Test command of the AAA for EAP - TLS authentication for wireless users

Similar Questions

• ISE 1.4 using EAP - TLS can´t identify user in an ad group

  Hello

  I have a client who wishes to use the EAP - TLS on his Wifi authentication and he wants users in a separate AD Group for the SSID to cooperate.

  I found the solution of operation or with PEAP with EAP - TLS authentication, it does that without the policy of 'ad group.

  Any idea on what I can do to get it to work?

  George

  I found the problem, I had to adapt the 'certificate of authentication Profile' for the AD client

  What made your dot1x in your PC configuration? How the ISE journal watch, when it works?

• [Cisco ACS 5.2] EAP - TLS authentication failure

  What we are e

  Hello

  I set up a WiFi connection on Windows XP and Windows 7 with EAP - TLS (using Cisco WLC 7.0.235.3 and Cisco ACS 5.2.0.26.10). It is configured with the authentication of the computer and computer certificates are automatically registered for Microsoft PKI.

  It works well!

  Now, I configured Windows 8 with the same configuration.

  First authentication works, but if I manually disconnect and reconnect, I got this error on ACS: 22047 username main attribute is missing from the client certificate

  In the EAP packets, we could see that Windows 8 sent a TLS session but ticket session has not properly taken over by ACS...

  Configuration of the ACS, we checked the option "enable EAP - TLS Session resume' with the session timeout"7200 ".

  I found this bug

  http://Tools.Cisco.com/support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId= CSCtn26538& from = summary

  It seems to be my problem but the reboot does not work in my case...

  It is set at 5.3 (0.40.2).

  I plan to install version 5.4.

  Do you know if this fix is supported by 5.4?

  Thanks for your help,

  Patrick

  Hi Patrick,

  What is set in point 5.3 must be set in point 5.4.

  Even if the same issue appeared with 5.4 there an ID different bug and identified as an independent issue (with different causes, usually)

  HTH

  Amjad

  Rating of useful answers is more useful to say "thank you".

• query not using the index for some user

  Hello
  
  I have a query that is running in less than a second for sys, system, or schema owner. However, another user (test_user) take 30 seconds to run the same query.
  
  I certainly dba and privileges identical to test_user as schmea_user, but the result is the same.
  
  I checked
  
  Select * from V$ SYS_OPTIMIZER_ENV;
  
  Both are the same for both users.
  
  I have check the plan to explain to both users. I noticed that for sys/system/schema_owner, the query uses an index, but not the test_user.
  
  All have experience the issue where a user uses an index, but not the other?
  
  Thank you for any assistance.

  Thank you for the display of formatting output, this output is much easier to read.

  One of the first things you notice about the execution plans that is for the owner non-schema "SQL_ID, 0wcs85uywn72m, number of children 1" appears in the output of DBMS_XPLAN, while "SQL_ID 0wcs85uywn72m, child number 0" (the same SQL_ID but a different number of child) appears for the schema owner. "" Whereas the SQL_ID is the same, which indicates that the client requires exactly the same SQL statement, so it's a good start.

  Then, note that in the predicate for the nonschema owner information section the following appears (sometimes with the order of the two conditions switched in position) as a condition placed on each table that is available in the schema:

  filter(("SEAL_FLAG" IS NULL OR "SEAL_FLAG"'Y'))
  

  The above suggests the presence of the virtual private database (or a superset of private database virtual) generated the predicates. You should be able to confirm that this is the case by querying V$ VPD_POLICY using the SQL_ID which was displayed in the DBMS_XPLAN output:

  SELECT
    *
  FROM
    V$VPD_POLICY
  WHERE
    SQL_ID='0wcs85uywn72m';
  

  As a test, I made a few minor adjustments to the example on this page:
  http://Antognini.ch/2011/09/optimizer_secure_view_merging-and-VPD/
  I changed the name of T to T12 and TESTUSER table specified for the schema names. I then created the function S of this page as follows:

  CREATE OR REPLACE FUNCTION s (schema IN VARCHAR2, tab IN VARCHAR2) RETURN VARCHAR2 AS
  BEGIN
    RETURN 'ID < 10';
  END;
  /
  

  I then added a couple of lines in the T12 test table:

  INSERT INTO T12 VALUES (1,1,NULL);
  INSERT INTO T12 VALUES (4,1,NULL);
  INSERT INTO T12 VALUES (10,1,NULL);
  INSERT INTO T12 VALUES (12,1,NULL);
  
