How to configure Firefox to use cert from smart card reader on Sun Ray 3 Plus

I have a Sun Ray 3 Plus configured so the user needs a smart card to login (CAC card) and bring up a Java Desktop on the Sun Ray Server (Solaris 10 SPARC).
Now I am trying to get Firefox to read the certificate from the smart card reader but not sure how to go about doing that.
From searching online, it seems like I have to load a module in Firefox:
Edit -> Preferences -> Certificates -> Security Devices
But what file do I load? I'm assuming it is a file that's part of the SUNWut package?

I try to test bumblebee with:
optirun glxgears
but I get this error:
Xlib: extension "GLX" missing on display ":8".
Error: couldn't get an RGB, Double-buffered visual

Similar Messages

How to configure Firefox to use OpenVPN?

summary: I'm running OpenVPN from a Debian client through a Debian jumpbox/server. After I [start the server, start the client] most IP-based applications (DNS, ping, ssh) seem to work from the client, but client's Firefox cannot connect to http://www.whatismyip.com/ (or any other URI). How to configure Firefox to use the VPN? or otherwise fix the problem? or further debug it?
details:
I have a laptop running debian_version==jessie/sid with Firefox version=33.0 which needs to access a compute cluster. The cluster formerly required only an SSL VPN (enabled by a Firefox plugin) to access, but now has several additional requirements, which I seek to satisfy by running the SSL VPN through a jumpbox running an OpenVPN server. The jumpbox is running a "vanilla" Debian 7.7.
I have been using the laptop successfully for a few years without network problems. Currently I have the laptop connected by wire directly to an ISP-supplied modem/router. With `openvpn` NOT running on the laptop, I see:
* `ifconfig` shows no entry='tun0' (just "the usual" entries for 'eth0', 'lo', 'wlan0'), and shows the expected client IP# bound to 'eth0'.
* I can `ping` my jumpbox/server using its real IP#, but cannot `ping 10.8.0.1`
* I can `ssh` to my jumpbox/server using its real IP#, but cannot `ssh 10.8.0.1`
* `nslookup www.whatismyip.com` gives correct results
* browsing to http://www.whatismyip.com/ shows my client's IP# (as also shown in `ifconfig`)
Both my client/laptop and server/jumpbox setups are quite generic OpenVPN-wise, and are almost exactly as described on the Debian wiki
https://wiki.debian.org/openvpn%20for%20server%20and%20client
me@jumpbox:~$ date ; cat /etc/openvpn/server.conf
Sat Nov 8 16:49:00 EST 2014
port 1194
proto udp
dev tun
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
key /etc/openvpn/server.key
dh /etc/openvpn/dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8" # google public DNS
keepalive 10 120
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 3
me@laptop:~$ date ; cat /etc/openvpn/client1.conf
Sat Nov 8 16:51:31 EST 2014
client
dev tun
proto udp
remote ser.ver.IP.num 1194
resolv-retry infinite
nobind
user nobody
group nogroup
persist-key
persist-tun
mute-replay-warnings
ca /etc/openvpn/ca.crt
cert /etc/openvpn/client1.crt
key /etc/openvpn/client1.key
ns-cert-type server
comp-lzo
verb 3
up /etc/openvpn/update-resolv-conf
down /etc/openvpn/update-resolv-conf
My jumpbox/server firewall is currently set to forward everything, using `iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE`:
me@jumpbox:~$ date ; sudo iptables -L
Sat Nov 8 16:42:06 EST 2014
Chain INPUT (policy ACCEPT)
target prot opt source destination
fail2ban-ssh tcp -- anywhere anywhere multiport dports ssh
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain fail2ban-ssh (1 references)
target prot opt source destination
RETURN all -- anywhere anywhere
After I start `openvpn` on first the server and then the client, I see no OpenVPN errors on either the server or the client:
me@jumpbox:~$ sudo openvpn --script-security 2 --config /etc/openvpn/server.conf &
Sat Nov 8 17:48:25 2014 OpenVPN 2.2.1 x86_64-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Jun 18 2013
Sat Nov 8 17:48:25 2014 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Sat Nov 8 17:48:25 2014 Diffie-Hellman initialized with 1024 bit key
Sat Nov 8 17:48:25 2014 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Sat Nov 8 17:48:25 2014 Socket Buffers: R=[212992->131072] S=[212992->131072]
Sat Nov 8 17:48:25 2014 ROUTE default_gateway=ser.ver.gate.way
Sat Nov 8 17:48:25 2014 TUN/TAP device tun0 opened
Sat Nov 8 17:48:25 2014 TUN/TAP TX queue length set to 100
Sat Nov 8 17:48:25 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sat Nov 8 17:48:25 2014 /sbin/ifconfig tun0 10.8.0.1 pointopoint 10.8.0.2 mtu 1500
Sat Nov 8 17:48:25 2014 /sbin/route add -net 10.8.0.0 netmask 255.255.255.0 gw 10.8.0.2
