Unable to save attachments in Firefox when accessing OWA via ISA FBA

This article applies to the following products:
     Messageware AttachView 2007
 
     Messageware AttachView 2003

 

SYMPTOM

 

Users are unable to save attachments using the AttachView Save feature in Firefox when accessing OWA via ISA Server 2006 where ISA Forms-Based Authentication is enabled

 

 

CAUSE

 

In environments where users connect to OWA via ISA 2006 server with Forms-Based Authentication (FBA) configured, the AttachView Save java applet must provide authentication in order to have permission to access the file and this is achieved through the use of a cookie obtained through FBA.

 

In browsers where the Httponly flag is honored, the java applet is unable to access the Httponly cookie, which is required to have access to downloading the file.

 

RESOLUTION

 

This behaviour can be resolved by not setting the HTTPOnly attribute on client cookies for connections on the Web listener used by OWA.

 

Please find below a Microsoft KB article containing information on how to not set the HTTPOnly attribute on client cookies for connections on a particular Web listener.

Applications that use an embedded Web browser program cannot access content on a Web site that you have published by using forms-based authentication in ISA Server 2006 or in Windows Essential Business Server 2008
http://support.microsoft.com/kb/933869

 

 

ADDITIONAL INFORMATION

 

HttpCookie.HttpOnly Property
http://msdn.microsoft.com/en-us/library/system.web.httpcookie.httponly.aspx

 

This article applies to the following products:
     Messageware AttachView 2007

     Messageware AttachView 2003