  COMMIT;
  

  With an active 10053 trace, I executed the following SQL statement:

  SELECT id, pad
    FROM t12
    WHERE
    spy(id, pad) = 1
  

  The SQL_ID (in my case, found in the 10053 trace file) was 6hqw5p9d8g8wf, so I checked V$ VPD_POLICY to this SQL_ID:

  SELECT
    *
  FROM
    V$VPD_POLICY
  WHERE
    SQL_ID='6hqw5p9d8g8wf';
  
  ADDRESS          PARADDR            SQL_HASH SQL_ID        CHILD_NUMBER OBJECT_OWNER OBJECT_NAME                    POLICY_GROUP                   POLICY                 POLICY_FUNCTION_OWNER          PREDICATE
  ---------------- ---------------- ---------- ------------- ------------ ------------ ------------------------------ ------------------------------ ---------------------- ------------------------------ ------------------------------------------------------------------------------------
  000007FFB7701608 000007FFB7743350 1518838670 6hqw5p9d8g8wf            0 TESTUSER     T12                            SYS_DEFAULT                    T_SEC                  TESTUSER                       ID < 10
  

  As noted above, the VPD test function named S added the predicate "ID".< 10"="" to="" the="" sql="">

  There are not many clues in the 10053 trace file in my test VPD generated additional predicates. Trace the following was found shortly after the beginning of the file (this is the SQL statement initially presented):

  ----- Current SQL Statement for this session (sql_id=6hqw5p9d8g8wf) -----
  SELECT id, pad
    FROM t12
    WHERE
    spy(id, pad) = 1
  

  I searched then down in the trace for final after changes query file (to be noted that this sentence could be slightly different in different versions of database Oracle). That's what I found:

  Final query after transformations: ******* UNPARSED QUERY IS *******
  SELECT "T12"."ID" "ID","T12"."PAD" "PAD" FROM "TESTUSER"."T12" "T12" WHERE "TESTUSER"."SPY"("T12"."ID","T12"."PAD")=1 AND "T12"."ID"<10
  kkoqbc: optimizing query block SEL$F5BB74E1 (#0)
  

  Note that the final query after transformation shows how the final version of the query that has been rewritten by the query optimizer before the SQL statement has been executed and this version of the query includes AND "T12". "" IDENTITY CARD ".<10. if="" i="" was="" attempting="" to="" determine="" how="" that=""><10 predicate="" was="" added="" to="" the="" sql="" statement,="" i="" would="" start="" at="" the="" "current="" sql="" statement="" for"="" line="" in="" the="" trace="" file="" and="" search="" down="" the="" trace="" file="" for=""><10* -="" in="" this="" case,="" the="" following="" is="" what="" i="" found="" as="" the="" first="" search="" result,="" very="" close="" to="" the="" "current="" sql="" statement="" for"="" line="" in="" the="" trace="">

  **************************
  Predicate Move-Around (PM)
  **************************
  PM:     PM bypassed: Outer query contains no views.
  PM:     PM bypassed: Outer query contains no views.
  query block SEL$F5BB74E1 (#0) unchanged
  FPD: Considering simple filter push in query block SEL$F5BB74E1 (#0)
  "TESTUSER"."SPY"("T12"."ID","T12"."PAD")=1 AND "T12"."ID"<10
  try to generate transitive predicate from check constraints for query block SEL$F5BB74E1 (#0)
  finally: "TESTUSER"."SPY"("T12"."ID","T12"."PAD")=1 AND "T12"."ID"<10
  

  As can be seen from the above (because the predicate again appeared before and after the line containing the word "Finally: '), the AND"T12 ". "" IDENTITY CARD ".<10 predicate="" was="" already="" added="" to="" the="" original="" sql="" statement="" by="" the="" time="" the="" predicate="" move-around="" section="" of="" the="" trace="" file="" was="" written,="" and="" that="" is="" the="" first="" mention="" of=""><10 in="" the="" trace="" file.="" in="" your="" case,="" you="" would="" search="" the="" 10053="" trace="" file="">

  "SEAL_FLAG" IS NULL
  

  If V$ VPD_POLICY revealed that there are virtual private database (VPD) generated predicates applied to the SQL statement, take a look at the following article in the Oracle documentation library:
  http://docs.Oracle.com/CD/B28359_01/network.111/B28531/VPD.htm

