Page 1 of 1
[SOLVED] Codebase warning foreign domain
Posted: 19 Feb 2021, 11:50
by GeroK
Hello,
how can we get rid of this warnings?
See attachment.
Tried deployment.security.whitelist but this wasn't a good plan because of all other domains
not on whitelist are then direct blocked. Yeah, i know....whitelist....
Best regards!
Gero
Re: Codebase warning foreign domain
Posted: 19 Feb 2021, 11:51
by Stephan Classen
You can safe the decision by selecting the checkbox on the very bottom of the dialog.
Re: Codebase warning foreign domain
Posted: 19 Feb 2021, 11:59
by GeroK
Hi Stephan,
unfortunately not.
This option is not working in our environment.
I think the problem is our provisioned XenApp farm.
So i need a global option to disable this or set a global execption.
But i can't find how to do this...
Gero
Re: Codebase warning foreign domain
Posted: 19 Feb 2021, 13:20
by Stephan Classen
In the deployment.properties (per user or system wide) you can add the following line:
deployment.security.level=ALLOW_UNSIGNED
This will disable a series of security checks including the one causing the warning you see
Re: [SOLVED] Codebase warning foreign domain
Posted: 19 Feb 2021, 14:55
by GeroK
Hmmm....
"Disable a series of security checks" sounds to heavy for me.
I dont't want to lower the overall security level of OWS...
Disable this only for specific applets or websites is not possible?
Maybe on the roadmap for future releases?
Greetings!
Gero
Re: [SOLVED] Codebase warning foreign domain
Posted: 20 Feb 2021, 06:30
by Janak Mulani
Re: [SOLVED] Codebase warning foreign domain
Posted: 22 Feb 2021, 11:50
by GeroK
Edit 22.02.2021
Unfortunately it does not work with responsefile.jar
If i put "deployment.manifest.attributes.check= PERMISSIONS,CODEBASE,TRUSTED,ENTRYPOINT" direct into deployment.properties it works.
But if i put this into the response.varfile the line is missing in the new generatet deployment.propertys user file.
Every other thingl linke proxy etc. are in the new deployment.properties... :/
@Janak Can you give me a hint why?
Gero
----------------------------------
Hi Janak,
thank you!
Problem solved.
But i had to disable ALAC to get rid of this warning.
PERMISSIONS, CODEBASE, TRUSTED, and ENTRYPOINT checks are still activated.
Greetings,
Gero
Re: [SOLVED] Codebase warning foreign domain
Posted: 22 Feb 2021, 15:20
by Stephan Classen
Yes this is currently missing.
We will add this property with the next release of OWS
Re: [SOLVED] Codebase warning foreign domain
Posted: 22 Feb 2021, 16:03
by GeroK
OK. Thank you for information