TweetFollow Us on Twitter

MacEnterprise: Managing FireFox

Volume Number: 24
Issue Number: 12
Column Tag: MacEnterprise

MacEnterprise: Managing FireFox

Configuring FireFox for your organization's environment

By Greg Neagle, MacEnterprise.org

Introduction

Although Safari is an excellent web browser, many organizations need to support Firefox as well for a variety of reasons. One very good reason is that it is a modern browser that runs natively on Windows, Linux, and OS X. If your organization supports multiple platforms, it makes sense to standardize on cross-platform applications like Firefox and Thunderbird when possible.

If you are supporting Firefox as a browser in your organization, you may need to pre-configure it for users in your environment. You may need to set up proxies, define your organization's home page as the default browser home page, and turn off application updates, among other things.

Unfortunately, Firefox does not respond to the Mac OS X administrator's standard bag of tricks for managing it. Workgroup Manager/MCX is of no use here, as the important settings are not stored in the org.mozilla.firefox.plist file in the user's preferences. By default, Firefox pays no attention to the system proxy settings. Even such time-honored tricks as copying in pre-defined preference files can be difficult with Firefox as it stores the user profiles at different paths, generated on the first run of Firefox.

A New Bag of Tricks

To manage Firefox in an enterprise environment, you'll need to learn a new bag of tricks. There are two things to learn:

How Firefox defines its preferences.

Where to define your preferences so Firefox will use them for all users on a given machine.

Firefox Preferences

Firefox is a descendant of the Mozilla browser, which was in turn descended from Netscape. Many of the mechanisms carry over from those browsers, and if you are looking for documentation on the Internet, you might want to broaden your search to those browsers as well.

Firefox uses JavaScript files to define its preferences. There are three JavaScript functions defined by Mozilla/Firefox you might use:

  • pref() - sets the current value of a preference. Useful for preferences you'd like to reset to defaults for each session, but to allow users to change during a session.
  • lockPref() - sets the value of a preference, and locks it so users can't change it. Useful to enforce certain policies.
  • defaultPref() - sets the default value of a preference. If the user has already set a value for this preference, this will have no effect.

What preferences can be set? You can get an idea of the vast array of available preferences by opening a Firefox window, and typing about:config into the URL field. If you are running Firefox 3, you might see a warning:


Ignore the sensationalism and click the "I'll be careful" button. You'll see a long list of available preferences:


Some of these correspond to preferences you can access from the Preferences window in Firefox, and others are hidden preferences. The important thing here is that you can get the preference name, its status, type and value, which you'll need in order to manage the preference.

In theory you can manage any of the preferences you find in about:config, but for this article we'll look at a subset. We'll explore how to manage proxy settings, the default browser check, and application updates. We'll also look at changing the default home page, but that actually uses a different technique, which we'll save for later.

Proxy Settings

To get started with managing the proxy settings, first configure them manually, using the Preferences window in Firefox:


In this example, I'm using an automatic proxy configuration URL, sometimes referred to as a "PAC file". Click OK, and once again, visit about:config. To narrow down what is displayed, type "proxy" in the Filter field:


The values we've set will have a status of "user set", and display in bold:


You can use a similar process to determine the correct names and values for most of the preferences you'd like to manage.

Here are the rest of the preferences we're going to manage for this article:


These control application and extension updates, updating the list of available search providers, and the check to see of Firefox is the default browser at launch. Since we are managing Firefox, we don't want users to be notified of newer versions of the application or extensions, and we don't want the user constantly prompted to set Firefox as the default browser.

Editing the Firebox Bundle

To actually get Firefox to use your desired preferences for all users of a given machine, you'll need to edit some files inside the Firefox.app bundle. You'll need to do the editing as either root (via the command line, perhaps using sudo), or as the owner of the files in the Firefox bundle; typically the admin user that installed Firefox.

Take care when editing. If you use a GUI editor, make sure you save any new or changed files as plain text and that no extra extensions are appended to the end of the filename.

You will start by editing the file /Applications/Firefox.app/Contents/MacOS/greprefs/all.js.

Add the following to the end of this file:

 // MyOrganization additions
pref("general.config.obscure_value", 0);
pref("general.config.filename", "firefox_AA.cfg");

Feel free to change "MyOrganization" to the actual name of your organization. What we're doing here is telling Firefox to read the file named here for additional configuration info. The "general.config.obscure.value" tells Firefox the file will be in plain text; by default it expects the file to be obscured with ROT13 encoding, where 13 is added to the ASCII value of every character. The reasons for this are lost in the mists of antiquity.

