https proxy problem

websterb · 09-04-2003, 05:44 PM

We've just had https proxy enforced at work, and so I enetered the address in the network proxies pane on 10.2.6.

Unfortunately Safari 1.0 and Chimera 0.7 can't connect to any https page.

IE can - but only by entering the https proxy in the IE prefs.

It seems the system https proxy pref isn't working. I've tried this on a few machines.

houchin · 09-04-2003, 07:03 PM

Camino (it's not Chimera anymore) works just fine with HTTPS proxies, even if they require a password.
What won't work in Camino is having different proxies for HTTP and HTTPS. Camino will insist on using the HTTP proxy for HTTPS. I seem to recall that I had this problem with IE too, but that was a long time ago.

Safari, on the other hand... You'll have to wait for Panther.

With IE, you do indeed have to to enter it in the IE prefs.

Make sure you entered the info on the Secure Web Proxy line in Network Preferences, not just the Web Proxy (HTTP) line.

island_three · 09-04-2003, 07:14 PM

uhm, i'm not going to be able to help you with this one because a couple of days i got a connection over here (denmark) with the same problems.

i can tell you what i've learned to far though.

first of all, the problem i am expriencing is that the connection i'm using requires username and password autherisation to pass the proxies.

With http servers this is fine as safari or IE allow me to enter one, but for some reason mac os 10.2 doesn't agree with this for ftp or https servers.

quite mysteriously apple say this in a technical document:

"the Software Update feature of Mac OS X 10.2 cannot work if your computer uses a proxy server that requires authentication (a name and password)."

whereas software update version 1.3.1 had:

"Software Update 1.3.1 delivers improved network performance, support for proxy authentication"

but that was replaced by software update 1.5.1 it seems with os x 10.2.

I'm going to continue my search for a workaround for this, other than getting a pc or trying to reinstall an earlier os, neither of which are an attractive idea.

If i find anything I'll be sure to notify you, and i'll check back here to see if someone who know what they are talking about has been kind enough to help me out here.

the search continues,

Jens

island_three · 09-04-2003, 07:28 PM

p.s.

in responce to houchin's post, Camino seems to do the trick for the web, but i still can't use applications like MSN or Fetch with the proxies.

any ideas?

Jens

websterb · 09-04-2003, 08:10 PM

The https proxy is the same as http, but the proxy does require password authentication. I think this may be the problem, though it works for http - why not https?

houchin · 09-04-2003, 08:41 PM

If your only problem is authentication, I suggest giving Authoxy a try. It is in effect a proxy server that runs right on your machine, but sits between your web apps and your parent proxy. What it does is add your proxy authentication info into any web request for both HTTP and HTTPS before sending it up stream. It works great.

If you want or need a more complicated solution, I'm using squid to do the same thing, but have in place scripts that run from the System Kicker to change my configuration when I leave work with my PowerBook. Here's a hint that talks about setting up squid to do this:

http://www.macosxhints.com/article.p...6&query=squid.

If you want to go this route and need to move between proxy and no proxy situations, PM me and can share my squid reconfig script.

mackid97140 · 09-04-2003, 09:55 PM

ahh, i'm having the exact same problem. except i don't need https to work, i just want safari, software update, and a few other apps to work on the internet. I'm behind an ISA Firewall that is hosted by a windows server. The server sends out a Windows prompt, that OS X doesn't recignize. I've tried Authoxy, but it doesn't help. I'm not sure what to do but if anyone finds out anything, let me know.

-mackid

houchin · 09-05-2003, 09:20 AM

Quote:


	Originally posted by mackid97140 The server sends out a Windows prompt, that OS X doesn't recignize.

Can you be more specific about what you mean by a "windows prompt." If you're just using Safari, for example, and have entered your proxy address and port number into your Network Preferences, the only possible thing I can see is a Safari generated dialog box asking for your proxy username and password. This is what happens to me if I'm not using something like Squid or Authoxy. I just put in my stupid proxy credentials and off I go.

mackid97140 · 09-05-2003, 02:26 PM

what? you actually get a popup in safari asking for you proxy info? i don't get a thing i only get a popup if i'm in explorer. Explorer works but no other net applications work. None of my games, sys updater, quicktime streaming, ect. What i mean by a windows prompt is that as far as i know, the server is a windows machine, it is sending out a prompt that is suposed to be recignized by a pc, not a mac. I may be wrong, but thats the way i understand. If you acn get the popup in safari, would you mind posting the way you have your network prefs set up?

houchin · 09-05-2003, 03:54 PM

For my proxy settings, I have both the web proxy and secure web proxy buttons set. In the proxy fields, I have the name of the proxy server, and then the port in the port field.

Technically, what I believe happens is that the application sends the request to the proxy server without user/password. The proxy then rejects it with an error code indicating that authentication is required. A properly behaving app then somehow asks you for your username and password. The app then resends the request to the proxy, this time with the correct user/password in the request.

Yes, software update will not work without an additional proxy in the middle. But Authoxy should work just fine, provided you've set it up correctly.

In the Authoxy pref pane, you put the info about your corporate proxy server (server address, port, username and password). Then in Network preferences, you enter "localhost" for the proxy address and the Authoxy port # (I can't remember what it is set to by default).

mackid97140 · 09-07-2003, 02:59 AM

i set up authoxy and everything but it doesn't work right. It might have something to do with the server settings. if anyon comes up with some new info it would by very usefull.

09-04-2003, 05:44 PM	#1
websterb Prospect Join Date: Sep 2002 Location: New Zealand Posts: 36	https proxy problem We've just had https proxy enforced at work, and so I enetered the address in the network proxies pane on 10.2.6. Unfortunately Safari 1.0 and Chimera 0.7 can't connect to any https page. IE can - but only by entering the https proxy in the IE prefs. It seems the system https proxy pref isn't working. I've tried this on a few machines.

09-04-2003, 07:14 PM	#3
island_three Prospect Join Date: Sep 2003 Posts: 3	https ftp proxy problems uhm, i'm not going to be able to help you with this one because a couple of days i got a connection over here (denmark) with the same problems. i can tell you what i've learned to far though. first of all, the problem i am expriencing is that the connection i'm using requires username and password autherisation to pass the proxies. With http servers this is fine as safari or IE allow me to enter one, but for some reason mac os 10.2 doesn't agree with this for ftp or https servers. quite mysteriously apple say this in a technical document: "the Software Update feature of Mac OS X 10.2 cannot work if your computer uses a proxy server that requires authentication (a name and password)." whereas software update version 1.3.1 had: "Software Update 1.3.1 delivers improved network performance, support for proxy authentication" but that was replaced by software update 1.5.1 it seems with os x 10.2. I'm going to continue my search for a workaround for this, other than getting a pc or trying to reinstall an earlier os, neither of which are an attractive idea. If i find anything I'll be sure to notify you, and i'll check back here to see if someone who know what they are talking about has been kind enough to help me out here. the search continues, Jens

09-04-2003, 07:03 PM	#2
houchin Major Leaguer Join Date: Jan 2002 Location: Northern Virginai Posts: 294	Camino (it's not Chimera anymore) works just fine with HTTPS proxies, even if they require a password. What won't work in Camino is having different proxies for HTTP and HTTPS. Camino will insist on using the HTTP proxy for HTTPS. I seem to recall that I had this problem with IE too, but that was a long time ago. Safari, on the other hand... You'll have to wait for Panther. With IE, you do indeed have to to enter it in the IE prefs. Make sure you entered the info on the Secure Web Proxy line in Network Preferences, not just the Web Proxy (HTTP) line.

09-04-2003, 07:28 PM	#4
island_three Prospect Join Date: Sep 2003 Posts: 3	p.s. in responce to houchin's post, Camino seems to do the trick for the web, but i still can't use applications like MSN or Fetch with the proxies. any ideas? Jens

09-04-2003, 08:10 PM	#5
websterb Prospect Join Date: Sep 2002 Location: New Zealand Posts: 36	The https proxy is the same as http, but the proxy does require password authentication. I think this may be the problem, though it works for http - why not https?

09-04-2003, 08:41 PM	#6
houchin Major Leaguer Join Date: Jan 2002 Location: Northern Virginai Posts: 294	If your only problem is authentication, I suggest giving Authoxy a try. It is in effect a proxy server that runs right on your machine, but sits between your web apps and your parent proxy. What it does is add your proxy authentication info into any web request for both HTTP and HTTPS before sending it up stream. It works great. If you want or need a more complicated solution, I'm using squid to do the same thing, but have in place scripts that run from the System Kicker to change my configuration when I leave work with my PowerBook. Here's a hint that talks about setting up squid to do this: http://www.macosxhints.com/article.p...6&query=squid. If you want to go this route and need to move between proxy and no proxy situations, PM me and can share my squid reconfig script.

09-04-2003, 09:55 PM	#7
mackid97140 Triple-A Player Join Date: Feb 2002 Posts: 71	ahh, i'm having the exact same problem. except i don't need https to work, i just want safari, software update, and a few other apps to work on the internet. I'm behind an ISA Firewall that is hosted by a windows server. The server sends out a Windows prompt, that OS X doesn't recignize. I've tried Authoxy, but it doesn't help. I'm not sure what to do but if anyone finds out anything, let me know. -mackid

09-05-2003, 02:26 PM	#9
mackid97140 Triple-A Player Join Date: Feb 2002 Posts: 71	what? you actually get a popup in safari asking for you proxy info? i don't get a thing i only get a popup if i'm in explorer. Explorer works but no other net applications work. None of my games, sys updater, quicktime streaming, ect. What i mean by a windows prompt is that as far as i know, the server is a windows machine, it is sending out a prompt that is suposed to be recignized by a pc, not a mac. I may be wrong, but thats the way i understand. If you acn get the popup in safari, would you mind posting the way you have your network prefs set up?

09-05-2003, 03:54 PM	#10
houchin Major Leaguer Join Date: Jan 2002 Location: Northern Virginai Posts: 294	For my proxy settings, I have both the web proxy and secure web proxy buttons set. In the proxy fields, I have the name of the proxy server, and then the port in the port field. Technically, what I believe happens is that the application sends the request to the proxy server without user/password. The proxy then rejects it with an error code indicating that authentication is required. A properly behaving app then somehow asks you for your username and password. The app then resends the request to the proxy, this time with the correct user/password in the request. Yes, software update will not work without an additional proxy in the middle. But Authoxy should work just fine, provided you've set it up correctly. In the Authoxy pref pane, you put the info about your corporate proxy server (server address, port, username and password). Then in Network preferences, you enter "localhost" for the proxy address and the Authoxy port # (I can't remember what it is set to by default).

09-07-2003, 02:59 AM	#11
mackid97140 Triple-A Player Join Date: Feb 2002 Posts: 71	i set up authoxy and everything but it doesn't work right. It might have something to do with the server settings. if anyon comes up with some new info it would by very usefull.