Proxy.pac and authentication

Hello everybody.
I got a couple of iMacs (from OS X 10.6 up to 10.8) running in an environment in which there is Windows AD and the Windows clients use an http proxy with NTLM authentication. The config is pulled from the clients by using the DHCP option 252, which contains the URL to the proxy.pac in this form: http://192.168.50.2:8080/proxy.pac
Now my questions...
How do I set things up on the iMacs, so that they pull the proxy.pac and so that it works with Safari, Chrome and Firefox as well?
As there is authentication (NTLM-based) involved: the iMacs are not joined to the AD, but the only user working on each iMac logs in with the same credentials as in the AD (same user/pass).
Any help will be very much appreciated.
Thanks and regards,
Flavio.

WPAD has been reported not to work with AD servers. I suggest you enter the PAC URL in the network settings under Automatic Proxy Configuration.
Push Forward Proxy info within DHCP

Similar Messages

Proxy Pac and Outlook 2010

Hello guys and happy holidays to all .
I have a problem with a client OutLook 2010 and a proxy system .
I explain briefly :
we need to use PEC E-Mail directly with Outlook 2010.
Our reality with security restrictive policies , is used a proxy Pac that blocks any communication to the outside , except for port 443 .all other Port shall be regulated by exceptions from the proxy and firewall.
Reading we marked a solution through proxy socks so that the ports 995 and 465, the standard ports for the pec e-mail, to pass through the starter proxy and are entitled to reach the recipient .
Using the netstat command estimates that Ol seemed to take the settings from Internet Options , and then worked regularly.At the end of the work, we have found that it does not work .
The situation is the following :
Client ol2010 W7 -> proxypac -> rule that points to the proxy socks - > firewall rule -> Internet .
Result: It would seem that Ol not inherit the settings dictated by the internet options .
Any idea to suggest ?
Thank you and happy holidays to all .

WPAD has been reported not to work with AD servers. I suggest you enter the PAC URL in the network settings under Automatic Proxy Configuration.
Push Forward Proxy info within DHCP

Proxy.pac and mobile imanager

If I have internet options pointing to a proxy.pac file, mobile
imanager gives me a 504 gateway time-out. If i set options to direct,
mobile imanager will load. Using wireshark, it appears that imanager
is trying to contact the PC it is running on. Any suggestions for how
to handle this in my proxy.pac file?
Thanks,
Ken
Novell....it does a server good!

On Thu, 11 Mar 2010 18:51:00 GMT, KeN Etter
<kle@_remove_this_msktd.com> wrote:
>If I have internet options pointing to a proxy.pac file, mobile
>imanager gives me a 504 gateway time-out. If i set options to direct,
>mobile imanager will load. Using wireshark, it appears that imanager
>is trying to contact the PC it is running on. Any suggestions for how
>to handle this in my proxy.pac file?
I had also posted about this in the imanager forum. I got a response
there that pointed me in the right direction. I added a line to my
proxy.pac that looks like this:
if (shExpMatch(url, "http://localhost:48080/*")) { return "DIRECT"; }
Now I can run imanager without messing with my internet options.
Ken
Novell....it does a server good!

ITunes Internet Proxy and Authentication Issues

I downloaded iTunes 11.1.3.8 for my windows which is usually connected to my company internet which requires Proxy setting (and Username and Password). My first run of the software showed a box for Username and Password for the authentication but it didn't verify ( maybe based on a mistake and the box dissapeared) I cannot find it to fill in the authentication detail anymore. Any help? Thank you.

Sorry kremik,
Your solution seem to work.
Here is what I did,
Earlier there was no keychain entry for https, so I ignored . When I manually created same proxy keychain with https for both login and system keychains and restarted the machine, it started to work like charm.
Thanks,
Nishok

FF unable to comprehend PROXY.PAC file with IPv4 and IPv6 rules in it

My intranet setup involves users going through Squid proxy on a server discoverable by WPAD. Everything worked well until I introduced IPv6 into the network. Now I want their FFs to go IPv4 proxied and go IPv6 direct. I wrote proxy.pac ( http://pastebin.com/UFwVBzcN ) but FF8 throws "XPCSafeJSObjectWrapper is not defined" error. How can this be done?

Hi guigs2,
thanks for your response. As we only use myIpAddress once within our pac-File and only rely on dnsDomainIs(), ==-Comparisons and shExpMatch() and the sum of all pac-Executions was about 4 seconds compared to 40 seconds overall load time, I do not think that dns resolving is our issue.
I checked the seetings of the configuration you mentioned above. It is set to "false", so the client would try the resolve the dns names. Our admin told, that we do not use socks-Proxies, only http-Proxies.
Regarding sequential load of the contents included on www.bild.de from other web sites, I attached a screenthot.
Please note the red highlights. These show the start time in milliseconds of the pac-execution. I added this as a kind of id which represents a unique identifier together with the URL if the log items are mixed. But they are not, instead they are cleanly ordered by URL (for all 360 pac-file calls).
Moreover in the picture you can see the delay between the end of the last pac-file execution and the next one (blue timestamp in millisonds compared to the red timestamp of the next row saying "entered proxy.pac"). The delay sum up exactly to the 40 seconds the FF took to load the page completely.
Alone the fragment shown represents a delay of 630ms between the pac-file executions. If the contents would be loaded in parallel, there should be no such delay.

Broadcast with Proxy.Pac define into the network Configuration

netbios is activate on desktop,
when a proxy.pac is define, a lot of broadcast are generated by a lot of internet site : google.com/bing.com/yahoo.com
this doesn't happen is i defini the proxy server directly in the firefox configuration (no proxy.pac)
i've tested with a minimalist proxy.pac (just return the proxy server => same problem) thanks you

Raymond Zachary wrote:
I have a G4 Laptop that connects readily to the University Hotspot as well as to my home wifi router. However the College would prefer I use the admin network which uses the same wifi hardware but is secure, unlike the hotspot network. The system is predominantly populated with XP machines and the IT folks have attempted to get me on the admin network but authentication with WPA Personal, WPA Enterprise, WPA2 Personal, and WPA2 Enterprise do not work. When I try to use Airport Assist or diagnostics nothing helps. If I ask Airport to see the "Configuration" file it sends me to an area of Microsoft related files which is an enigma to me.I suspect something in the configuation file, wherever it is, is important and perhaps similar to what XP uses. Does anyone have any information about hooking a Leopard G4 into a windows based network?
You shouldn't have to deal with any such configuration files. Pull down the AirPort menu bar item. In the resulting list you should see the "admin network". Select that, then enter the supplied password. If that doesn't work, check and report exactly what happened.

Proxy.PAC file not working after upgrade to 10.9.2

I have a local proxy.pac file and it was working happily before 10.9.2.
It was loaded under "Network > Proxies > Automatic Proxy Configuration" and effective for all browsers (Chrome, Safari and Firefox).
After upgrade to 10.9.2 seems like it's being totally ignored. I have a CNTLM proxy in my machine and can see the traffic coming in. Looking at logs, no traffic really comes in and all browsers try to access internet directly.
If I set the proxy.pac directly in Firefox, it works but I want all my browsers and application. I want the same functionality as of 10.9.1 and before.

I submitted a bug report to Apple. The problem is present since 10.9.2, now with 10.10 and iOS. I hope they will take this problem seriously.

Lync 2013 client doesn't read proxy.pac file Lync exclusions

Hi all,
I have a very annoying issue where by the Lync 2013 client ignores the proxy.pac file exclusions set below:
(host == "lync.test.domain") || (host == "lyncdiscoverinternal.test.domain") ||
(host == "lyncwacdca.test.domain") ||
(host == "lyncwacdcb.test.domain") ||
(host == "lyncwebintdca.test.domain") ||
(host == "lyncwebintdcb.test.domain")
IE is set to use automatic configuration script of
http://proxy.test.domain:8083/proxy.pac This file can be reached through and IE browser, downloaded and it's syntax read.
If I set my proxy server and exclusions manually within IE9 then they are adhered to. That is Lync 2013 is able to read.
My thinking: that some application may be iterferring with Lync 2013 getting to
http://proxy.test.domain:8083/proxy.pac or reading in the exclusions set within the file.
If I enter https://lync.test.domain into the browser URL search field I can see that it is being sent straight out to the proxy as opposed to bypassing it.
Does anyone have an example of their proxy.pac exclusion set for Lync 2013 just in case my syntax is not looking the best.
Cheers

Update to this issue - solution was to move the proxy exclusions to the top of the proxy.pac
Outcome resulted in Windows WinHTTP processing the the Lync proxy exclusions prior to the Lync.exe firing during logon. I don't believe you would see this in a typical infrastructure. Since initially looking into this issue I have been
able to show through packet traces, large periods of latency in delivery of desktop profile items due to backend profile storage issues.
In eddition this moving the exclusions to the top of the pac file I made use of substrings. I don't believe the use of substrings is any better or worst, but just easier for others to understand what the exclusion allows specifically.
Example of pac exclusion now:
if (url.substring(0,39) == "http://lyncdiscoverinternal.testdomain.") { return "DIRECT"; } //matches 31 characters including last . or period
I entered similar entries for all required exclusions. The result was Lync signing in within 6 seconds as opposed to the 40 second (through the user of legacy SRV records).

Browser need proxy username and password

this code works fine without a proxy, however i can figuer out how to get it to work when behind a proxy, i tried some different things to pass the proxy username and password(the commented out code) but those did work, can anyone help with this? cause im lost as to how to send the proxy credentials to get outside to the net
import java.awt.*;
import java.awt.event.*;
import java.net.*;
import java.io.*;
import javax.swing.*;
import javax.swing.event.*;
public class ReadServerFile extends JFrame {
private JTextField enter;
private JEditorPane contents;
public ReadServerFile(){
super ("Rage");
System.getProperties().put("proxySet","true");
System.getProperties().put("proxyPort","80");
System.getProperties().put("proxyHost","90.8.0.5");
//need to set the username and password
//System.setProperty("http.proxyUser","sservices/proglab30");
//System.setProperty("http.proxyPassword","proglab30");
//Authenticator.setDefault(new Authenticator()
// protected PasswordAuthentication getPasswordAuthentication()
//   return new PasswordAuthentication("proglab30","proglab30".toCharArray());
Container c = getContentPane();
enter = new JTextField("http://www.google.com/");
enter.addActionListener(new ActionListener()
{public void actionPerformed (ActionEvent e)
{getThePage(e.getActionCommand());}});
c.add( enter, BorderLayout.NORTH);
contents = new JEditorPane();
contents.setEditable(false);
contents.addHyperlinkListener(
new HyperlinkListener(){
public void hyperlinkUpdate(HyperlinkEvent e)
    if (e.getEventType()==
    HyperlinkEvent.EventType.ACTIVATED)
    getThePage(e.getURL().toString());}});
c.add(new JScrollPane(contents), BorderLayout.CENTER);
setSize(400,300);
show();
private void getThePage(String location)
setCursor(Cursor.getPredefinedCursor(Cursor.WAIT_CURSOR));
try {
contents.setPage(location);
enter.setText(location);
catch(IOException io)
JOptionPane.showMessageDialog(this,"Error getting URL","Bad URL",JOptionPane.ERROR_MESSAGE);
setCursor(Cursor.getPredefinedCursor(Cursor.DEFAULT_CURSOR));
public static void main (String args[])
ReadServerFile app= new ReadServerFile();
app.addWindowListener(new WindowAdapter(){
    public void windowClosing(WindowEvent e)
      System.exit(0);
}

ray,
Sounds like a permission problem.
Try running these.
ColdFusionDirectory\bin\connectors\Remove_ALL_connectors.bat
ColdFusionDirectory\bin\connectors\IIS_connector.bat
Ken Ford
Adobe Community Expert
Fordwebs, LLC
http://www.fordwebs.com
"RayBees" <[email protected]> wrote in message
news:ek727f$bnq$[email protected]..
> Greetings
>
> I have an interesting problem. When I browse certain
section of my website
> I
> am asked to enter my username and password. When clicked
"cancel" twice
> the
> person is let throught to the page. This seems to be
related to the cfform
> tage. If I remove the tag, I am no longer asked for the
username and
> password.
> This happens in IE 6 and 7, Netscape 7.1 but not in
Firefox 1.5 or Mozilla
> 1.5.
>
> But here is where it gets really interesting, If I log
onto the web
> server,
> every page asks for the username and password. Any
thoughts?
>
> Thanks
> Ray
>
> The Specs
> CFMX 7.02
> Windows 2003
> IIS 6
>

Performance degradation when using proxy.pac file with FF ESR 31

With Bug 923458 many people complained about a performance issue compared to other browsers when a proxy.pac file is used.
The issue initially reported with the bug was resolved for ESR25 according to the statistics, but the general performance issue remained.
I had the same issue with ESR24 and ESR31.3 .
I was testing with www.bild.de.
It took about 40 seconds to load the content completely. Without the proxy.pac file it took about 10 seconds.
I added a few alerts to the pac-File in order to get logs within the console for some analyses.
I found the following:
1. the pac.file is executed for every request, no matter if the host changed or not.
With us the pac-File checks for IP-Adresses and host-names only.
It is not necessary to execute the pac file for each and every request to the same remote host.
So the question is, if we are able to disable this behaviour via about:config?
2. the content referenced by www.bild.de seems to be loaded sequentially and with a delay
The overall time consumed by the proxy.pac file executions was about 4 Seconds compared to the 40 seconds of overall load time.
So I checked the delay between executions of the pac-file and found an overall delay of 40 seconds. I expect that the delay between the calls to the pac-file is caused by the retrieval of contents from the remote host.
So why are the requests executed sequentially?
Hint: Due to the times necessary for executing the pac-file and downloading the contents from the remote host, I would expect the logs generated by my alerts to be mixed (especially if myIpAddress took 1 Second). But the log is cleanly ordered by URL. (see attachment)

Hi guigs2,
thanks for your response. As we only use myIpAddress once within our pac-File and only rely on dnsDomainIs(), ==-Comparisons and shExpMatch() and the sum of all pac-Executions was about 4 seconds compared to 40 seconds overall load time, I do not think that dns resolving is our issue.
I checked the seetings of the configuration you mentioned above. It is set to "false", so the client would try the resolve the dns names. Our admin told, that we do not use socks-Proxies, only http-Proxies.
Regarding sequential load of the contents included on www.bild.de from other web sites, I attached a screenthot.
Please note the red highlights. These show the start time in milliseconds of the pac-execution. I added this as a kind of id which represents a unique identifier together with the URL if the log items are mixed. But they are not, instead they are cleanly ordered by URL (for all 360 pac-file calls).
Moreover in the picture you can see the delay between the end of the last pac-file execution and the next one (blue timestamp in millisonds compared to the red timestamp of the next row saying "entered proxy.pac"). The delay sum up exactly to the 40 seconds the FF took to load the page completely.
Alone the fragment shown represents a delay of 630ms between the pac-file executions. If the contents would be loaded in parallel, there should be no such delay.

Can't Load Pages - Proxy PAC file stored locally

Hi folks,
I was using last Safari 2 version and recently updated to Safari 3.0.4 and 3.1 and then it was impossible to connect using my corporate VPN solution. We use Juniper Network Connect 5.5.0 solution and during connection, this software changes IE7 proxy configuration by editing PAC URL (proto=http://, when connected on corporate network) to a PAC path of a file stored locally in "...\Application Data\Juniper Networks\Network Connect 5.5.0\instantproxy.pac" (proto=file://, when abroad). When I disconnect it, it reverts the changes back to an URL address.
When I found out this, I tried to copy and paste the proxy path stored in IE7 to the Safari address bar and tried to load the file.
IE7:
+file://C:\Documents and Settings\MyName\Application Data\Juniper Networks\Network Connect 5.5.0\instantproxy.pac+
Safari transform the pasted address to:
+file:///C:/Documents%2520and%2520Settings/MyName/Application%2520Data/Juniper%25 20Networks/Network%2520Connect%25205.5.0/instantproxy.pac+
And tries to load but then I have a "Safari Can't find the file." error.
Looking back to Safari transformed address, I saw that there is "%2520" code that represents the spaces. But wait..."%20" isn't the space representative code? I think, we have a small bug here...
So I replaced "%2520" codes by "%20" and tried to load the file. As expected the file loads!!!
I reported this as a bug but I hope that someone can share some experience with Safari and|or Juniper Network Connect in order to find a workaround!!

Well without any explanation from Apple, it appears that this bug was fixed. I tested it again on Safari 5.0.4 and it's working great now.

Safari ignoring proxy username and password

I have an iPad2 and an iPad1. If I enter a username and password in the proxy settings for our company WiFi network, the iPad1 works flawlessly, the iPad2, however, ignores the username and password, and prompts for it onscreen. If I enter the username and password in Safari, it only remembers it for that session.
I have tried in both iOS 4.3 and 4.3.1, no success.

Unfortunately the problem is still present after upgrade ios to 4.3.4 or 4.3.5 . Some ipad2 (and iphone4) ignoring proxy username and password.
Has anyone solved this problem about authentication proxy ?
Thanks.
Alessandro Ghezzi
EDP E Servizi S.p.a.

Multiple proxy.pac configuration (one per SSID) setup with profile (mobileconfig files) problem

Hello,
I configure with the server profile manager a profile with two hidden SSID (WPA2 enterprise and certificat).
one internal with a proxy PAC configuration (automatic/ proxy.pac URL ...)
and the second one external without a proxy PAC configuration.
when I swith from the first one to the second, the Wifi connection is OK,
but the proxy.pac configuration is not set.
I should do a manual proxy configuration (networksetup -setautoproxyurl Wi-Fi http://.....)
I try with lion 10.7.4 and mountain lion 10.8.1 and I experience the same problem.
please could you help to solve this problem?
Regrads.

Hello,
I configure with the server profile manager a profile with two hidden SSID (WPA2 enterprise and certificat).
one internal with a proxy PAC configuration (automatic/ proxy.pac URL ...)
and the second one external without a proxy PAC configuration.
when I swith from the first one to the second, the Wifi connection is OK,
but the proxy.pac configuration is not set.
I should do a manual proxy configuration (networksetup -setautoproxyurl Wi-Fi http://.....)
I try with lion 10.7.4 and mountain lion 10.8.1 and I experience the same problem.
please could you help to solve this problem?
Regrads.

The Scout CC installer stalls. I am behind a proxy that needs authentication. What can I do?

The Scout CC installer stalls at the beginning of the process (trying to connect to the server).
I am behind a proxy that needs authentication.
How can I install Scout CC?
Thanks

Hi cadrian,
Are you on a managed network. If yes then kindly make sure that the following host/port combinations may need to be white-listed when logging in with an Adobe ID to download, install, and activate licensing for applications via a Creative Cloud membership.
    ccmdls.adobe.com:443
    ims-na1.adobelogin.com:443
    ims-prod06.adobelogin.com:443
    na1r.services.adobe.com:443
    prod-rel-ffc-ccm.oobesaas.adobe.com:443
    lm.licenses.adobe.com:443
    ccmdl.adobe.com:80
    swupmf.adobe.com:80
    swupdl.adobe.com:80
Regards,
Rave

Safari 6.0 with proxy.pac

I just upgraded safari to version 6.0 and now my browser is experiencing issues attempting to access the internet when connected to the internet via VPN (Juniper). A proxy pac file is automatically pushed out by the gateway. This worked fine before upgrading to 6.0. Is anyone else experiencing the same issue? How did you resolve it?
I've tried manually entering the proxy information as well but that fails also.

Just add the following to the file com.apple.WebProcess.sb.
Please add it below the Basic system paths and above the FIXME: or System and user preferences:
;; Plugins
(subpath "/Library/Internet Plug-Ins")
(home-subpath "/Library/Internet Plug-Ins")
And it's fixed.
You can find the com.apple.WebProcess.sb here: /System/Library/StagedFrameworks/Safari/WebKit2.framework/WebProcess.app/Conten ts/Resources

Proxy.pac and authentication

Similar Messages

Maybe you are looking for