Trying to use Lotus Domino Web Access with Mozilla Firefox Version 2.0.0.10 or higher? Then you have probably seen the following error message:

Domino Web Access Warning. Sorry, we were unable to process your request at this time. If you are unable to continue working in your mail file, please dismiss this warning and then select View, Refresh from your browser’s menu.

This is due to a change, documented in the Mozilla Foundation Security Advisory 2007-37 – jar: URI scheme XSS hazard, and referenced in the Release Notes for Firefox 2.0.0.10 (Chapter „Security Issues”):

Support for the jar: URI scheme has been restricted to files served with a Content-Type header of application/java-archive or application/x-jar. Web applications that require signed pages must make sure their .jar archives are served with this Content-Type.

What that basically means is, that Firefox will no longer load .jar files, if they are not sent by the web-server with the appropriate mime-type. As IBM/Lotus has somewhat of a long legacy of not sending/setting the correct mime-type for files, this broke DWA.

Werner worked on this issue in the German atnotes.de forum since December 2007 and found the following workaround:

Add the following line to the file httpd.cnf
 
AddType .jar application/java-archive # Java Archive
 
and restart the http task.

According to Werner, IBM will issue a Hotfix/Fixpack for that.

Since Monday, there is also a Technote on this issue:
Technote 1289700: „Several Domino Web Access features do not work with Firefox 2.0.0.10”

This issue is currently under investigation (SPR# KMOA79C8WX). Please call IBM support to obtain a fix for this issue.

Yeah, right.

Tagged as: Domino, DWA, Lotus, Notes, Show-n-tell thursday, SnTT | Author: Martin Leyrer
[Donnerstag, 20080207, 01:02 | permanent link | 0 Kommentar(e)