Re: [Mozilla Enterprise] Issues with multiprocessing

[Samuel Ambaye]

I’ve attached the issue/email I reported earlier but unfortunately did not have 
the bandwidth to pursue it further.
I did create however create a ticket with our IDP but they were able to 
reproduce the issue with another third party IDP and so we dropped the issue 
altogether. Since then, we have tried to use a more “mainstream” FF 
configuration

Best,
Samuel


From: Mike Kaply 
Date: Monday, 4 November 2019 at 18:44
To: Samuel Ambaye 
Cc: Tiago Marques Delboni , "enterprise@mozilla.org" 

Subject: Re: [Mozilla Enterprise] Issues with multiprocessing

What specific problems did you encounter? Did you open or find bugs in bugzilla 
for them?

Mike

On Fri, Nov 1, 2019 at 3:14 AM Samuel Ambaye 
mailto:samuel.amb...@oakfnd.ch>> wrote:
Hi,

Yes. We also had to temporarily set the value to false to avoid a few issues 
(SSO, capability.policy.policynames, start up errors).
We are removing usage of the FF setting capability.policy.policynames so that 
we can restore support for multiprocessing and avoid SSO issues.

Best,
Samuel


From: Enterprise 
mailto:enterprise-boun...@mozilla.org>> on 
behalf of Tiago Marques Delboni 
mailto:tiago.delb...@almg.gov.br>>
Date: Thursday, 31 October 2019 at 17:24
To: "enterprise@mozilla.org<mailto:enterprise@mozilla.org>" 
mailto:enterprise@mozilla.org>>
Subject: [Mozilla Enterprise] Issues with multiprocessing

Hi!

Since ESR 52.x and now with ESR 60.x, both Windows/64bits, we are having issues 
with multiprocessing enabled - FF hangs or some funcionalities of 
sites/applications doesn't work as expected. We observed this behavior on 
OpenCMS based websites, Alfresco and a few others.

To fix this, we had to set "browser.tabs.remote.autostart=false" in our 
organization.

Anyone else having this kind os issues?
--

Tiago Marques Delboni

___
Enterprise mailing list
Enterprise@mozilla.org<mailto:Enterprise@mozilla.org>
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org<mailto:enterprise-requ...@mozilla.org> with a 
subject of "unsubscribe"
--- Begin Message ---
We have a tool called mozregression:

https://mozilla.github.io/mozregression/

That would be very helpful to find this out.

If you can recreate on Firefox 52, and you could track down what caused it, 
that would be great.

Mike

On Thu, Jun 7, 2018 at 3:29 PM, Samuel Ambaye  wrote:
Thank you for looking into this. We did not have the issue with ESR FF 52 x32 
like we do now with FF 60 x64 but I have not tested on V52 with a clean/new 
profile like I have on V60. 


On 7 Jun 2018, at 22:02, Mike Kaply  wrote:

I've looked into this and I can't find any reason why setting checkloaduri to 
enabled would cause this behavior.

Is this a new behavior or did it happen on Firefox 52?

Mike

On Thu, Jun 7, 2018 at 10:58 AM, Samuel Ambaye  wrote:
Hi, 

Given Firefox 60 and that the following pref is added using about:config

capability.policy.localfilelinks.sites = http://www.example.com

When using an Identity Provider initiated SAML sign-in (on www.example.com)
The system somehow changes a SAML HTTP method POST to method GET causing the 
signing to fail.

Work-Around: Set browser.tabs.remote.autostart to false.

Notes: Apparently, others have reproduced this issue on other other sites 
(Salesforce) and when using other Identity Providers (GSuite).

My questions are:
Is capability.policy.localfilelinks.sites a supported configuration?
Is this just a bug or is there a trade off between the preference and the 
work-around.
Any other / better work-arounds?
Any advice other than filing a bug report and disabling autostart?

Best,
Samuel

PS - The preference is used with the ones below
capability.policy.localfilelinks.checkloaduri.enabled and
capability.policy.policynames
PSS - No issue in Chrome, which does not offer access to the local file system 
anyway due to security conerns.


___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"




--- End Message ---
___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

Re: [Mozilla Enterprise] Issues with multiprocessing

[Samuel Ambaye]

Hi,

Yes. We also had to temporarily set the value to false to avoid a few issues 
(SSO, capability.policy.policynames, start up errors).
We are removing usage of the FF setting capability.policy.policynames so that 
we can restore support for multiprocessing and avoid SSO issues.

Best,
Samuel


From: Enterprise  on behalf of Tiago Marques 
Delboni 
Date: Thursday, 31 October 2019 at 17:24
To: "enterprise@mozilla.org" 
Subject: [Mozilla Enterprise] Issues with multiprocessing

Hi!

Since ESR 52.x and now with ESR 60.x, both Windows/64bits, we are having issues 
with multiprocessing enabled - FF hangs or some funcionalities of 
sites/applications doesn't work as expected. We observed this behavior on 
OpenCMS based websites, Alfresco and a few others.

To fix this, we had to set "browser.tabs.remote.autostart=false" in our 
organization.

Anyone else having this kind os issues?
--

Tiago Marques Delboni

___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

Re: [Mozilla Enterprise] End of TLS 1.0 & 1.1 support in Firefox ESR 68?

[Samuel Ambaye]

But there will be a warning in ESR 68 – see screen shot to see how it looks
[A screenshot of a cell phone  Description automatically generated]
Best,
Samuel
From: Enterprise  on behalf of Mike Kaply 

Date: Wednesday, 2 October 2019 at 22:04
To: TARLO Marius OBS/OCB 
Cc: ZAJAC Stephane TGI/OLS , 
"enterprise@mozilla.org" , BREDELOUX-CHEVAL Sabrina 
DISU/UOM , CHEMINEL Mickael DTSI/DISU 

Subject: Re: [Mozilla Enterprise] End of TLS 1.0 & 1.1 support in Firefox ESR 
68?

Unless there's some major security issue we need to address, we'll leave them 
enabled on the ESR until it catches up with release.

Mike

On Wed, Oct 2, 2019 at 9:52 AM 
mailto:marius.ta...@orange.com>> wrote:
Hello,

I’ve read some news which say that the most popular web browsers (Chrome, Edge, 
IE, Safari and Firefox) should abandon TLS 1.0 and TLS 1.1 protocols during the 
year 2020.
I’ve seen that they are already disabled in the latest nightly, and that they 
should be disabled in March 2020 with Firefox 74.
Does it mean that they will be disabled with Firefox ESR 68.6 as well?

Thank you very much for your answer!

Cordialement / Best regards,
[cid:image002.jpg@01D579C8.9F7DA790]
Marius TARLO
Maintenance e-buro
FT/SCE/G2S/NRS/NEOCLES
tél. +33 1 42 75 34 25
marius.ta...@orange.com


_



Ce message et ses pieces jointes peuvent contenir des informations 
confidentielles ou privilegiees et ne doivent donc

pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce 
message par erreur, veuillez le signaler

a l'expediteur et le detruire ainsi que les pieces jointes. Les messages 
electroniques etant susceptibles d'alteration,

Orange decline toute responsabilite si ce message a ete altere, deforme ou 
falsifie. Merci.



This message and its attachments may contain confidential or privileged 
information that may be protected by law;

they should not be distributed, used or copied without authorisation.

If you have received this email in error, please notify the sender and delete 
this message and its attachments.

As emails may be altered, Orange is not liable for messages that have been 
modified, changed or falsified.

Thank you.
___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a 
subject of "unsubscribe"
___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

Re: [Mozilla Enterprise] Capability Policy Pref for Local File Links Breaking IDP Initiated SAML sign-in

[Samuel Ambaye]

Thank you for looking into this. We did not have the issue with ESR FF 52 x32 
like we do now with FF 60 x64 but I have not tested on V52 with a clean/new 
profile like I have on V60.

On 7 Jun 2018, at 22:02, Mike Kaply 
mailto:mka...@mozilla.com>> wrote:

I've looked into this and I can't find any reason why setting checkloaduri to 
enabled would cause this behavior.

Is this a new behavior or did it happen on Firefox 52?

Mike

On Thu, Jun 7, 2018 at 10:58 AM, Samuel Ambaye 
mailto:samuel.amb...@oakfnd.ch>> wrote:
Hi,

Given Firefox 60 and that the following pref is added using about:config

capability.policy.localfilelinks.sites = 
http://www.example.com<http://www.example.com/>

When using an Identity Provider initiated SAML sign-in (on 
www.example.com<http://www.example.com/>)
The system somehow changes a SAML HTTP method POST to method GET causing the 
signing to fail.

Work-Around: Set browser.tabs.remote.autostart to false.

Notes: Apparently, others have reproduced this issue on other other sites 
(Salesforce) and when using other Identity Providers (GSuite).

My questions are:

  *   Is capability.policy.localfilelinks.sites a supported configuration?
  *   Is this just a bug or is there a trade off between the preference and the 
work-around.
  *   Any other / better work-arounds?