Sat Nov 8 17:48:25 2014 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Sat Nov 8 17:48:25 2014 GID set to nogroup
Sat Nov 8 17:48:25 2014 UID set to nobody
Sat Nov 8 17:48:25 2014 UDPv4 link local (bound): [undef]
Sat Nov 8 17:48:25 2014 UDPv4 link remote: [undef]
Sat Nov 8 17:48:25 2014 MULTI: multi_init called, r=256 v=256
Sat Nov 8 17:48:25 2014 IFCONFIG POOL: base=10.8.0.4 size=62, ipv6=0
Sat Nov 8 17:48:25 2014 ifconfig_pool_read(), in='TomRoche,10.8.0.4', TODO: IPv6
Sat Nov 8 17:48:25 2014 succeeded -> ifconfig_pool_set()
Sat Nov 8 17:48:25 2014 IFCONFIG POOL LIST
Sat Nov 8 17:48:25 2014 TomRoche,10.8.0.4
Sat Nov 8 17:48:25 2014 Initialization Sequence Completed
me@laptop:~$ sudo openvpn --script-security 2 --config /etc/openvpn/client1.conf &
Sat Nov 8 17:49:12 2014 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Sat Nov 8 17:49:12 2014 Socket Buffers: R=[212992->131072] S=[212992->131072]
Sat Nov 8 17:49:12 2014 NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
Sat Nov 8 17:49:12 2014 UDPv4 link local: [undef]
Sat Nov 8 17:49:12 2014 UDPv4 link remote: [AF_INET]jump.box.IP.num:1194
Sat Nov 8 17:49:12 2014 TLS: Initial packet from [AF_INET]jump.box.IP.num:1194, sid=25df7af6 0ece4089
Sat Nov 8 17:49:13 2014 VERIFY OK: depth=1, <my config data/>
Sat Nov 8 17:49:13 2014 VERIFY OK: nsCertType=SERVER
Sat Nov 8 17:49:13 2014 VERIFY OK: depth=0, <my config data/>
Sat Nov 8 17:49:14 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Nov 8 17:49:14 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Nov 8 17:49:14 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Sat Nov 8 17:49:14 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Nov 8 17:49:14 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sat Nov 8 17:49:14 2014 [TomRoche] Peer Connection Initiated with [AF_INET]jump.box.IP.num:1194
Sat Nov 8 17:49:16 2014 SENT CONTROL [TomRoche]: 'PUSH_REQUEST' (status=1)
Sat Nov 8 17:49:16 2014 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Sat Nov 8 17:49:16 2014 OPTIONS IMPORT: timers and/or timeouts modified
Sat Nov 8 17:49:16 2014 OPTIONS IMPORT: --ifconfig/up options modified
Sat Nov 8 17:49:16 2014 OPTIONS IMPORT: route options modified
Sat Nov 8 17:49:16 2014 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sat Nov 8 17:49:16 2014 ROUTE_GATEWAY lap.top.gate.way/255.255.255.0 IFACE=eth0 HWADDR=la:pt:op:MAC:ad:dr
Sat Nov 8 17:49:16 2014 TUN/TAP device tun0 opened
Sat Nov 8 17:49:16 2014 TUN/TAP TX queue length set to 100
Sat Nov 8 17:49:16 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sat Nov 8 17:49:16 2014 /sbin/ip link set dev tun0 up mtu 1500
Sat Nov 8 17:49:16 2014 /sbin/ip addr add dev tun0 local 10.8.0.6 peer 10.8.0.5
Sat Nov 8 17:49:16 2014 /etc/openvpn/update-resolv-conf tun0 1500 1542 10.8.0.6 10.8.0.5 init
dhcp-option DNS 8.8.8.8
Sat Nov 8 17:49:16 2014 /sbin/ip route add lap.top.IP.num/32 via lap.top.gate.way
Sat Nov 8 17:49:16 2014 /sbin/ip route add 0.0.0.0/1 via 10.8.0.5
Sat Nov 8 17:49:16 2014 /sbin/ip route add 128.0.0.0/1 via 10.8.0.5
Sat Nov 8 17:49:16 2014 /sbin/ip route add 10.8.0.1/32 via 10.8.0.5
Sat Nov 8 17:49:16 2014 GID set to nogroup
Sat Nov 8 17:49:16 2014 UID set to nobody
Sat Nov 8 17:49:16 2014 Initialization Sequence Completed
I then see the following on my client:
* `ifconfig` shows a new entry=`tun0`, which looks correct
* I can `ping` the server using either its real IP# or `10.8.0.1`
* I can `ssh` to the server using either its real IP# or `10.8.0.1`
* `nslookup www.whatismyip.com` gives correct results
... but I get no connection if I open a new instance of Firefox and browse to http://www.whatismyip.com/ :-( "Looking up www.whatismyip.com..." succeeds quickly but the status line continues to display "Connecting to www.whatismyip.com..." until the attempt times out. I also get the same behavior (connection timeout) if I open a new instance of Chrome, or if I browse to http://www.whatismyip.com/ with a Firefox opened prior to starting OpenVPN. FWIW I get the same behavior browsing to any URI, including (e.g.) Google.
This is a major problem for me! For the SSL VPN to work, I need to start a Firefox and run it (since the SSL VPN's vendor only supports it on Linux via a Firefox plugin) to access a particular remote-access website. Furthermore I need the SSL VPN to run through the jumpbox/OpenVPN. (Don't ask, it's a long, sad story ...)
Is there something I must do to configure Firefox to use the VPN? Or is there some other way to fix this?
Alternatively, what should I do to further debug the problem? It just seems odd to me that the other services work (e.g., `nslookup`, `ssh`) but Firefox does not. That being said, both Firefox and Chrome fail in this usecase, so the problem might be generic to web browsers.
your assistance is appreciated, Tom Roche <[email protected]>