  This article lists the different points of view, who can be interviewed to learn more about the VPD rules which are in force in the schema. For example, with my SPV test:

  SELECT
    *
  FROM
    ALL_POLICIES;
  
  OBJECT_OWNER                   OBJECT_NAME                    POLICY_GROUP                  POLICY_NAME                    PF_OWNER                       PACKAGE                       FUNCTION                       SEL INS UPD DEL IDX CHK ENA STA POLICY_TYPE              LON
  ------------------------------ ------------------------------ ----------------------------- ------------------------------ ------------------------------ ----------------------------- ------------------------------ --- --- --- --- --- --- --- --- ------------------------ ---
  TESTUSER                       T12                            SYS_DEFAULT                   T_SEC                          TESTUSER                       S                                                            YES YES YES YES NO  NO  YES NO  DYNAMIC                  NO
  

  He knows performance issues related to the use of VPD, some of which are Oracle Database version-dependent, and some have been fixed in recent versions. Take a look at the following articles if you have access to My Oracle Support:
  MetaLink (MOS) Doc ID 728292.1 ' known performance problems when you use transparent encryption data and indexes on the encrypted columns.
  MetaLink (MOS) Doc ID 967042.1 "How to investigate Query Performance regressions Caused by VPD (FGAC) predicates?"

  You might find working through the second of the above that the problem is caused by a bug in database Oracle.

  On a side note. Execution plans you have published include the 0 value in the column starts many of the operations in the execution plan. 0 indicates that the operation never actually executed. A 0 is included in the column starts on the line that includes the FULL ACCESS of TABLE of PEOPLE_TRANSACTIONS at least to the OPC. Value 123, a full table of PEOPLE_TRANSACTIONS table scan PROPERTY_CONTAINER_ID was not actually performed.

  Charles Hooper
  http://hoopercharles.WordPress.com/
  IT Manager/Oracle DBA
  K & M-making Machine, Inc.

• Password reset disk error - "year error occurred while the wizard attempted to set the password for this user account.

  Hello!

  -A bit of background: the desktop PC that I use is Windows Vista Ultimate Edition, with active user accounts total five. I have my own account, and I can access the computer through (or through account from my brother, because I know its password).--

  I had this problem recently came where the administrator password (that I know for a long time and never changed) no longer works. So, after some research, I created a reset password on a USB disk, that I found in my house. I managed to create the disc, but when I tried to put the new password, I got the message error "an error occurred while the wizard attempted to set the password for this user account', which I must say is not very clear. I found a few methods of force - reset the password for the account of the admin, as using a sort of Windows Vista DVD or go to Safe Mode to find the hidden administrator account... but I have no idea what this DVD is or where to find, and in Safe Mode, there is no account user administrator to be seen. I believe that my machine is corrupted, but I don't want to buy a new. I want just to reset a password...

  Any help is appreciated. If I was not specific enough, I can specify in comments.

  Thank you!

  Hello

  You must make a password reset disk before that there are problems with a password, not afterwards.

  ________________________________________________________________

  Read this for your problem:

  http://support.Microsoft.com/kb/940765

  If you are unable to connect to Windows 7 or Windows Vista, you can use the Windows Vista System Restore feature, or the Windows 7 system restore feature.

  You may be unable to connect to Windows Vista or Windows 7 in the following scenarios:

  • Scenario 1: You recently set a new password for the protected administrator account. However, you don't remember the password.
  • Scenario 2: You type the correct password. However, Windows Vista or Windows 7 does not accept the password because the system is damaged.
  • Scenario 3: You delete a protected administrator account. Now, you cannot connect to another administrator account.
  • Scenario 4: You change an administrator account protected with a standard user account. Now, you cannot connect to another administrator account.

  You can also borrow and use a Microsoft Vista DVD, which contains the files for the different editions of Vista (Home Basic, Home Premium, Business and Ultimate) must be installed. The product key on your computer / Laptop box determines what Edition is installed.

  Other manufacturers recovery DVDs are should not be used for this purpose.

  _____________________________________________________________

  Microsoft prohibits any help given in these Forums for you help bypass or "crack" passwords lost or forgotten.

  Here's information from Microsoft, explaining that the policy:

  http://answers.Microsoft.com/en-us/Windows/Forum/Windows_7-security/keeping-passwords-secure-Microsoft-policy-on/39f56ef0-5d68-41AD-9daa-6e6019c25d37

  See you soon.

