Bug 31905 - UCC: proxy services
UCC: proxy services
Status: CLOSED FIXED
Product: Univention Corporate Client (UCC)
Classification: Unclassified
Component: Client management
unspecified
Other Linux
: P5 normal
: UCC 1.0-errata
Assigned To: Felix Botner
Florian Best
:
Depends on: 31967 31972
Blocks: 31995 32029
  Show dependency treegraph
 
Reported: 2013-07-05 14:56 CEST by Sönke Schwardt-Krummrich
Modified: 2014-01-08 11:11 CET (History)
1 user (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Sönke Schwardt-Krummrich univentionstaff 2013-07-05 14:56:39 CEST
The UCC client should use the UCS@school HTTP proxy. The proxy should be configured automatically for all applications.
It has to be checked if the UCC client is able to perform a transparent proxy authentication with the user credentials.
Currently the UCS@school proxy only support BASIC and NTLM authentication.
Comment 1 Sönke Schwardt-Krummrich univentionstaff 2013-07-14 14:57:48 CEST
univention-ucc-proxy-settings:
→ please use the following UCR variable names: 
  ucc/proxy/autoconfig/url, ucc/proxy/http
→ currently only HTTP connections are proxied →   
  e.g. """user_pref("network.proxy.http...""" → what about FTP? 
  Is it possible to setup a proxy for all protocol types?
Comment 2 Felix Botner univentionstaff 2013-07-15 09:39:40 CEST
(In reply to Sönke Schwardt-Krummrich from comment #1)
> univention-ucc-proxy-settings:
> → please use the following UCR variable names: 
>   ucc/proxy/autoconfig/url, ucc/proxy/http

ok

> → currently only HTTP connections are proxied →   
>   e.g. """user_pref("network.proxy.http...""" → what about FTP? 
>   Is it possible to setup a proxy for all protocol types?
yes, that is possible
Comment 3 Felix Botner univentionstaff 2013-07-15 11:33:54 CEST
Added package univention-ucc-proxy-settings with two templates, one for firefox (/usr/lib/firefox/defaults/pref/ucc-proxy.js) and one for KDE (/usr/share/kubuntu-default-settings/kde4-profile/default/share/config/kioslaverc). 
If 

  ucc/proxy/autoconfig/url 

is set, this URL is used as URL for the proxy pac setting in both templates, if 

  ucc/proxy/http 

is set, the URL is used as proxy server (http, ftp, https, ...) in both templates.

YAML: 2013-07-15-univention-ucc-proxy-settings.yaml
Build in: ucs_3.1-0-ucc-errata
Comment 4 Sönke Schwardt-Krummrich univentionstaff 2013-07-17 11:44:15 CEST
(In reply to Felix Botner from comment #3)
> Added package univention-ucc-proxy-settings with two templates, one for
> firefox (/usr/lib/firefox/defaults/pref/ucc-proxy.js) and one for KDE
> (/usr/share/kubuntu-default-settings/kde4-profile/default/share/config/
> kioslaverc). 

The Firefox proxy settings are mandatory but the KDE settings are not → the user is able to change the proxy settings.
Please check if it is possible to make the KDE settings also mandatory  → REOPEN
Comment 5 Felix Botner univentionstaff 2013-07-17 11:56:47 CEST
added immutable flag to kde proxy settings
Comment 6 Sönke Schwardt-Krummrich univentionstaff 2013-07-17 14:46:40 CEST
@QA: Please check also if the KDE network environment is operational:
     dolphin → remote:/ → Samba Shares → $DOMAIN → $SCHOOLDC → $SHARE
Comment 7 Florian Best univentionstaff 2013-07-22 18:29:56 CEST
(In reply to Felix Botner from comment #3)
> Added package univention-ucc-proxy-settings with two templates, one for
> firefox (/usr/lib/firefox/defaults/pref/ucc-proxy.js) and one for KDE
> (/usr/share/kubuntu-default-settings/kde4-profile/default/share/config/
> kioslaverc). 
> If 
> 
>   ucc/proxy/autoconfig/url 
> 
> is set, this URL is used as URL for the proxy pac setting in both templates,
> if 
> 
>   ucc/proxy/http 
> 
> is set, the URL is used as proxy server (http, ftp, https, ...) in both
> templates.
OK

> YAML: 2013-07-15-univention-ucc-proxy-settings.yaml
> Build in: ucs_3.1-0-ucc-errata
OK

(In reply to Felix Botner from comment #5)
> added immutable flag to kde proxy settings
OK

(In reply to Sönke Schwardt-Krummrich from comment #6)
> @QA: Please check also if the KDE network environment is operational:
>      dolphin → remote:/ → Samba Shares → $DOMAIN → $SCHOOLDC → $SHARE
OK, shares are accessable.
Comment 8 Moritz Muehlenhoff univentionstaff 2013-07-25 12:36:16 CEST
http://errata.univention.de/ucc/1.0/15.html