You're kidding. You have to go through that rigamarole just to put your bookmarks on your own server? Where's the simple FTP option?
Also, the above-linked article has a broken link. The link to the weaveserver (which is what you have to set up on your own server) is no good, and there is no obvious replacement. There are plenty of Weave-related repositories here:
http://hg.mozilla.org/labs
but it's not clear what you need.

Safari can use my CAC (Smart) Card to login to government websites but Firefox cannot.

Safari and even Google Crome can access my CAC Card and login to government websites, however Firefox just doesn't seem to even try. OSX Lion, Apple Macbook Pro, Firefox 5.0.1.

Try:
* [/questions/808161] Trying to use a CAC smart card reader with Mac version of Firefox
* https://militarycac.com/firefox.htm

How to publish MVC project using WebDeploy from TFS Build

Please help me on how to publish MVC project using WebDeploy from TFS Build

Hi Jeevan,
You might want to setup an TFS build server for web deployment. Please refer to the link for the details:
http://www.asp.net/web-forms/overview/deployment/configuring-team-foundation-server-for-web-deployment/configuring-a-tfs-build-server-for-web-deployment
Best regards,
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

How to configure sap to use gmail as smtp server?

Hi experts,
I need to know how to configure gmail as my smtp server. In the scot transaction I don't see anywhere where to specify whether it is a ssh connection, ports for secure smtp, username, password.
Does anyone know how to configure sap to use gmail as the smtp server?
I've seen some similar threads about this, but they are of no help. Although they are classified as answered, in most cases the reason they are answered is because the person who made the query dropped the cause trying to make it work. I'd like to know for sure is this is possible or not.

Hi Camilo,
You can't set up gmail as your smtp server to handle this. gmail is an email server which generally are based on POP protocol. now for SAP to send mail to gmail, you would need one SMTP capable server which can relay those message received from SAP to configured email address.
As of WAS 6.10 SAP kernel supports SMTP without more components. i.e e-mails can be sent (or received) from the SAP system to each SMTP-compatible mail server. see SAP note 455140 for more details.
Hope this clarifies your doubt.
http://en.wikipedia.org/wiki/SMTP_server
Regards,
Debasis.

How to configure sendmail to use multiple LDAP servers ?