• HP M477fdn printers have been impossible to install the driver for some users. We receive the error message following '0 x 00000006 '.

  have been unable to install the driver for some users. We do not receive the following error message.

  Error: 0 x 00000006

  Hi Sameer,

  Thanks for posting your query on the Microsoft Community.

  According to the description, I understand that you are getting an error code.

  I would like to know some information.

  1. You are connected to a domain network?

  2. When exactly do you get this error code?

  3. Do you also have any error message?

  This problem may occur if the print spooler service is stopped.

  To start the spooler service, follow these steps:

  1. click on Startand then click Control Panel.

  2. double-click Administrative Toolsand then click Services.

  3. double-click on the Printer Spooler service and then change the startup type to Automatic. This option sets the spooler service starts automatically when you restart the computer.

  4. If you want to start the spooler service immediately, click Start in the area of The State of the Service .

  I would also refer to the Microsoft Help Article below and check if that helps.

  http://Windows.Microsoft.com/en-us/Windows/printer-problems-in-Windows-help#fix-printer-problems=Windows-7&V1H=win8tab1&V2H=win7tab1&V3H=winvistatab1

  Hope this information helps. Please let us know if you need any other help with Windows in the future. We will be happy to help you.

• I tried to reset my password computer laptop but the laptop telling me an error occurred while the wizard attempted to set the password for this user account how can I fix this pleas

  I tried to reset my password computer laptop but the laptop telling me an error occurred while the wizard attempted to set the password for this user account, how can I fix this means if someone knows how to fix teas pleas answer me quickly I have to work

  Logging in as an admin account, then reset the password for the account of the problem.

• How can we get the details of the traffic for the spaces for example, users access report by place (all users)

  How can we get the details of the traffic for the spaces for example, users access report by space (for all users), DB tables can be used to get information, such as for example: users who have logged in - never

  You can use analytics. WebCenter Analytics comes with a number of events out-of-the-box for which it brings together measures which are very useful.

  You can check in the WebCenter Analytics database schema. WebCenter Analytics Dashboards are present in the scheme of ACTIVITIES and are modeled in the form of a star schema.

  The schema includes 2 types of tables. FACTS analytical tables are used to store instances of specific events. For each event, a specific FACT table is present, for example for page views, the views of space, connections and so on. These tables contain a timestamp for the moment, that the event is occurred and integer ID these descriptive reference data stored in DIMENSION tables.

  DIMENSION tables contain descriptive information about the entities associated with events. Size examples are pages, applications, groupspaces, users and so on.

  See the details of the table all the under http://docs.oracle.com/cd/E23943_01/webcenter.1111/e10148/jpsdg_app_aschema.htm#JPSDG10767

  If you want to custom event.that track, as you can get. see this blog entry

  Quobell technology - portal WebCenter: WebCenter Analytics: define and save custom events

• Mirage Management Server installation 5.1 - "unable to validate the permissions for this user account.

  I'm installing Horizon Mirage 5.1 server on a Windows Server 2012 R2 VM management. The SQL is located on a Server R2 VM with SQL 2012 2012. We have created a Mirage service account that has permissions of db_creator on the SQL Server. When we run the installation wizard we get the "unable to validate the permissions for this user account. Unable to connect to the database. The control server name, the name and server instance parameters"error message. We tried to make the local admin of the SQL server service account and the Mirage Mgmt server. We tried you identifying as service account and by running Setup in this way. Windows Firewall is disabled on both virtual machines. When we enter the SQL Server name and the instance use < servername > without an instance because it is an unnamed instance. Does anyone have other ideas? Cannot find much out there for KB articles. I'll open evidence of the support if it takes too long to understand.

  The service account, we created had a "database default" set in SQL. We chose the database and he continued as planned.

• How to change the password for all users in the database

  Hi buddies!
  
  Could someone tell me how to change the password for all users in the database? I want to set the same password for all users.
  
  Thank you.
  
  Nith
  
  Published by: user645399 on March 1, 2011 14:23

  Write the file spooling
  as

  Make sure that all profiles has password_verify_function with a NULL value

  then

  Select 'edit user' | username: ' identified by ;' from dba_users;

  you will get the output... you just run.

• Rest of the passwords for multiple users in 11i

  Hi Hussein.
  
  I need to reset the password for 10 users of 11.5.10.2 Application. Please let me know what is the best way. Is it possible to reset the password of the interface as well.
  
  Thank you
  -Samar-

  Samar,

  Use FND_USER_PKG. UpdateUser API to change the password of users - see (Note: 344979.1 - users are not prompted to change their password when using Fnd_user_pkg.) UpdateUser).

  Another possible solution to force these 10 users to change their password. Modify the script in AFCPEXPIRE.sql for 10 users, you want them to change their password - see (Note: 414976.1 - how to Force all Applications users to change their password?).

  Kind regards
  Hussein

• 4.2 of the ACS and EAP - TLS with AD and prefix problem

  Hello

  We have the following situation:

  -2 X ACS (ACS SE 4.2 1 x and 1 x 4.2 ACS) for domain

  -2 x ACS (ACS SE 4.2 1 x and 1 x 4.2 ACS) for domain b.

  First of all, there is a problem to have an ACS SE and a CBS work together for an area, I do not? When we haven't had that one area and the two SE ACS were responsible for domain A, it worked.

  Now after the changes, authentication of machine with EAP - TLS is no longer in effect. In the newspapers, it always says that "external user DB is unknown" for a username (machine) as host/abc.domain.ch

  This is the normal output of the Remote Agent, he finds the host but then nothing happens:

  CSWinAgent 2009-11-30 16:32:13 0140 3672 0x0 customer who connects from x.x.x.x:2443
  CSWinAgent 2009-11-30 16:32:14 0507 3512 0x0 CPP: NT_DSAuthoriseUser received
  CSWinAgent 2009-11-30 16:32:14 0474 3512 0x0 NTLIB: Creating Domain cache
  CSWinAgent 2009-11-30 16:32:14 0549 3512 0x0 NTLIB: domain Cache loading
  CSWinAgent 2009-11-30 16:32:14 0646 NTLIB 3512 0x0: none of the trusted domains found
  CSWinAgent 2009-11-30 16:32:14 0735 3512 0x0 NTLIB: cache loaded field
  CSWinAgent 2009-11-30 16:32:14 2355 3512 0x0 NTLIB: user "host/abc.domain.ch" found [FIELD]
  CSWinAgent 2009-11-30 16:32:14 0584 0 x 3512 0 RPC: NT_DSAuthoriseUser response sent

  So I did a test of the ASA to see if the host is a problem (until changes have been made it was not a problem):

  AAA authentication RADIUS host 10.3.1.9 username host/abc.domain.ch to test (the ASA becomes the host / entry for the correct Windows scheme with the $):

  CSWinAgent 2009-11-30 15:39:23 0140 3672 0x0 customer who connects from x.x.x.x:1509
  CSWinAgent 2009-11-30 15:39:23 0390 0 x 3728 0 RPC: NT_MSCHAPAuthenticateUser received
  CSWinAgent 2009-11-30 15:39:23 0474 3728 0x0 NTLIB: Creating Domain cache
  CSWinAgent 2009-11-30 15:39:23 0549 3728 0x0 NTLIB: domain Cache loading
  CSWinAgent 2009-11-30 15:39:23 0646 NTLIB 3728 0x0: none of the trusted domains found
  CSWinAgent 2009-11-30 15:39:23 0735 3728 0x0 NTLIB: cache loaded field
  CSWinAgent 2009-11-30 15:39:23 1762 3728 0x0 NTLIB: had WorkStation CISCO
  CSWinAgent 2009-11-30 15:39:23 1763 3728 0x0 NTLIB: Windows authentication attempts for user ABC$
  CSWinAgent 2009-11-30 15:39:23 1815 3728 0x0 NTLIB: Windows authentication FAILED (Error 1326 L)
  CSWinAgent 2009-11-30 15:39:23 0373 3728 0x0 NTLIB: retry authentication to the domain
  CSWinAgent 2009-11-30 15:39:23 0549 3728 0x0 NTLIB: domain Cache loading
  CSWinAgent 2009-11-30 15:39:23 1762 3728 0x0 NTLIB: had WorkStation CISCO
  CSWinAgent 2009-11-30 15:39:23 1763 3728 0x0 NTLIB: Windows authentication attempts for user ABC$
  CSWinAgent 2009-11-30 15:39:23 1815 3728 0x0 NTLIB: Windows authentication FAILED (Error 1326 L)
  CSWinAgent 2009-11-30 15:39:23 0456 0 x 3728 0 RPC: NT_MSCHAPAuthenticateUser response sent

  It is clear that the test failed because of the bad 'past to a computer' but it's a different output as before. I saw that in ACS 4.1, you can change the prefix of send_break_action for nothing, but in 4.2 it is no longer possible.