Any advice other than filing a bug report and disabling autostart?

Best,
Samuel

PS - The preference is used with the ones below

  *   capability.policy.localfilelinks.checkloaduri.enabled and
  *   capability.policy.policynames

PSS - No issue in Chrome, which does not offer access to the local file system 
anyway due to security conerns.


___
Enterprise mailing list
Enterprise@mozilla.org<mailto:Enterprise@mozilla.org>
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org<mailto:enterprise-requ...@mozilla.org> with a 
subject of "unsubscribe"


___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

[Mozilla Enterprise] Capability Policy Pref for Local File Links Breaking IDP Initiated SAML sign-in

[Samuel Ambaye]

Hi,

Given Firefox 60 and that the following pref is added using about:config

capability.policy.localfilelinks.sites = http://www.example.com

When using an Identity Provider initiated SAML sign-in (on 
www.example.com)
The system somehow changes a SAML HTTP method POST to method GET causing the 
signing to fail.

Work-Around: Set browser.tabs.remote.autostart to false.

Notes: Apparently, others have reproduced this issue on other other sites 
(Salesforce) and when using other Identity Providers (GSuite).

My questions are:

  *   Is capability.policy.localfilelinks.sites a supported configuration?
  *   Is this just a bug or is there a trade off between the preference and the 
work-around.
  *   Any other / better work-arounds?

Any advice other than filing a bug report and disabling autostart?

Best,
Samuel

PS - The preference is used with the ones below

  *   capability.policy.localfilelinks.checkloaduri.enabled and
  *   capability.policy.policynames

PSS - No issue in Chrome, which does not offer access to the local file system 
anyway due to security conerns.

___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

Re: [Mozilla Enterprise] Stupidly Slow Firefox ESR

[Samuel Ambaye]

We’re also not sure about the root cause of the slowness for FF 52 ESR. We 
re-imaged a PC with an older version of our image and then installed FF 52 ESR 
but it worked fine. We suspect that there are many factors at play – windows 
patches, FF ESR versions, FF deployment and other software deployment.
The latest version of RR x64 bit version seems to be working as well as Chrome.

From: Enterprise  On Behalf Of Mark Mielke
Sent: 31 March 2018 20:09
To: Java Sys 
Cc: enterprise@mozilla.org List 
Subject: Re: [Mozilla Enterprise] Stupidly Slow Firefox ESR

I'm encountered slowness with Firefox 52 ESR as well, however, I haven't been 
able to identify the cause or even prove it was Firefox 52 ESR (vs other 
versions). And since I have also been experiencing it with Firefox 59 now, I 
was actually pretty sure it wasn't Firefox 52 ESR (at least in my case), but 
something else that has changed...

Recently we set up a new service for an on-premise appliance and added signed 
certs to it. In this case, I was getting reproducible hangs every time I 
accessed this service in Firefox 59, but never with Chrome. And then when I 
tried another system where Firefox 52 ESR was installed, it may been slow to 
start, but then worked fine.

I ended up down the rabbit hole that concluded this could be related to the 
certificate signing. After removing cert8.db and cert9.db from my profile, the 
hang disappeared and was no longer reproducible.

I haven't determined the exact cause of this yet, but I'm wondering if the OCSP 
or CA validation URL or other have changed on some certificate authorities, or 
if some of the signing certs are now expired and referring to validation URL 
that are no longer in service, and the hangs are caused by Firefox trying to 
validate the certificates against the old URL which is no longer responding. By 
using up-to-date root CA public certificates in the Firefox profile, it will 
only check up-to-date CA validation URL, and it will work properly as expected?

If any of you are still seeing hangs and can reproduce, I suggest you remove 
cert8.db and cert9.db from your profile and restart Firefox to allow them to be 
re-created. See if you are still seeing hangs after this.
___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

Re: [Mozilla Enterprise] Deploy Pinned Tabs

[Samuel Ambaye]

Hi James,
Thank you. Yes, I believe you are correct. 
As a work-around, we will consider deploying multiple home pages.
Samuel

-Original Message-
From: James Pearson [mailto:jame...@moving-picture.com] 
Sent: 13 February 2018 15:27
To: Samuel Ambaye <samuel.amb...@oakfnd.ch>; enterprise@mozilla.org
Subject: Re: [Mozilla Enterprise] Deploy Pinned Tabs

Samuel Ambaye wrote:
> Hi,
> 
> I wanted to deploy a few pinned tabs so that it is easier for our 
> colleagues to access the two or three core apps and avoid opening 
> multiple instances of the same app.
> 
> How would one - for example - deploy a pinned a tabs for
> 
> *   www.google.com<http://www.google.com>, and outlook.live.com
>
> Alternatively, links to the documentation that gives hints would also 
> help.