Hi everybody!
I have a sendmail running on Solaris 10 and a LDAP server(192.168.1.9) also running Solaris 10 OS. I have configured the sendmail the following way:
bash-3.00# ldapclient list
NS_LDAP_FILE_VERSION= 2.0
NS_LDAP_BINDDN= cn=proxyagent,ou=profile,dc=email,dc=reso,dc=ru
NS_LDAP_BINDPASSWD= {NS1}*********************
NS_LDAP_SERVERS= 192.168.1.9
NS_LDAP_SEARCH_BASEDN= dc=email,dc=domain,dc=ru
NS_LDAP_AUTH= simple
NS_LDAP_SEARCH_REF= FALSE
NS_LDAP_SEARCH_SCOPE= sub
NS_LDAP_SEARCH_TIME= 30
NS_LDAP_CACHETTL= 43200
NS_LDAP_PROFILE= default
NS_LDAP_CREDENTIAL_LEVEL= proxy
NS_LDAP_BIND_TIME= 10
I also have another LDAP server (IP 192.168.1.10). It is configured as a replicant of the 192.168.1.9 LDAP server.
The question is how can i configure sendmail to use both LDAP servers ?
The man pages explain how to configure ldapclient to use ONE server and what if want to use two or more? All the settings and the profiles the same.
Thanks in advance =))

Hi!
To add LDAP servers to the Solaris ldapclient, you might use the ldapclient command:
ldapclient manual -v -a defaultServerList="servera.yourdomain.com serverb.yourdomain.com"
But this is only failover, AFAIK the Solaris ldapclient does not perform loadbalancing by itself.
But I am not sure about your sendmail programm. Normally, sendmail has its own configuration
and can be configured to use LDAP e.g. for aliases etc.
Regards!
Rainer

How to configure router to use ip pool on the aaa server for vpn clients

how to configure router to use ip pool on the aaa server for vpn clients . i want to use vpn clients to connect to the router. authenticate using the aaa server username databse and also use the ip pool cretaed on the aaa server. i am not able to find the command on the router pointing to use the pool created on the aaa server. can u some one help me with this command.
sebastan

Hello Sebastan,
what do you use as AAA server (e.g. ACS with TACACS+ or RADIUS) ?
Regards,
GNT

How to remove SD Card from the Card Reader slot - Satellite A100?

Hi,
Is there anyone to help me? I inserted a 64 MB SD card in the card reader slot of my Toshiba A100 model. It's the first time i have inserted the card. The card is inside the slot. I can not take it out! I don't have any idea how to remove the card from the card reader slot. I can see the contents of my SD card, can open the files too. But how to remove it out from the slot. Please help me giving your idea to remove the card out from the slot.
Arjun

Hi
In my knowledge the SD card slot doesnt has a any additional helps like the PCMCIA slot to remove the card.
You have to remove it simply. Try to grab the card and move it out. You can try to use the pair of tweezers. Maybe it helps

How do I access and use my iTunes gift card balance

How do I access and use my iTunes gift card balance

You redeem your gift card to your iTunes account.
Then you make iTunes purchases and the amount is deducted from your account.
See this -> iTunes 11 for Mac: Redeem an iTunes allowance, gift certificate, or Gift Card

How to transfer contacts and message history from samsung note 3 to iphone 6 plus

Can anyone please help: how to transfer contacts and message history from samsung note 3 to iphone 6 plus?

You can visit : Move content from your Android phone to iPhone
From this Apple Support website, you can get information about how to transfer contacts, music, photos, videos, documents, and more from your Android phone to iPhone. But for text messages, you may need other tool.

Smart Card Reader - How to turn off logon screen from reboot or wake up

I just set up the bluetooth reader on my laptop and now when my laptop wakes up or on reboot the BB smart card reader is there to logon. I rarely use my smart card reader on my laptop, i use it primarily on my phone. I don't want to unistall it but I dont need to see that screen. Any one know how to shut it off?

Most likely after installing it changed the PC log on type to the reader.
In control panel (assuming you have a windows product) you can change how a user logs on.
Click here to Backup the data on your BlackBerry Device! It's important, and FREE!
Click "Accept as Solution" if your problem is solved. To give thanks, click thumbs up
Click to search the Knowledge Base at BTSC and click to Read The Fabulous Manuals
BESAdmin's, please make a signature with your BES environment info.
SIM Free BlackBerry Unlocking FAQ
Follow me on Twitter @knottyrope
Want to thank me? Buy my KnottyRope App here
BES 12 and BES 5.0.4 with Exchange 2010 and SQL 2012 Hyper V

Been trying to use an external memory card reader with my macbook air- connecting via usb port, air does not recognize device nor the microSD card from my gopro - help

Been trying to use an external memory card reader with my macbook air… connecting via usb port, air does not recognize device nor the microSD card from my gopro … help

Some external ones do not work with the Mac's although most do. There are some driver compadibility issues with Mavericks, so I would wait for an update.

