RESOLVED-pacman through work proxy

i know this is discussed a lot on the forum and i have searched through all the posts on this topic, but can find an answer to my issue.
i have setup the wgetrc file to use my work proxies, as such:
ftp_proxy = ftp://username:[email protected]/
but when i do a pacman -Syu i get an error that says:
resolving ftpproxy.domain.com...ipaddress
connecting to ftpproxy.domain.com|ipaddress|:21...connected
logging in as anonymous
the server refuses login
retrying
if i leave out the username:password, it says the same thing
i have installed another distro that uses synaptic and i can browse to these ftp sites, but even putting the same info in synaptic and/or the apt-get config file, it does the same thing.
am i entering the info in wrong or is there something on the firewall that is blocking wget and apt-get? and what server is refusing the login, my work proxy or the remote ftp site?

Doublecheck the url you need to give to your work proxy.
Usually these are dependent on the proxy, not on the application or OS , so if it is correct the url should work in ANY ftp-client, including windows programs like wsftp pro.
IT support should be able to tell how to configure their preferred ftp-client AND if you have the rights to use ftp transfer.

Similar Messages

Using AIF and pacman through squid proxy cache

moved the article to wiki...
http://wiki.archlinux.org/index.php/Package_Proxy_Cache
was getting pain to read and edit it in this forum ;P
.andre
Last edited by oskude (2010-05-23 14:36:23)

Hi oskude,
I really like the squid-proxy-cache thing, but I got one serious problem:
I always got messages like "TCP_REFRESH_MISS/200 27189867 GET" in access.log, what means that "a newer copy is on the Server" and it does not have it in cache.
I also played around with your configs in squid.conf, I tried even "refresh_pattern \.pkg\.tar\. 262080 100% 262080 ignore-reload override-expire" - but now I got only TCP-REFRESH_MISS in access.log. (before I had them from time to time, nearly random).
I only use the ftp part, not http. (also only using ftp mirror).
A ftp-mirror should never say that there is a newer copy available, because that can not be true. (repackaging etcpp. would increase version number in file name) - so I think I have a problem anywhere in my config.
Do you have any idea where the problem is here?

[Solved] Got pacman to work through proxy

I'm trying to refresh pacman to check for updates, but I get different errors:
[root@lnx pacman]# pacman -Sy
:: Synchronizing package databases...
testing [###############################################################################] 100% 0K 5.5K/s 00:00:00
could not extract kernel26archck-2.6.15.archck5-1/desc: Invalid argument
current [###############################################################################] 100% 0K 0.0K/s 00:00:03
extra [###############################################################################] 100% 0K 0.0K/s 00:00:05
could not extract abiword-plugins-2.4.1-1/depends: Invalid argument
community [###############################################################################] 100% 0K 0.0K/s 00:00:03
could not extract adns-python-1.1.0-1/desc: Invalid argument
db_read: error: /var/lib/pacman/testing/kernel26archck-2.6.15.archck5-1/depends: No such file or directory
error: /var/lib/pacman/current/apache-2.0.55-1/desc: No such file or directory
error: /var/lib/pacman/extra/abiword-plugins-2.4.1-1/desc: No such file or directory
I also tried to install a package, with giving me new errors:
[root@lnx pacman]# pacman -S ethereal
db_read: error: /var/lib/pacman/testing/kernel26archck-2.6.15.archck5-1/depends: No such file or directory
error: /var/lib/pacman/current/apache-2.0.55-1/desc: No such file or directory
error: /var/lib/pacman/extra/abiword-plugins-2.4.1-1/desc: No such file or directory
db_read: error: /var/lib/pacman/testing/kernel26archck-2.6.15.archck5-1/depends: No such file or directory
error: /var/lib/pacman/current/apache-2.0.55-1/desc: No such file or directory
error: /var/lib/pacman/extra/abiword-plugins-2.4.1-1/desc: No such file or directory
error: /var/lib/pacman/current/apache-2.0.55-1/desc: No such file or directory
error: /var/lib/pacman/extra/abiword-plugins-2.4.1-1/desc: No such file or directory
ethereal: not found in sync db
I've tried different mirrors (disabling and enabling mirrors in /etc/pacman.d/{current,extra,community}. Is it just me and my friends computer which gets such errors now? Could it be proxy settings?
My pacman.conf file:
# /etc/pacman.conf
# NOTE: If you find a mirror that is geographically close to you, please
# move it to the top of the server list, so pacman will choose it
# first.
# To re-sort your mirror lists by ping/traceroute results, use the
# /usr/bin/sortmirrors script. It requires the "netselect" package.
# See the pacman manpage for option directives
# GENERAL OPTIONS
[options]
LogFile = /var/log/pacman.log
NoUpgrade = etc/passwd etc/group etc/shadow etc/sudoers
NoUpgrade = etc/fstab etc/raidtab etc/ld.so.conf
NoUpgrade = etc/rc.conf etc/rc.local
NoUpgrade = etc/modprobe.conf etc/modules.conf
NoUpgrade = etc/lilo.conf boot/grub/menu.lst
NoUpgrade = etc/fam/fam.conf
HoldPkg = pacman glibc
ProxyServer = proxy.somedomain.internal:8080
#XferCommand = /usr/bin/wget --passive-ftp -c -O %o %u
# REPOSITORIES
# - can be defined here or included from another file
# - pacman will search repositories in the order defined here.
# - local/custom mirrors can be added here or in separate files
[testing]
Server = ftp://ftp.archlinux.org/testing/os/i686
[current]
# Add your preferred servers here, they will be used first
Include = /etc/pacman.d/current
[extra]
# Add your preferred servers here, they will be used first
Include = /etc/pacman.d/extra
#[unstable]
# Add your preferred servers here, they will be used first
#Include = /etc/pacman.d/unstable
[community]
# Add your preferred servers here, they will be used first
Include = /etc/pacman.d/community
# An example of a custom package repository. See the pacman manpage for
# tips on creating your own repositories.
#[custom]
#Server = file:///home/custompkgs
Any solution on how to fix this?

