Bug 38390 – Manual: Optional workaround for java updater

Bug 38390 - Manual: Optional workaround for java updater


Summary:	Manual: Optional workaround for java updater

Status:	CLOSED FIXED

Product:	UCS@school
Classification:	Unclassified
Component:	Documentation
Version:	UCS@school 4.0
Hardware:	Other Linux

Importance:	P5 enhancement (vote)
Target Milestone:	UCS@school 4.0 R2
Assigned To:	Sönke Schwardt-Krummrich
QA Contact:	Florian Best

URL:
Keywords:

Depends on:	37541 40671
Blocks:
	Show dependency tree / graph

Reported:	2015-04-29 15:59 CEST by Florian Best
Modified:	2016-02-16 15:12 CET (History)
CC List:	1 user (show)

See Also:
What kind of report is it?:	---
What type of bug is this?:	---
Who will be affected by this bug?:	---
How will those affected feel about the bug?:	---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):	External feedback
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Florian Best

2015-04-29 15:59:14 CEST

It has to be stated that using the scripts from Bug #37541 and Bug #37542 will cause that students are able to circumvent some proxy settings by modifying the User-Agent HTTP header to a java related string. (easy with FF about:config → general.useragent.override).

Especially during a school exam the scripts should be deactivated.

+++ This bug was initially created as a clone of Bug #37541 +++

The windows java updater is unable to use the UCS@school proxy. So an exception for squid has been suggested by a customer. The following ACL allows access for clients with a specific browser string:

acl winhttp browser -i ^Microsoft-CryptoAPI
http_access allow winhttp

Comment 1 Florian Best

2015-04-29 16:37:30 CEST

It allows also to use the proxy without authentication.

Comment 2 Sönke Schwardt-Krummrich

2015-05-04 23:59:34 CEST

Added SDB article 1327 (not yet activated).

Comment 3 Florian Best

2015-05-05 12:47:31 CEST

well, the warning is very slack but OK for now.

Comment 4 Florian Best

2015-05-11 19:24:52 CEST

UCS@school 4.0 R2 v1 has been released:
http://docs.univention.de/release-notes-ucsschool-4.0R2v1-de.html

If this error occurs again, please use "Clone This Bug".