I'm not sure it can be done other than interactively

I guess you could ask Mike Kaply if this could be added to CCK2 ?

Or, maybe something to be supported by the forthcoming 'Policy Engine' 
feature ?

James Pearson
___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

[Mozilla Enterprise] Deploy Pinned Tabs

[Samuel Ambaye]

Hi,

I wanted to deploy a few pinned tabs so that it is easier for our colleagues to 
access the two or three core apps and avoid opening multiple instances of the 
same app.

How would one - for example - deploy a pinned a tabs for

  *   www.google.com<http://www.google.com>, and outlook.live.com
Alternatively, links to the documentation that gives hints would also help.

Here is how FF let's users do it interactively.

[cid:image003.jpg@01D3A18C.6B4D0760]


Thanks in advance.

Best,
Samuel Ambaye
Oak Foundation
___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"

Re: [Mozilla Enterprise] Super slow pages after update from 45.9->52.1 ESR

[Samuel Ambaye]

We noticed the issue when one of our users reported a similar issue following a 
minor version ESR update:

Using FF 45.9.0.6310 & Windows 7.
(1) Start FF
(2) goto this URL www.lematin.ch (newspaper in Geneva, Switzerland)
Results: Browser waits for the page to load for two-three minutes to load (but 
would actually load);
Results: Other browsers, No issue;
(4) Close browser 
Browser hangs and requires a kill process.
(5) Restart Browser and Try different web sites, even ones that were ok before;
Results: Browser waits for web site for over two / three minutes;
(5) Kill Process, Restart browser and repeat step 2 and 5:
Same Result;
(6) Kill Process, Replace FF user profile and repeat step 2 and 5:
Same Result;
(7) Uninstall FF for users who were affected; Install FF 52.1.0.6316
Issue no longer reproducible

We hope this helps.

Best,
Samuel



>>> Jim Weill  19/05/2017 00:17 >>>
I notice the issue when I first open FF in the morning on Windows 7 Pro 
x64 machines.  After that I cannot come up with a reliable way to 
reproduce this issue, other than it happens at random times throughout 
the day.

I do not notice this on Mac OSX 10.12 at all (we have a few of these).  
And I have not polled our Linux users on this issue, so I do not know 
where that stands.

Is there something in the dev tools that I can leave open when this 
happens again to try to narrow this down?  I've had this happen several 
times today already.

jim


On 5/11/2017 11:51 AM, Phil Pishioneri wrote:
> On 5/11/17 2:06 PM, Julien Cristau wrote: 
>> we've filed a bug at  
>> https://bugzilla.mozilla.org/show_bug.cgi?id=1361865 to investigate  
>> the issue reported in this thread. Unfortunately so far we haven't  
>> been able to reproduce this internally.  Does anyone on this thread  
>> have a reliable way to reproduce the problem you've seen?  If this is  
>> also reproducible with the non-ESR Firefox releases, knowing which  
>> version introduced it would also help narrow down the search. 
> 
> I've had very reproducible delays since (non-ESR) release 48. I found  
> it related to syncing of my (large) bookmarks. Whenever the sync  
> process starts (this can be "random", especially if a Firefox is  
> active on another host syncing to the same account), Firefox's UI  
> locks up for a few seconds. On a Mac, I get the spinning beach ball;  
> on Windows, I'll get the window title bar message about the process  
> not responding; I don't recall the behavior on Linux, other than  
> Firefox becomes unresponsive. Creating a new bookmark also starts a  
> sync (and, it'll start while the "Bookmark This Page" window is open). 
> 
> My circumvention was to find the host name being used for my sync, and  
> put in an override in my client's hosts file that maps the name to  
> loopback 127.0.0.1, then commenting that out and manually starting a  
> sync when I need it (then uncomment it again afterward). 
> 
> My multiprocess status is off on all of these platforms due to  
> incompatible extensions. 
> 
> -Phil 
> ___ 
> Enterprise mailing list 
> Enterprise@mozilla.org  
> https://mail.mozilla.org/listinfo/enterprise  
> 
> To unsubscribe from this list, please visit  
> https://mail.mozilla.org/listinfo/enterprise or send an email to  
> enterprise-requ...@mozilla.org with a subject of "unsubscribe" 


___
Enterprise mailing list
Enterprise@mozilla.org 
https://mail.mozilla.org/listinfo/enterprise 

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"
 

___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"