Tuesday, April 10, 2007

Firefox, Novell client, and Microsoft ISA, oh my!

If you want to access Internet resources from within UCT, you traverse some sort of proxy server.
For "performance reasons" UCT now use Microsoft ISA instead of Novell BorderManager.

UCT is reasonably enlightened, Mozilla Firefox is pre-installed.
.
.
.
Hello? 1.0.8? Heckfire that's old!
In fact, 1.0.8 was released after the sunset announcement for the 1.0.x line.

So why not install 2.0.0.3 or even Gran Paradiso 3.0 Alpha 3 (handy-dandy LEG mirror for the UCT-enabled)? It works fine and most of the intranet stuff supports Firefox well.

BUT

Since we are using generally using NT 5 (er...Windows XP), ISA ends up trying to authenticate with the local workstation credentials, which are pretty useless as we don't login to the local workstation with our UCT credentials, but rather some stub account. So when you try surfing, you end up with an endless amount of popups asking for credentials for ISA. You can type in the correct[ed] version of your username and password, but even asking Password Manager to remember the password does not help.

The trick is to open the hardcore configuration (go to about:config) and search for network.auth.use-sspi and disable it. Then enter the username/password combo once and let it be remembered.

Et voilá!

No comments: