Using corporate Proxy servers

Hi,
I'm having some problems using my iPad through a corporate proxy. I have my Wi-Fi configured up correctly and have set the proxy settings using manual settings. This all works fine and I can access none secure services.
However, when I try to connect to anything other than HTTP it won't connect. Is there an option to 'use the same proxy for all protocols' as in windows? Good example is - I have my iPad and work laptop (windows) connected to the same Wi-Fi with the same proxy. I can access these discussions on both devices - until I come to login - I cannot login using the iPad but I can on the laptop.
Any help would be much appreciated.
Thanks
Neil

I'm not quite sure that all other apps except for AppStore and safari try to default to the Internet ignoring the proxy settings. I have a few apps that have been dependent on the proxy setting in order to work to date. Curiously though, this has stopped working reliably for me after updating to 4.3 this week. So I did some investigation. Our corporate proxy is a Microsoft ISA server and checking the logs on there after repeated failed efforts to get to either http or https sites revealed that the proxy was not getting presented with the user credentials from the iPad. The proxy was getting no username / password and as a result dropping the requests. Very occasionally, it would present the credentials and pass the traffic but it's intermittent to say the least.
Previously this problem impacted me only on https traffic and http traffic worked fine. But this week, both protocols have become an issue (immediately after the 4.3 upgrade). This affects both the iPad and iPhone when connected through the proxy. It's also relevant only to proxy connections that require authentication. I have been able to use a different proxy through an alternate part of the network that doesn't require authentication and it works fine. This is how I am currently getting around the issue.
My interpretation of this problem is that IOS device functionality with proxies that require authentication is just plain broken. And it seems to be "more" broken for me on 4.3 than it did on 4.2 as where I was previously able to get most http access through the proxy ok (but never https), now I can't get other.

Similar Messages

Crashes when using corporate proxy and accessing MobileMe mail. Proxy seems to be doing SSL interception

I authenticate to the corporate proxy and then get the following detail about untrusted SSL connected:
"The certificate is not trusted because no issuer chain was provided."
I add an exception so I can continue and then get the same message again except I don't have the option to continue. I can view the cert or cancel. When I choose cancel FF crashes.
Crash signature: nsTArray<nsHttpHeaderArray::nsEntry, nsTArrayDefaultAllocator>::IndexOf<nsHttpAtom, nsHttpHeaderArray::nsEntry::MatchHeader>(nsHttpAtom const&, unsigned int, nsHttpHeaderArray::nsEntry::MatchHeader const&) | nsHttpHeaderArray::GetHeader(nsHttpAtom, nsA...

.me is imap and I doubt it can be set to pop access. You can go to the iCloud.com website and forward your .me account to a gmail address.

Can lync client use internet proxy settings to proxy edge servers, if direct access is not reachable?

Hi everybody I am trying to Login with my lync Client out of my organization. So I am using lync as a remote user. I am in another organization, and I am using their coporate lan wired and wireless, but I cannot Login to lync in my organization.
I see that I cannot Access my edge Server on port 443 to authenticate directly, I know that Client in this organization use Internet Proxy to browse the Internet. they have a .pac in their ie Settings.
my question is; can lync Client use Internet Proxy Settings to reach the Destination? I mean the Access edge on port 443?
or it can use only Client direct Access to reach the edge Servers?
I Think that the answer is that I use tcp protocol and not http, and maybe that is the reason why I cannot use the Internet Explorer Proxy Settings to reach the Access edge Servers, different maybe is the case I Need to reach the reverse Proxy for live Meetings.
Hope my question is clear.
Thanks

Proxy settings are used to tell Internet Explorer the network address of an intermediary server (known as a proxy server) that is used between the browser and the Internet on some networks.
Lync client doesn’t use Internet Proxy Setting. You need to access the Edge service directly.
Lisa Zheng
TechNet Community Support

Create Resource from URL (WSDL) through corporate proxy?

In OSB I Create a Resource from a URL (WSDL) but I get a "No resource found".
Im using this service to test...
http://webservicex.net/stockquote.asmx?WSDL
I suspect its because it needs to route though our corporate proxy. Do I set this up in the OSB or the Weblogic Administration Console?
I setup the proxy in the OSB, but it appears I can only assign it to a business service at this point, but I cant create my business service till I load in the WSDL url.
This works fine for internal WSDL's inside our network. Does anyone know how to configure weblogic or osb to take traffic through a corporate proxy so it can find the test wsdl on an external network?
Thanks!

Hi Cory,
In SB Console go to System Administration > Global Resources > Proxy Servers... Add a new proxy server there...
In your Business Service you configure the proxy server under Advanced HTTP Transport Configuration...
You can create the WSDL on SB Console by copy and pasting the WSDL content...
Hope this helps...
Cheers,
Vlad
It is considered good etiquette to reward answerers with points (as "helpful" - 5 pts - or "correct" - 10pts)
https://forums.oracle.com/forums/ann.jspa?annID=893

NI Installers & downloaders do not support proxy servers requiring authentication

Hello, I'm posting this on the LabVIEW forum since it applies to the LabVIEW installer and evaluation version downloader, but it also applies to other products that use the NI meta-installer framework and other products that use the NI downloader.
We are behind a corporate firewall which requires the use of a proxy for internet access. In addition, the proxy requires authentication, which I believe is the complicating factor.
When running an NI installer, if we check the box that requests that the installer contact NI for new notifications, this will inevitably fail when trying to connect to the notification server.
Also when trying to use the NI downloader to download drivers or other products, the download always fails.
Most other software (e.g. Browsers, Dropbox, etc.) are able to use the proxy and allow entry of the username and password (either through a pop-up username/password dialog or configuration page).
This has generally not been a showstopper problem, but since it affects the NI installer framework it impacts many products and thus they would all benefit from a single bug fix.
Thanks,
Joe

Hi GeekySeb,
Are you using the most current versions of the NI Downloader and NI Update Service? The problems with proxy servers have been repaired in both of them.
You can download the current version of the NI Update Service here, either by using the NI Downloader or by downloading the installation file directly. This option should exist for most of our software downloads, so if the NI Downloader does not appear to be working for you then there is an alternate download option.
http://www.ni.com/download/ni-update-service-14.0/2617/en/
If none of these options work for you, I would recommend contacting your company's support group for help in configuring your firewall to be able to download NI's software.
Regards,
Kelly B.
Applications Engineering
National Instruments

How to configure sendmail to use multiple LDAP servers ?

Hi everybody!
I have a sendmail running on Solaris 10 and a LDAP server(192.168.1.9) also running Solaris 10 OS. I have configured the sendmail the following way:
bash-3.00# ldapclient list
NS_LDAP_FILE_VERSION= 2.0
NS_LDAP_BINDDN= cn=proxyagent,ou=profile,dc=email,dc=reso,dc=ru
NS_LDAP_BINDPASSWD= {NS1}*********************
NS_LDAP_SERVERS= 192.168.1.9
NS_LDAP_SEARCH_BASEDN= dc=email,dc=domain,dc=ru
NS_LDAP_AUTH= simple
NS_LDAP_SEARCH_REF= FALSE
NS_LDAP_SEARCH_SCOPE= sub
NS_LDAP_SEARCH_TIME= 30
NS_LDAP_CACHETTL= 43200
NS_LDAP_PROFILE= default
NS_LDAP_CREDENTIAL_LEVEL= proxy
NS_LDAP_BIND_TIME= 10
I also have another LDAP server (IP 192.168.1.10). It is configured as a replicant of the 192.168.1.9 LDAP server.
The question is how can i configure sendmail to use both LDAP servers ?
The man pages explain how to configure ldapclient to use ONE server and what if want to use two or more? All the settings and the profiles the same.
Thanks in advance =))

Hi!
To add LDAP servers to the Solaris ldapclient, you might use the ldapclient command:
ldapclient manual -v -a defaultServerList="servera.yourdomain.com serverb.yourdomain.com"
But this is only failover, AFAIK the Solaris ldapclient does not perform loadbalancing by itself.
But I am not sure about your sendmail programm. Normally, sendmail has its own configuration
and can be configured to use LDAP e.g. for aliases etc.
Regards!
Rainer

Unable to set session in Oracle Portal useing reverse proxy

I have deployed a reverse proxy (using Oracle HTTP Server) in front of a Oracle Portal Install (version 10.1.2.0.2). The steps followed to set this up came from the following documents:
Steps mentioned in Section 9.2 Configuring a Reverse Proxy for OracleAS Portal and OracleAS Single Sign-On for a reverse proxy on a Oracle HTTP Server.
http://download-west.oracle.com/docs/cd/B14099_15/core.1012/b13998/variants.htm#ASTED005
Also performed steps mentioned in -> Section 5.3.7 - Step 7: Enable Session Binding on OracleAS Web Cache of the Oracle® Application Server Portal Configuration Guide 10g Release 2 (10.1.2) -- B14037-03.
My current (example names shown only)setup details are as follows:
Reverse Proxy for SSO server (running on internal.oracle.com:7777): proxy.oracle.com:7777
Reverse Proxy for Portal server (running on internal.oracle.com:7778): proxy.oracle.com:7778
With the above steps completed, I can successfully use the http://proxy.oracle.com:7777/pls/orasso for login into SSO without any issues.
Users get authenticated successfully.
I can also use http://proxy.oracle.com:7778/pls/portal for viewing pages on the portal fine . All self referencing links have also been successfully modified to point to proxy.oracle.com:7778.
However, an attempt to login in the portal is not successful. Clicking on the 'Login' link successfully redirects to the SSO login page (http://proxy.oracle.com:7777/<login-page>). However, after successful authentication, the success page fails to show up and the user gets shown the initial login portal home page again.
There are no error messages shown on the screen.But it seems that user session is failing to be initiated/set correctly, as shown by the log file (in $PORTAL_ORACLE_HOME/j2ee/OC4J_Portal/application-deployments/portal/OC4J_Portal_default_island_1/application.log ):
06/11/21 16:49:31 portal: [module=RepositoryServlet, ecid=83928411196,1] Repository Gateway: LWUser: PUBLIC, Cookie: oracle.uix=0^^GMT+10:00;
portal=9.0.3+en-au+us+AUSTRALIA+22BC75924EEAD8A2E040007F010019F7+8DAC5E3559C95F5E0090A6F56FFA58192CB0F437CA57A9102A6394F1EB7FAB5DEE3BFA12C65
91C0C009B6......
06/11/21 16:49:31 portal: [module=RepositoryServlet, ecid=83928411196,1] ERROR: Repository Gateway error: Database Error: ORA=20001 ORA-20001:
Unable to obtain session information from the cookie. Please close your browser and reconnect.
ORA-06512: at "PORTAL.WPG_SESSION", line 149
ORA-06512: at line 22
Any help with this will be appreciated.
Thanks.

Hi Chris,
The begin of the expection stack gives you the reason:
06/11/03 09:13:59 java.sql.SQLException: The method 'setSavepoint' cant be called when a global transaction is active
The reason is, that either the whole global transaction must be commited or rollbacked.
I don't know your actual configuration, but between the methods begin() and commit()/rollback() of the UserTransaction instance, OC4J/OracleAS uses a global transaction (= XA transaction) in your configuration. The state of a global transactions is completely under the control of the application server and several restrictions must be considered. One of them is, that you can't use the method setSavePoint/. E.g. you can't also call the method setAutoCommit(true) in this state, or change the transaction isolation level via setTransactionIsolation(newLevel).
This is NOT a limitation of the OC4J/OracleAS but is true for ALL application servers.
P.S. I can successfully set savepoints and rollback to savepoints in weblogic 9.0This means, that WebLogic 9.0 doesn't use a global transaction in this case.
Because I don't know your configurations (Oracle and WebLogic) I can't say, why the behave different in this situation.
Best,
Manfred

Help: forcing use of proxy in j2me and getting value of gateway IP address

hi everyone,
#1
Has anyone tried forcing the use of a proxy for a midlet? If so how did you do this? I was able to connect to a url through the emulator (ktoolbar) by changing the proxy settings under the edit-->preferences on ktoolbar but I want to make sure that my midlet enforces the use of a proxy to connect to a http url (so that I'll know it still uses the proxy even if it is already using a real java-enabled phone).
somebody suggested to me to take a look at http://java.sun.com/j2me/docs/html/docs/Running.html
I've tried the instructions from the url but it seems like its just the configuration you run when you test it in your emulator. Similar to changing the preferences on ktoolbar to use a proxy.
This is what I did:
I tried changing the config to a working proxy, compiled my midlet, download it into my java-enabled phone and tested if it can connect to a backend server. The result: I was able to get a reply from the backend, however, when I changed the configuration to a non-working proxy, I still get a reply from the backend server. This leads me to believe that the midlet uses the current internet connection profile on the phone.
If this is the case, then that means I am dependent on the phone settings and I could not change/force the midlet to use the current connection with a proxy server I defined. I've searched the internet and have seen sample codes to use proxy servers when connecting to the intenet but they are not for j2me applications (so far). Is this a limitation of j2me? maybe there is really no way to connect using a proxy defined in an application since there is no api for it? Correct me if I'm wrong though. Is there a workaround for this?
#2
Another problem that I am trying to solve is to get the value of the gateway IP address defined on the phone when it connects to the internet. Is this possible? If so, how?
Any ideas will be very much appreciated. thanks to all.
-jess

hi,
does anyone have an answer to this? hope you can help. thanks again.

Can't get Firefox to work properly behind corporate proxy

I am forced to use Firefox behind our corporate proxy and have to continually make exceptions just to get to sites, but even this doesn't always work. I don't know much about certificates, but I know certificates are issued by our organization for each user and device. I've tried exporting the personal certificate from IE and importing it into Firefox without success (couldn't export certificate completely and in correct format for Firefox) and am not sure if I'm even taking the right approach. IE is our only approved browser and I'm sure part of the reason is that proxy settings can be forced via group policy. I've tried adding a certificate exception to Firefox for our proxy, but Firefox is "Unable to obtain identification for this site". Is there any way to get Firefox to function correctly in this environment or somehow get Firefox to work through IE?

I think most proxies work the same way: they generate a fake certificate for the website and present that to your browser so they can decrypt and inspect the traffic between you and the site. It's a hassle having to make exceptions for the individual fake certificates -- it's more efficient to recognize the certificate the proxy uses to ''sign'' the fake certificates as a valid certificate authority.
The trick is identifying that certificate. It might be easiest to do from IE or Chrome, since both use the Windows certificate store (Firefox uses its own). By inspecting the certificate for a secure site and the certificate used to sign it, you may be able to identify and export that certificate (DER or .cer format).
In Firefox, you would import that into the Authorities section of the Certificates dialog:
"3-bar" menu button (or Tools menu) > Options > Advanced > Certificates mini-tab > "View Certificates" button > Authorities mini-tab > "Import..." button
Of course, it probably is safest to verify with your IT that you've found and exported the correct certificate before importing it into Firefox.

Safari, Windows Media Player, and Proxy Servers

I'm trying to watch streaming video of comedy central's Daily Show but its not working. I hit play and I get "-19422" in the play bar. I can't find anything about this anywhere online. I used to be able to do play these videos on my old computer but have had no success. It has to be in Windows Media Player format. I have Windows Media Player and have streamed from other sites. The only thing I have found is that the comedy central page requires a proxy to view streamng video. I have contacted my ISP and they say no such proxy is needed and I should be able to view the page. Am I suppose to guess on the proxy server? The comedy central site says it supports safari and apple computers but it doesn't seem like it. Does anyone else have this problem? Does anyone have any ieas for solving this problem?
PS- This is what comedy central says.... Also my ISP is Time Warner Cable's RoadRunner
"If you are on a Mac, make sure your Player is set to only use the proxy, and disable TCP or UDP checking as this will cause timeouts.
If you choose the Use proxy option and do not know the proxy server name or port number you should use, contact your Internet service provider or network administrator. "
12" PB 1.5Ghz Mac OS X (10.4.3) 768 RAM

Hi,
The videos work fine for me with Safari 2.0.2 and OS X 10.4.3. The section of the help file you quoted appears to be referring to a corporate firewall setup rather than a typical home setup - you shouldn't need to change any of the defaults for Windows Media Player.
A Google search for that error code you received mentions Flip4Mac in a couple of places - do you have that installed?
If so, try disabling it to see if that is the cause of your issues.

Getting through proxy servers

Hello,
Does anyone know if the URLRequest / Loader classes are able
to connect through proxy servers? In other words, does Flash read
the PC's proxy configuration and automatically use it?
Also, I was wondering, if one was to create a Socket and then
connect to a web site...
mySocket.connect("www.mydoman.com", 80);
but the user's PC uses a proxy server to connect to the
Internet, would this
connection succeed or fail?
Thanks for your insight.
Dan

Check the links below out. I think it may help you out some.
http://bugs.adobe.com/jira/browse/FP-519
http://bugs.adobe.com/jira/browse/FP-673

Proxy servers and the "cannot publish" error - v.1.1.2

Using the latest iWeb (1.1.2), attempts to publish my work to my .Mac account resulted in the infamous "publish error." I then came across this KB article:
http://docs.info.apple.com/article.html?artnum=303927
I turned off my proxy access in the Network settings, and voila, publishing was successful. But now, I'm circumventing my much-needed proxy.
It's been suggested in other threads here that proxies aren't a problem if one's iDisk is accessible through it. This is not the case. With the proxy, iDisk access is fine, it's only iWeb publishing that is a problem.
Any way to keep my proxy and still publish with .Mac?

iDisk access and iWeb publishing ARE indeed different activities. They are similar in that they both utilize the WebDAV protocol over Port 80, but they are different in their individual requirements for back and forth communications with the .Mac servers in terms of how soon or in what timeframe they expect to hear confirmation of transfer back from the server.
It is apparent to me that the network timeout threshold for copying something to iDisk is a lot longer than that for publishing through iWeb. In fact, I would say that iWeb has become a lot more stringent with network timeouts ever since it was updated from 1.0 to 1.1.
Anything in between your computer and the .Mac servers contributes to network latency. There are both software and hardware contributions to this latency. Proxy servers, like routers, can be software or hardware based. Software-based latency is most often greater than hardware-based latency.
I would guess that removing any kind of latency "generating" obstacles within your control would likely improve iWeb function and decrease the incidence of publish errors. Some of these obstacles can include background processes, busy LAN activity (like VOIP use or streaming music/video or online gaming), wireless access points, proxy servers, and routers.
On the other hand, I also think that if Apple increased iWeb's network timeout threshold, that most of the publishing errors that people experience could be eliminated.

OS X Tiger and proxy servers

At the office I use my MacBook Pro connected to an exchange server. To do so I've had to use Microsoft Entourage and Firefox. I cannot get any of the Mac software (iTunes, Safari, Mail, etc.) to work with the server.
I've read previous discussions in this forum on the subject but none have helped.
How can it be that Firefox can have the simple "auto-detect proxy settings for this network" that works and the 'ahead of the curve,ease of use leader,' Apple does not?
Can anyone help me to get OSX Tiger working for me at work?

I'm not sure what you mean by vague but allow me to be more specific.
To make Entourage work I had to configure it to use an Exchange Server, an option built in to the application. I find no such option in Apple Mail.
To make Firefox access the internet I just had to choose "auto-detect proxy servers." Now it will work at the office (through the Exchange server) and at home where I'm connected directly (on a cable modem). Safari has no such option.
I understand that Apple uses System Preferences rather than each application having its own settings. I ahven't been able to get any Apple apps to connect to the internet when I'm at work. I have set up a "Location" for when I'm at work. My MBP can access the company printers, though not from every application - - Preview always works.
I see that there is a place for a PAC file url or to configure a proxy server manually. I don't have this information. The company in all PC and isn't all that concerned with helping me configure my Mac.
If there's any other way someone can recommend I'd appreciate it.
On another note, I question why Apple's set up isn't easier. Entourage and Firefox were very simple, in the case of Firefox it was automatic.

ACE best practice for proxy servers

Dear,
I would like to know which is the best practice scenario to load balance proxy servers:
1- Best practice to have transparent proxy or proxy setting on the web browser?
2- for transparent proxy: best practice to use ip wccp or route-map pointing to the ACE VIP?
3- What are the advantages and disadvantages of transparent proxy V/S web browser proxy setting.
Regards,
Pierre

Hi,
Sorry, that seem to be an internal link.
You can also check the below post where a sample config is posted here for transparent cache.
https://supportforums.cisco.com/thread/129106
Best practice :
VIP would be a catch all address.
To optimize the caching predictor hash url is used.
You can also use mac-sticky on interface so proper flow persistence is used within ACE
The mode is transparent so we preserve the destination ip address.
Regards,
Siva

Creating java sockets behind proxy servers.

Hi,
I am trying to create a socket to an external server(i.e. a public server) from behind a proxy firewall, but the socket creation statement throws an IO exception. Can someone please let me know how to create sockets using proxy servers.
TIA
Shishir

I tried using java.net.Proxy for the connection. But the socket to the proxy itself is not getting created. It throws the IllegalArgumentException.
import java.io.*;
import java.net.*;
import java.net.Proxy.Type;
public class Client {
static Socket proxSocket = null;
static PrintWriter out = null;
static BufferedReader in = null;
public static void main(String[] args) throws IOException {
try {
System.out.println("Trying to create socket");
InetSocketAddress proxyadd = new InetSocketAddress(InetAddress.getByName("148.87.19.20"),80);
Proxy ps = new Proxy(Proxy.Type.HTTP,proxyadd);
Socket proxSocket = new Socket(ps);
out = new PrintWriter(proxSocket.getOutputStream(), true);
in = new BufferedReader(new InputStreamReader(
proxSocket.getInputStream()));
} catch (UnknownHostException e) {
System.err.println("Don't know about host: ...");
System.exit(1);
} catch (IOException e) {
System.err.println("Couldn't get I/O for "
+ "the connection to: ...");
System.exit(1);
catch(IllegalArgumentException e)
System.err.println("Unable to describe the proxy.");
System.exit(1);
}

Using corporate Proxy servers

Similar Messages

Maybe you are looking for