Save the /Applications/Firefox.app/Contents/MacOS/greprefs/all.js file. Now create a new file at /Applications/Firefox.app/Contents/MacOS/firefox_AA.cfg with the following contents:

// This file sets some prefs for use at MyOrganization
// and locks down some other prefs.
// set proxy config
pref("network.proxy.autoconfig_url", "http://www.myorg.org/auto.proxy");
pref("network.proxy.type", 2);
// disable application updates
lockPref("app.update.enabled", false);
lockPref("app.update.autoUpdateEnabled", false);
lockPref("extensions.update.enabled", false);
lockPref("extensions.update.autoUpdate", false);
lockPref("browser.search.update", false);
// disable default browser check
pref("browser.shell.checkDefaultBrowser", false);

Again, make sure you save it as a plain text file with the name "firefox_AA.cfg" in the directory "/Applications/Firefox.app/Contents/MacOS/". Double-check your work via the command line:

> cd /Applications/Firefox.app/Contents/MacOS/
> ls -al firefox_AA.cfg 
-rw-rw-r—  1 admin  admin  636 Jul 23 13:22 firefox_AA.cfg
> cat firefox_AA.cfg

That last command (cat firefox_AA.cfg) should return the exact contents you entered when you created the file.

In this example, we used two different commands: pref(), and lockPref(). For the proxy, I wanted the user to be able to modify the proxy if needed, but have it return to our recommended settings on the next launch. For the application updates, I wanted to prevent the user from turning these back on. Your requirements may differ.

With everything saved and double-checked, try launching Firefox. You should find these settings exactly as you specified, and in the case of the update prefs, locked:


Note how the corresponding controls are grayed-out and unavailable.

Default Home Page

One important preference is a little harder to manage: the default home page. You might get a clue of why this is so by looking at the preferences in about:config:


You'll see that the browser.startup.homepage points to another file, instead of just being a normal URL. You can set it to a normal URL, and it usually works, but I've found it unreliable. So instead of setting a preference, we'll edit the contents of browserconfig.properties:

Open /Applications/Firefox.app/Contents/MacOS/browserconfig.properties, delete its entire contents, and replace them with:

browser.startup.homepage=http://homepage.myorg.org
browser.startup.homepage_reset=http://homepage.myorg.org

Of course you want to substitute your own URL for the home page.

Now quit and relaunch Firefox. Unless you've set a custom home page, you'll be taken to the home page you defined. Users have the ability to override this if they want. If you truly wanted to enforce a home page, adding

pref("browser.startup.homepage", "http://homepage.myorg.org");
pref("browser.startup.homepage_reset", "http://homepage.myorg.org");

to /Applications/Firefox.app/Contents/MacOS/firefox_AA.cfg should get the behavior you want, but your users may dislike you.

Now that you've modified the Firefox.app bundle, you'll need to push out these changes to all your machines. I hope you have a software distribution mechanism in your organization!

More Info

Congratulations! You've added a few new tricks to your toolbox. For more information on Mozilla/Firefox preferences and configuration, check out these URLs:

http://kb.mozillazine.org/Firefox_:_FAQs_:_About:config_Entries

http://preferential.mozdev.org/preferences.html

http://developer.mozilla.org/en/Automatic_Mozilla_Configurator/Locked_config_settings


Greg Neagle is a member of the steering committee of the Mac OS X Enterprise Project (macenterprise.org) and is a senior systems engineer at a large animation studio. Greg has been working with the Mac since 1984, and with OS X since its release. He can be reached at gregneagle@mac.com.