HT4623 can you download pictures from a card reader to iPhone?

Can you download pictures from a card reader to the iPhone?

AverySwan wrote:
Can you download pictures from a card reader to the iPhone?
That would depend upon the card reader, who makes it, and what their suppointing software does. I happen to have an older ZoomIT SD card reader with a 30 pin dock connector. The hardware maker provides an app for iOS that allows me to use the adapter with my iPhone 4 and I can open pictures from the SD card and view them. I believe it even allows me to save teh image to my cameral roll if I want. Since it does have the 30 pin dock connector, I need to use the Apple adapter to plug it into the Lightning port on my iPhone 5, but is still works just fine there too.
I also have the Apple Camera Connection Kit (30 pin version) but it is much more restrictive. It only works with the iPad, and it only copies certain files form teh SD card to the iPad. (The files must be in the "/DCIM" folder on the SD card, the file name must be in the older DOS 8.3 file name format, and I believe it only woirks with JPG, and MOV files. As you can see, the Apple device is built to let me view pictures from my point-n-shoot cmera on the iPad screen, whereas the ZoomIT allows copying of content to/from the SD card and an iPhone/iPad/iPod Touch.
Now for the bad news, I don' tthink the ZoomIT reader is made any longer, and when you can find them, the sellers are usually charging close to $125 for them.

What kind of driver do I need to use for HP Elitebook 8440p RICOH Smart Card Reader?

I'm using Arch linux x86_64 and need to install Smart Card Reader, but I can't find any drivers for it.
Best regards,
Taavi

What operating system is it? Are you sure you put the card in the correct way? [not trying to be mean here]

Use of CAC enabled sites (Smart Card Reader)

Would anyone happen to know if the PlayBook would support the use of the BlackBerry Smart Card Reader 2?
I would love to be able to access my DoD sites that require my CAC login using the BlackBerry Sled and my PlayBook. Thank you for any assistance in this matter.
BB-Soldier

Ditto!!!
I have a SCR331 and I am not able to get 10.5 to recognize my CAC card.
I do believe Leopard is recognizing and using the SCR331 but the problem
lies in the CAC Card Driver. Here are the details :
Hardware : SCR331 USB with firmware 5.22
CAC Card : Oberthur ID One v5.2
System log when CAC card is inserted into 10.5:
Nov 9 06:16:09 angel com.apple.SecurityServer[20]: src/CCIDDriver/common/CCID.c (793): Protocol type of card (T=1) not supported by this driver for this type of reader (TPDU)
Nov 9 06:16:09 angel com.apple.SecurityServer[20]: src/CCIDDriver/common/CCID.c (795): An APDU-level reader should be used
Nov 9 06:16:09 angel com.apple.SecurityServer[20]: src/CCIDDriver/common/CCID.c (793): Protocol type of card (T=1) not supported by this driver for this type of reader (TPDU)
Nov 9 06:16:09 angel com.apple.SecurityServer[20]: src/CCIDDriver/common/CCID.c (795): An APDU-level reader should be used
Nov 9 06:16:10 angel com.apple.SecurityServer[20]: src/CCIDDriver/common/CCID.c (793): Protocol type of card (T=1) not supported by this driver for this type of reader (TPDU)
Nov 9 06:16:10 angel com.apple.SecurityServer[20]: src/CCIDDriver/common/CCID.c (795): An APDU-level reader should be used
Nov 9 06:16:10 angel com.apple.SecurityServer[20]: src/CCIDDriver/common/CCID.c (793): Protocol type of card (T=1) not supported by this driver for this type of reader (TPDU)
Nov 9 06:16:10 angel com.apple.SecurityServer[20]: src/CCIDDriver/common/CCID.c (795): An APDU-level reader should be used
Nov 9 06:21:26 angel com.apple.SecurityServer[20]: src/CCIDDriver/common/ifdhandler.c (554): GCCmdCardStatus failed
Nov 9 06:21:26 angel com.apple.SecurityServer[20]: src/CCIDDriver/USB/MacOSX/usbserial_mosx.c (974): ERR: Couldn't close device (e00002c0)
I hope Apple developers manage to fix this in put it in 10.5.1.
Thanks,
Mike Bender
Orlando, FL

How to configure Firefox to use cert from smart card reader on Sun Ray 3 Plus

Similar Messages

Maybe you are looking for