 + Group Policy for SSO

Post by Curtis » Thu Apr 11, 2013 7:36 pm

Have you run the Group Policy Results Wizard against a machine that is supposed to have the policy?

User avatar
DraconPern
Site Admin
Posts:1218
Joined:Thu Oct 30, 2003 11:47 pm
Location:Texas
Contact:

Re: firefox.adm + Firefox 5.0.1 + Group Policy for SSO

Post by DraconPern » Fri Apr 12, 2013 1:17 am

Did you mean Firefox 15.0.1 or 5.0.1?
FrontMotion Lead Developer

jadeddog
Posts:5
Joined:Thu Apr 11, 2013 4:21 pm

Re: firefox.adm + Firefox 5.0.1 + Group Policy for SSO

Post by jadeddog » Mon Apr 15, 2013 10:38 am

DraconPern wrote:Did you mean Firefox 15.0.1 or 5.0.1?
Mozilla Firefox 5.0.1, not 15.0.1. Yes, I know it's a very old version, but it's our current corporate build.

jadeddog
Posts:5
Joined:Thu Apr 11, 2013 4:21 pm

Re: firefox.adm + Firefox 5.0.1 + Group Policy for SSO

Post by jadeddog » Mon Apr 15, 2013 10:47 am

Curtis wrote:Have you run the Group Policy Results Wizard against a machine that is supposed to have the policy?
Yes, I've run RSOP against the workstation, and it is indeed receiving the correct GPO. The GPO shows "Firefox Computer Policy" as applying. Additionally, the "Mozilla Firefox/Locked Settings/Mozilla Advanced Options/network" has both network.negotiate-auth.delegation-uris and network.negotiate-auth.trusted-uris set to enabled, and the winning GPO listed as Firefox Computer Policy. All this is as expected, since the the registry keys that this GPO sets (HKLM\SOFTWARE\Policies\Mozilla\lockPref) are set to enabled with our domain listed.

The GPO is working, but Firefox is not getting the updated settings. When I go to about:config the settings are not showing up. This is the problem.

jadeddog
Posts:5
Joined:Thu Apr 11, 2013 4:21 pm

Re: firefox.adm + Firefox 5.0.1 + Group Policy for SSO

Post by jadeddog » Tue Apr 16, 2013 9:30 am

So nobody has any ideas on this one?

jpa
Posts:122
Joined:Fri May 01, 2009 5:06 pm

Re: firefox.adm + Firefox 5.0.1 + Group Policy for SSO

Post by jpa » Tue Apr 16, 2013 11:53 am

Try using FrontMotion CE 20. If it works then maybe those policies weren't supported way back in mid 2011.

jadeddog
Posts:5
Joined:Thu Apr 11, 2013 4:21 pm

Re: firefox.adm + Firefox 5.0.1 + Group Policy for SSO

Post by jadeddog » Tue Apr 16, 2013 1:22 pm

Just thought I would update with what fixed the problem. I updated to our latest corporate approved build of 8.0.1 and the settings are now showing as they should. So it looks like the Firefox adm that we were using did not support the older version.

User avatar
DraconPern
Site Admin
Posts:1218
Joined:Thu Oct 30, 2003 11:47 pm
Location:Texas
Contact:

Re: firefox.adm + Firefox 5.0.1 + Group Policy for SSO

Post by DraconPern » Mon Apr 22, 2013 11:34 pm

Ah, there wasn't a CE version for 5.0.1. The first one was 8.0.1.
FrontMotion Lead Developer

Post Reply