 
AAPL
$101.58
Apple Inc.
+0.72
MSFT
$46.52
Microsoft Corpora
-0.24
GOOG
$584.77
Google Inc.
+4.82

MacTech Search:
Community Search:

Software Updates via MacUpdate

iExplorer 3.5.0.0 - View and transfer al...
iExplorer is an iPhone browser for Mac lets you view the files on your iOS device. By using a drag and drop interface, you can quickly copy files and folders between your Mac and your iPhone or... Read more
BusyCal 2.6 - Powerful calendar app with...
BusyCal is an award-winning desktop calendar that combines personal productivity features for individuals with powerful calendar sharing capabilities for families and workgroups. BusyCal's unique... Read more
Apple iOS 8.0 - The latest version of Ap...
The latest version of iOS can be downloaded through iTunes. Apple iOS 8 comes with big updates to apps you use every day, like Messages and Photos. A whole new way to share content with your family.... Read more
Apple Digital Camera RAW Compatibility 5...
Apple Digital Camera RAW Compatibility update adds RAW image compatibility to Aperture 3 and iPhoto '11. For more information on supported RAW formats, see here.Version 5.07: Adds RAW camera... Read more
Transmit 4.4.7 - Excellent FTP/SFTP clie...
Transmit is an excellent FTP (file transfer protocol), SFTP, S3 (Amazon.com file hosting) and iDisk/WebDAV client that allows you to upload, download, and delete files over the internet. With the... Read more
Macgo Blu-ray Player 2.10.8.1715 - Blu-r...
Macgo Mac Blu-ray Player can bring you the most unforgettable Blu-ray experience on your Mac. Overview Macgo Mac Blu-ray Player can satisfy just about every need you could possibly have in a Blu-ray... Read more
Capture One Pro 8.0.0.433 - RAW workflow...
Capture One Pro 8 is a professional RAW converter offering you ultimate image quality with accurate colors and incredible detail from more than 300 high-end cameras -- straight out of the box. It... Read more
Adobe Acrobat Pro 11.0.09 - Powerful PDF...
Adobe Acrobat allows users to communicate and collaborate more effectively and securely. Unify a wide range of content in a single organized PDF Portfolio. Collaborate through electronic document... Read more
Adobe Reader 11.0.09 - View PDF document...
Adobe Reader allows users to view PDF documents. You may not know what a PDF file is, but you've probably come across one at some point. PDF files are used by companies and even the IRS to... Read more
iFFmpeg 4.6.1 - Convert multimedia files...
iFFmpeg is a graphical front-end for FFmpeg, a command-line tool used to convert multimedia files between formats. The command line instructions can be very hard to master/understand, so iFFmpeg does... Read more

Latest Forum Discussions

See All

Leg·end·ar·y (Games)
Leg·end·ar·y 1.0 Device: iOS Universal Category: Games Price: $1.99, Version: 1.0 (iTunes) Description: Simple and yet complex. Leg•end•dar•y is a grid-based puzzle game based on numbers. Discover the adventure of Leg•end•dar•y and... | Read more »
KuaiBoard (formerly QuickBoard) (Utilit...
KuaiBoard (formerly QuickBoard) 1.0 Device: iOS Universal Category: Utilities Price: $1.99, Version: 1.0 (iTunes) Description: KuaiBoard is currently 50% off for launch! Billing info. Signatures. Locations. KuaiBoard allows you to... | Read more »
Treasure Fetch - Adventure Time (Games)
Treasure Fetch - Adventure Time 1.0.1 Device: iOS Universal Category: Games Price: $2.99, Version: 1.0.1 (iTunes) Description: Adventure Time Treasure Fetch is a fresh take on the classic Snake game! STRETCHY JAKE Snake your way... | Read more »
Light in the Dark (Games)
Light in the Dark 1.1.0 Device: iOS Universal Category: Games Price: $1.99, Version: 1.1.0 (iTunes) Description: Be enlightened by this delightful puzzle game that has never before seen the light of day! "A physics and color-blending... | Read more »
Transmit iOS (Utilities)
Transmit iOS 1.0 Device: iOS Universal Category: Utilities Price: $9.99, Version: 1.0 (iTunes) Description: >> LAUNCH SPECIAL: Transmit iOS is ONLY $10 for a LIMITED TIME. << THE #1 FILE TRANSFER CLIENT FOR THE MAC NOW... | Read more »
Minuum - The Little Keyboard for Big Fin...
Minuum - The Little Keyboard for Big Fingers 1.0 Device: iOS iPhone Category: Utilities Price: $1.99, Version: 1.0 (iTunes) Description: Type faster, see more of your screen, and take control of autocorrect with Minuum: the little... | Read more »
TextExpander 3 + custom keyboard (Utili...
TextExpander 3 + custom keyboard 3.0 Device: iOS Universal Category: Utilities Price: $4.99, Version: 3.0 (iTunes) Description: | Read more »
Swype - Keyboard (Utilities)
Swype - Keyboard 1.0.1411 Device: iOS Universal Category: Utilities Price: $.99, Version: 1.0.1411 (iTunes) Description: Why type when you can Swype? One of the most requested apps for iPhone is finally here. "If Swype itself ever... | Read more »
Joinz (Games)
Joinz 1.0 Device: iOS Universal Category: Games Price: $1.99, Version: 1.0 (iTunes) Description: Joinz is a clever block sliding puzzle game that is easy to play, nice to look at but tricky to master. You will be coming back again... | Read more »
Little World Escape Review
Little World Escape Review By Jordan Minor on September 17th, 2014 Our Rating: :: EARTHBOUNDUniversal App - Designed for iPhone and iPad Little World Escape draws players in with captivating concepts before pushing them away with... | Read more »

Price Scanner via MacPrices.net

Toshiba Introduces TransMemory ID High-Speed...
Toshiba’s Digital Products Division (DPD), a division of Toshiba America Information Systems, Inc., today introduced the TransMemory ID USB 3.0 Flash Drive, a simpler storage solution for people who... Read more
New iPads and OS X Yosemite Release Coming Oc...
The DailyDot’s Micah Singleton reports that Apple is planning to hold its next product announcement event on Oct. 21, at which it will unveil the iPad Air 2 and iPad mini 3 and release a final build... Read more
Logitech Bluetooth Multi-Device Cross-Platfor...
Logitech has an enviable track record of making some of the best computer keyboards and mice. At least in my estimation, the best freestanding keyboards I’ve ever used have been Logitech units,... Read more
Roundup of Apple refurbished iPad Airs and iP...
Apple is offering Certified Refurbished iPad Airs for up to $140 off MSRP. Apple’s one-year warranty is included with each model, and shipping is free. Stock tends to come and go with some of these... Read more
Sprint offers 16GB iPad mini for $199.99 with...
Sprint is offering 1st generation 16GB iPad minis for $199.99 with a 2-year service agreement. Standard MSRP for this iPad is $429. Their price is the lowest available for this model. Read more
2.5GHz Mac mini remains on sale for $549, sav...
B&H Photo has the 2.5GHz Mac mini on sale for $549.99 including free shipping. That’s $50 off MSRP, and B&H will also include a free copy of Parallels Desktop software. NY sales tax only. Read more
Apple refurbished iMacs available for up to $...
The Apple Store has Apple Certified Refurbished iMacs available for up to $300 off the cost of new models. Apple’s one-year warranty is standard, and shipping is free. These are the best prices on... Read more
13″ 2.5GHz MacBook Pro offered for $100 off M...
B&H Photo has the 13″ 2.5GHz MacBook Pro on sale for $999.99 including free shipping plus NY sales tax only. Their price is $100 off MSRP. Read more
Free GIMP Professional Grade Graphics App Ver...
The latest 2.8.14 version of the oddly-named GIMP (acronym for: GNU Image Manipulation Program) open source, high-end image editing and creation alternative to Adobe’s Photoshop and refuge from... Read more
Apple Announces Record Pre-orders for iPhone...
Apple has released metrics showing a record number of first day pre-orders of iPhone 6 and iPhone 6 Plus, with over four million sold in the first 24 hours. Demand for the new iPhones exceeds the... Read more

Jobs Board

*Apple* Retail - Multiple Positions (US) - A...
Sales Specialist - Retail Customer Service and Sales Transform Apple Store visitors into loyal Apple customers. When customers enter the store, you're also the Read more
*Apple* Retail - Multiple Positions (US) - A...
Sales Specialist - Retail Customer Service and Sales Transform Apple Store visitors into loyal Apple customers. When customers enter the store, you're also the Read more
*Apple* Retail - Multiple Positions (US) - A...
Sales Specialist - Retail Customer Service and Sales Transform Apple Store visitors into loyal Apple customers. When customers enter the store, you're also the Read more
*Apple* Retail - Multiple Positions (US) - A...
Sales Specialist - Retail Customer Service and Sales Transform Apple Store visitors into loyal Apple customers. When customers enter the store, you're also the Read more
*Apple* Retail - Multiple Positions (US) - A...
Sales Specialist - Retail Customer Service and Sales Transform Apple Store visitors into loyal Apple customers. When customers enter the store, you're also the Read more
All contents are Copyright 1984-2011 by Xplain Corporation. All rights reserved. Theme designed by Icreon.