  This could be the problem, or if someone sees no other problem?

  Best regards

  Dominic

  Hello

  I encounter the same problem with my acs. I have all of the attempts failed for the default group. For the default group made configuration is not available. Is - this thereason behind all this?

• The AAA for PIX515E 6.3 rules (5)

  Hello. If I wanted to configure the PIX for the authentication of an ACS server (for the purpose of management of PIX), what else would need apart from what follows:

  AAA-server Admin-FW Protocol Ganymede +.

  AAA-Server Admin-FW max-failed-attempts 3

  AAA-Server Admin-FW deadtime 10

  !

  AAA-Server Admin-FW (inside) host 192.168.2.9 access timeout 10

  !

  console series FW-Admin-AAA authentication

  Console telnet authentication AAA Admin-FW

  authentication AAA ssh console Admin-FW

  As far as I KNOW, I did not specify which IP addresses can someone telnet from to connect on the PIX. I tried the following, but I do not know I did not provide the correct instructions:

  the AAA authentication include telnet inside 192.168.0.0 255.255.0.0 Admin-FW

  ... and I have a username / password to invite him on the PIX but it keeps asking for a user name and password. I know my account GANYMEDE is good because I can connect on the routers with the same details as what I use to authenticate on the PIX.

  I also ran a debugging on the PIX when I was trying to authenticate. The output is attached.

  Thank you

  Timothy

  Hi Tim,.

  There is no need to order,

  the AAA authentication include telnet inside 192.168.0.0 255.255.0.0 Admin-FW

  Try it now and see if you get hits on ACS. Incase it is not working, pls get again him debugs.

  Thank you

  Jagdeep

• equivalent command in the OPS for what what post record forms

  Hello
  
  What is the equivalent command in the OPS when when validate check in forms
  
  --
  Kumar

  Use a method named validateEntity() in the object of the entity.

  Reference http://oracle.anilpassi.com/oa-framework-interview-questions-2.html

  -Anand

• How to get an extension of the dictionary for all users in a Citrix environment?

  Hi all

  Under title, I'm looking for a way to get out a dictionary of Firefox (specifically the English (British) of https://addons.mozilla.org/en-US/firefox/language-tools/) to all users in a Citrix environment. Comprehensive silent installation is absolutely best. Because following a recent installation of Firefox users report that this spell check is not working, what appears as a result there is no dictionary to check the spelling on the facility.

  It's in a corporate environment, running 6.5 XenApp hosted workstations to multi-server Windows 2008 R2 Enterprise x 64, the installed Firefox info below as collected by the add-on troubleshooting pulled from the browser in the test environment with the same characteristics.

  So far, I have tried what follows from this link: http://kb.mozillazine.org/Installing_extensions

  "A whole installation will install an extension in the directory of the application rather than in a profile so it will be available to all users. To perform a whole installation, you must not activate as within your Mozilla application installation file. Instead, download and save this record and make sure you close the application completely.

  Then follow one of the following options:

     Copy the .xpi file into the <installation directory>\extensions folder. When you start your Mozilla application again, it displays an installation dialog, asking "The following items were found in your Extensions folder. Do you want to install them?" "
  

  Although it seems that the < installation directory > \extensions folder no longer exists at the given location. Find a path of the < installation directory > \browser\extensions but seems it does not behave as said here that I have not received all of the guests. I hope that this method is still applicable in some way and I am just not aware of how this is currently supposed to be handled, but not sure if it is a dictionary rather than a typical add-on will have no effect on the installation overall how can be reached.

  Have also tried to http://forums.anandtech.com/showthread.php?t=2268437 , which seems a pretty basic option, but this would have not only to a lot of work to do on a per user basis, but there are also restrictions in place to prevent access to the records of users AppData.

  Finally I was looking https://support.mozilla.org/en-US/questions/740545 to push this point across: the les parametres parameters configuration, then use the method above to enforce this on the user end, but did not find anything me.

  Any help/advice/shots of elbow in the right direction would be greatly appreciated.

  It might be easier to extract the files of two dictionary (.dic and .aff) of archive XPI (ZIP) and place the two files in the folder of Firefox profile for the dictionaries available for all users.