Proxy.pac and mobile imanager

If I have internet options pointing to a proxy.pac file, mobile
imanager gives me a 504 gateway time-out. If i set options to direct,
mobile imanager will load. Using wireshark, it appears that imanager
is trying to contact the PC it is running on. Any suggestions for how
to handle this in my proxy.pac file?
Thanks,
Ken
Novell....it does a server good!

On Thu, 11 Mar 2010 18:51:00 GMT, KeN Etter
<kle@_remove_this_msktd.com> wrote:
>If I have internet options pointing to a proxy.pac file, mobile
>imanager gives me a 504 gateway time-out. If i set options to direct,
>mobile imanager will load. Using wireshark, it appears that imanager
>is trying to contact the PC it is running on. Any suggestions for how
>to handle this in my proxy.pac file?
I had also posted about this in the imanager forum. I got a response
there that pointed me in the right direction. I added a line to my
proxy.pac that looks like this:
if (shExpMatch(url, "http://localhost:48080/*")) { return "DIRECT"; }
Now I can run imanager without messing with my internet options.
Ken
Novell....it does a server good!

Similar Messages

Proxy.pac and authentication

Hello everybody.
I got a couple of iMacs (from OS X 10.6 up to 10.8) running in an environment in which there is Windows AD and the Windows clients use an http proxy with NTLM authentication. The config is pulled from the clients by using the DHCP option 252, which contains the URL to the proxy.pac in this form: http://192.168.50.2:8080/proxy.pac
Now my questions...
How do I set things up on the iMacs, so that they pull the proxy.pac and so that it works with Safari, Chrome and Firefox as well?
As there is authentication (NTLM-based) involved: the iMacs are not joined to the AD, but the only user working on each iMac logs in with the same credentials as in the AD (same user/pass).
Any help will be very much appreciated.
Thanks and regards,
Flavio.

WPAD has been reported not to work with AD servers. I suggest you enter the PAC URL in the network settings under Automatic Proxy Configuration.
Push Forward Proxy info within DHCP

Proxy Pac and Outlook 2010

Hello guys and happy holidays to all .
I have a problem with a client OutLook 2010 and a proxy system .
I explain briefly :
we need to use PEC E-Mail directly with Outlook 2010.
Our reality with security restrictive policies , is used a proxy Pac that blocks any communication to the outside , except for port 443 .all other Port shall be regulated by exceptions from the proxy and firewall.
Reading we marked a solution through proxy socks so that the ports 995 and 465, the standard ports for the pec e-mail, to pass through the starter proxy and are entitled to reach the recipient .
Using the netstat command estimates that Ol seemed to take the settings from Internet Options , and then worked regularly.At the end of the work, we have found that it does not work .
The situation is the following :
Client ol2010 W7 -> proxypac -> rule that points to the proxy socks - > firewall rule -> Internet .
Result: It would seem that Ol not inherit the settings dictated by the internet options .
Any idea to suggest ?
Thank you and happy holidays to all .

WPAD has been reported not to work with AD servers. I suggest you enter the PAC URL in the network settings under Automatic Proxy Configuration.
Push Forward Proxy info within DHCP

FF unable to comprehend PROXY.PAC file with IPv4 and IPv6 rules in it

My intranet setup involves users going through Squid proxy on a server discoverable by WPAD. Everything worked well until I introduced IPv6 into the network. Now I want their FFs to go IPv4 proxied and go IPv6 direct. I wrote proxy.pac ( http://pastebin.com/UFwVBzcN ) but FF8 throws "XPCSafeJSObjectWrapper is not defined" error. How can this be done?

Hi guigs2,
thanks for your response. As we only use myIpAddress once within our pac-File and only rely on dnsDomainIs(), ==-Comparisons and shExpMatch() and the sum of all pac-Executions was about 4 seconds compared to 40 seconds overall load time, I do not think that dns resolving is our issue.
I checked the seetings of the configuration you mentioned above. It is set to "false", so the client would try the resolve the dns names. Our admin told, that we do not use socks-Proxies, only http-Proxies.
Regarding sequential load of the contents included on www.bild.de from other web sites, I attached a screenthot.
Please note the red highlights. These show the start time in milliseconds of the pac-execution. I added this as a kind of id which represents a unique identifier together with the URL if the log items are mixed. But they are not, instead they are cleanly ordered by URL (for all 360 pac-file calls).
Moreover in the picture you can see the delay between the end of the last pac-file execution and the next one (blue timestamp in millisonds compared to the red timestamp of the next row saying "entered proxy.pac"). The delay sum up exactly to the 40 seconds the FF took to load the page completely.
Alone the fragment shown represents a delay of 630ms between the pac-file executions. If the contents would be loaded in parallel, there should be no such delay.

Proxy.PAC file not working after upgrade to 10.9.2

I have a local proxy.pac file and it was working happily before 10.9.2.
It was loaded under "Network > Proxies > Automatic Proxy Configuration" and effective for all browsers (Chrome, Safari and Firefox).
After upgrade to 10.9.2 seems like it's being totally ignored. I have a CNTLM proxy in my machine and can see the traffic coming in. Looking at logs, no traffic really comes in and all browsers try to access internet directly.
If I set the proxy.pac directly in Firefox, it works but I want all my browsers and application. I want the same functionality as of 10.9.1 and before.

I submitted a bug report to Apple. The problem is present since 10.9.2, now with 10.10 and iOS. I hope they will take this problem seriously.

Lync 2013 client doesn't read proxy.pac file Lync exclusions

Hi all,
I have a very annoying issue where by the Lync 2013 client ignores the proxy.pac file exclusions set below:
(host == "lync.test.domain") || (host == "lyncdiscoverinternal.test.domain") ||
(host == "lyncwacdca.test.domain") ||
(host == "lyncwacdcb.test.domain") ||
(host == "lyncwebintdca.test.domain") ||
(host == "lyncwebintdcb.test.domain")
IE is set to use automatic configuration script of
http://proxy.test.domain:8083/proxy.pac This file can be reached through and IE browser, downloaded and it's syntax read.
If I set my proxy server and exclusions manually within IE9 then they are adhered to. That is Lync 2013 is able to read.
My thinking: that some application may be iterferring with Lync 2013 getting to
http://proxy.test.domain:8083/proxy.pac or reading in the exclusions set within the file.
If I enter https://lync.test.domain into the browser URL search field I can see that it is being sent straight out to the proxy as opposed to bypassing it.
Does anyone have an example of their proxy.pac exclusion set for Lync 2013 just in case my syntax is not looking the best.
Cheers

Update to this issue - solution was to move the proxy exclusions to the top of the proxy.pac
Outcome resulted in Windows WinHTTP processing the the Lync proxy exclusions prior to the Lync.exe firing during logon. I don't believe you would see this in a typical infrastructure. Since initially looking into this issue I have been
able to show through packet traces, large periods of latency in delivery of desktop profile items due to backend profile storage issues.
In eddition this moving the exclusions to the top of the pac file I made use of substrings. I don't believe the use of substrings is any better or worst, but just easier for others to understand what the exclusion allows specifically.
Example of pac exclusion now:
if (url.substring(0,39) == "http://lyncdiscoverinternal.testdomain.") { return "DIRECT"; } //matches 31 characters including last . or period
I entered similar entries for all required exclusions. The result was Lync signing in within 6 seconds as opposed to the 40 second (through the user of legacy SRV records).

Performance degradation when using proxy.pac file with FF ESR 31

With Bug 923458 many people complained about a performance issue compared to other browsers when a proxy.pac file is used.
The issue initially reported with the bug was resolved for ESR25 according to the statistics, but the general performance issue remained.
I had the same issue with ESR24 and ESR31.3 .
I was testing with www.bild.de.
It took about 40 seconds to load the content completely. Without the proxy.pac file it took about 10 seconds.
I added a few alerts to the pac-File in order to get logs within the console for some analyses.
I found the following:
1. the pac.file is executed for every request, no matter if the host changed or not.
With us the pac-File checks for IP-Adresses and host-names only.
It is not necessary to execute the pac file for each and every request to the same remote host.
So the question is, if we are able to disable this behaviour via about:config?
2. the content referenced by www.bild.de seems to be loaded sequentially and with a delay
The overall time consumed by the proxy.pac file executions was about 4 Seconds compared to the 40 seconds of overall load time.
So I checked the delay between executions of the pac-file and found an overall delay of 40 seconds. I expect that the delay between the calls to the pac-file is caused by the retrieval of contents from the remote host.
So why are the requests executed sequentially?
Hint: Due to the times necessary for executing the pac-file and downloading the contents from the remote host, I would expect the logs generated by my alerts to be mixed (especially if myIpAddress took 1 Second). But the log is cleanly ordered by URL. (see attachment)

Hi guigs2,
thanks for your response. As we only use myIpAddress once within our pac-File and only rely on dnsDomainIs(), ==-Comparisons and shExpMatch() and the sum of all pac-Executions was about 4 seconds compared to 40 seconds overall load time, I do not think that dns resolving is our issue.
I checked the seetings of the configuration you mentioned above. It is set to "false", so the client would try the resolve the dns names. Our admin told, that we do not use socks-Proxies, only http-Proxies.
Regarding sequential load of the contents included on www.bild.de from other web sites, I attached a screenthot.
Please note the red highlights. These show the start time in milliseconds of the pac-execution. I added this as a kind of id which represents a unique identifier together with the URL if the log items are mixed. But they are not, instead they are cleanly ordered by URL (for all 360 pac-file calls).
Moreover in the picture you can see the delay between the end of the last pac-file execution and the next one (blue timestamp in millisonds compared to the red timestamp of the next row saying "entered proxy.pac"). The delay sum up exactly to the 40 seconds the FF took to load the page completely.
Alone the fragment shown represents a delay of 630ms between the pac-file executions. If the contents would be loaded in parallel, there should be no such delay.

BO MOBI with BOE and Mobile server on two separate servers

Hi Experts,
We need to set up a BO MOBI with BOE and Mobile server on two separate servers.
In such a configuration, how does the two servers communicate?
What should be the VAS and VMS server configurations? especially the external hostnames in the files?
We are looking for a non Blackberry(proxy) deployment.
We have installed the software,however the windows services of Authserver and the Job servers are not available in the mobile server instance
Any help would be highly appreciated.

Hi Experts,
We need to set up a BO MOBI with BOE and Mobile server on two separate servers.
In such a configuration, how does the two servers communicate?
What should be the VAS and VMS server configurations? especially the external hostnames in the files?
We are looking for a non Blackberry(proxy) deployment.
We have installed the software,however the windows services of Authserver and the Job servers are not available in the mobile server instance
Any help would be highly appreciated.

MOBI with BOE and mobile server on different servers

Hi Experts,
We need to set up a BO MOBI with BOE and Mobile server on two separate servers.
In such a configuration, how does the two servers communicate?
What should be the VAS and VMS server configurations? especially the external hostnames in the files?
We are looking for a non Blackberry(proxy) deployment.
We have installed the software,however the windows services of Authserver and the Job servers are not available in the mobile server instance
Any help would be highly appreciated.

I figured it out. I had to re-run the schconfig utility on UNIX and reconfigured the server from localhost:9710 to the actual server name.

Can't Load Pages - Proxy PAC file stored locally

Hi folks,
I was using last Safari 2 version and recently updated to Safari 3.0.4 and 3.1 and then it was impossible to connect using my corporate VPN solution. We use Juniper Network Connect 5.5.0 solution and during connection, this software changes IE7 proxy configuration by editing PAC URL (proto=http://, when connected on corporate network) to a PAC path of a file stored locally in "...\Application Data\Juniper Networks\Network Connect 5.5.0\instantproxy.pac" (proto=file://, when abroad). When I disconnect it, it reverts the changes back to an URL address.
When I found out this, I tried to copy and paste the proxy path stored in IE7 to the Safari address bar and tried to load the file.
IE7:
+file://C:\Documents and Settings\MyName\Application Data\Juniper Networks\Network Connect 5.5.0\instantproxy.pac+
Safari transform the pasted address to:
+file:///C:/Documents%2520and%2520Settings/MyName/Application%2520Data/Juniper%25 20Networks/Network%2520Connect%25205.5.0/instantproxy.pac+
And tries to load but then I have a "Safari Can't find the file." error.
Looking back to Safari transformed address, I saw that there is "%2520" code that represents the spaces. But wait..."%20" isn't the space representative code? I think, we have a small bug here...
So I replaced "%2520" codes by "%20" and tried to load the file. As expected the file loads!!!
I reported this as a bug but I hope that someone can share some experience with Safari and|or Juniper Network Connect in order to find a workaround!!

Well without any explanation from Apple, it appears that this bug was fixed. I tested it again on Safari 5.0.4 and it's working great now.

Multiple proxy.pac configuration (one per SSID) setup with profile (mobileconfig files) problem

Hello,
I configure with the server profile manager a profile with two hidden SSID (WPA2 enterprise and certificat).
one internal with a proxy PAC configuration (automatic/ proxy.pac URL ...)
and the second one external without a proxy PAC configuration.
when I swith from the first one to the second, the Wifi connection is OK,
but the proxy.pac configuration is not set.
I should do a manual proxy configuration (networksetup -setautoproxyurl Wi-Fi http://.....)
I try with lion 10.7.4 and mountain lion 10.8.1 and I experience the same problem.
please could you help to solve this problem?
Regrads.

Hello,
I configure with the server profile manager a profile with two hidden SSID (WPA2 enterprise and certificat).
one internal with a proxy PAC configuration (automatic/ proxy.pac URL ...)
and the second one external without a proxy PAC configuration.
when I swith from the first one to the second, the Wifi connection is OK,
but the proxy.pac configuration is not set.
I should do a manual proxy configuration (networksetup -setautoproxyurl Wi-Fi http://.....)
I try with lion 10.7.4 and mountain lion 10.8.1 and I experience the same problem.
please could you help to solve this problem?
Regrads.

Safari 6.0 with proxy.pac

I just upgraded safari to version 6.0 and now my browser is experiencing issues attempting to access the internet when connected to the internet via VPN (Juniper). A proxy pac file is automatically pushed out by the gateway. This worked fine before upgrading to 6.0. Is anyone else experiencing the same issue? How did you resolve it?
I've tried manually entering the proxy information as well but that fails also.

Just add the following to the file com.apple.WebProcess.sb.
Please add it below the Basic system paths and above the FIXME: or System and user preferences:
;; Plugins
(subpath "/Library/Internet Plug-Ins")
(home-subpath "/Library/Internet Plug-Ins")
And it's fixed.
You can find the com.apple.WebProcess.sb here: /System/Library/StagedFrameworks/Safari/WebKit2.framework/WebProcess.app/Conten ts/Resources

Connecting by proxy.pac

I have to connect using proxy of type "domain.com:7777/proxy.pac".
How can I do this from Java?

Can you please explain a little more as what you mean by you want to connect to proxy. Do you mean you want to grab a URL via a proxy? It depends on what you want to do, there are many types of proxies, HTTP, FTP and so on. I wrote I piece of software a while back that grabs urls by using anonymous proxies. If that is what you want to do let me know and I'll dig it out

Proxy.pac details

Hi folks,
If I wanted to make IE redownload the proxy.pac, what do I need to do? Is there a flag that can be set to expire it? Or Is it a case if deleting the cache?
Thanks.

Hi,
This proxy.pac file should be in Temporary Internet Files folder, once it downloaded from the network.
Press Ctrl + Shift + Delete, open Delete Browsing History
Or locate to C:\Users\UserName\AppData\Local\Microsoft\Windows\Temporary Internet Files
And then delete this proxy.pac cache
Following this, reopen IE, it will re-download from network.
Andy Altmann
TechNet Community Support

Proxy.pac Help

This Isn't really a border manager issue as we don't even have border manager but I figured someone here might be able to help
I am using the following proxy.PAC file
Code:
function FindProxyForURL(url, host)
// returned variable strings
var n_proxy = "DIRECT";
var y_proxy = "PROXY 10.1.2.10:8080";
if (shExpMatch(url, "http://10.1.2.8:7880/*")) { return n_proxy; }
// Give Every other site normal proxy settings
return y_proxy; }
however I think I must be doing something wrong as it is still attempting to use the proxy when loading the applet
The url that initially loads the applet is
Code:
http://10.1.2.8:7880/powerschool-gradebook/launchGradeBook.jnlp?userid=xxxxxx&sessionid=667886&credentials=xxxxxxxxxxxxxxxxxxx&schoolnumber=1&secure=false
This is the error code i receive.. how do i need to change this to make it force direct connection when opening the applet?
Code:
com.pearson.powerschool.sdk.common.SDKRemoteException:java.net.SocketException: Unknown proxy type : HTTP
at com.pearson.powerschool.sdk.system.HttpInvokeInvocationHandler.invoke(HttpInvokeInvocationHandler.java:59)
at $Proxy1.getSchools(Unknown Source)
at com.pearson.powerschool.gradebook.Main.login(Main.java:610)
at com.pearson.powerschool.gradebook.Main.initUserLogin(Main.java:190)
at com.pearson.powerschool.gradebook.Main.startUI(Main.java:111)
at com.pearson.powerschool.gradebook.Main.main(Main.java:369)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at com.sun.javaws.Launcher.executeApplication(Unknown Source)
at com.sun.javaws.Launcher.executeMainClass(Unknown Source)
at com.sun.javaws.Launcher.doLaunchApp(Unknown Source)
at com.sun.javaws.Launcher.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)
Caused By:java.net.SocketException:Unknown proxy type : HTTP
at java.net.SocksSocketImpl.connect(Unknown Source)
at java.net.Socket.connect(Unknown Source)
at sun.reflect.GeneratedMethodAccessor10.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at org.apache.commons.httpclient.protocol.ReflectionSocketFactory.createSocket(ReflectionSocketFactory.java:139)
at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:124)
at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:706)
at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1321)
at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:386)
at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:170)
at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:396)
at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:324)
at org.meno.remoting.httpinvoke.client.HTTPInvokeProxyFactory.invoke(HTTPInvokeProxyFactory.java:229)
at org.meno.remoting.httpinvoke.client.HTTPInvokeProxyFactory.access$000(HTTPInvokeProxyFactory.java:42)
at org.meno.remoting.httpinvoke.client.HTTPInvokeProxyFactory$1.invoke(HTTPInvokeProxyFactory.java:151)
at $Proxy1.getSchools(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at com.pearson.powerschool.sdk.system.HttpInvokeInvocationHandler.invoke(HttpInvokeInvocationHandler.java:48)
at $Proxy1.getSchools(Unknown Source)
at com.pearson.powerschool.gradebook.Main.login(Main.java:610)
at com.pearson.powerschool.gradebook.Main.initUserLogin(Main.java:190)
at com.pearson.powerschool.gradebook.Main.startUI(Main.java:111)
at com.pearson.powerschool.gradebook.Main.main(Main.java:369)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at com.sun.javaws.Launcher.executeApplication(Unknown Source)
at com.sun.javaws.Launcher.executeMainClass(Unknown Source)
at com.sun.javaws.Launcher.doLaunchApp(Unknown Source)
at com.sun.javaws.Launcher.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)

If I set the .pac file in the java management console it works (but not when I set it in IE) however the settings do not stick after user logout.. it reverts back to use internet settings.. I dont believe java connection settings are controlled via GPO are they? And if not is there a config file on the client pcs that I can set? or some way I can set the java connection settings to always use a script and not revert back?

Proxy.pac and mobile imanager

Similar Messages

Maybe you are looking for