Moo-Crumpus wrote:
Might be the proxy setting. I can reproduce several errors with a proxy option the kind you have chosen. Never been aware this could do, and in my case, it doesn't. If you have to use the proxy, there is a second way. You might try to handle it with wget, see http://wiki.archlinux.org/index.php/How … tification.
Btw. I had running pacman -Sy without any errors in the last minutes.
Looks better.. I added two proxy lines to /etc/profile and,
/etc/profile:
export http_proxy="http://proxy.somedomain.internal:8080"
export ftp_proxy="http://proxy.somedomain.internal:8080"
/etc/pacman.conf:
XferCommand = /usr/bin/wget -c %u
I got this now:
[root@lnx ~]# pacman -Sy
:: Synchronizing package databases...
--19:06:49-- ftp://ftp.archlinux.org/testing/os/i686/testing.db.tar.gz
=> `testing.db.tar.gz'
Resolving proxy.somedomain.internal... 10.x.y.z
Connecting to proxy.somedomain.internal|10.x.y.z|:8080... connected.
Proxy request sent, awaiting response... 200 OK
Length: unspecified [application/octet-stream]
[ <=> ] 5,609 --.--K/s
19:06:49 (133.73 MB/s) - `testing.db.tar.gz' saved [5609]
--19:06:49-- ftp://ftp.archlinux.org/current/os/i686/current.db.tar.gz
=> `current.db.tar.gz'
Resolving proxy.somedomain.internal... 10.x.y.z
Connecting to proxy.somedomain.internal|10.x.y.z|:8080... connected.
Proxy request sent, awaiting response... 200 OK
Length: unspecified [application/octet-stream]
[ <=> ] 67,841 --.--K/s
19:06:49 (8.55 MB/s) - `current.db.tar.gz' saved [67841]
--19:06:50-- ftp://ftp.archlinux.org/extra/os/i686/extra.db.tar.gz
=> `extra.db.tar.gz'
Resolving proxy.somedomain.internal... 10.x.y.z
Connecting to proxy.somedomain.internal|10.x.y.z|:8080... connected.
Proxy request sent, awaiting response... 200 OK
Length: unspecified [application/octet-stream]
[ <=> ] 239,365 --.--K/s
19:06:50 (9.55 MB/s) - `extra.db.tar.gz' saved [239365]
--19:06:51-- ftp://ftp.archlinux.org/community/os/i686/community.db.tar.gz
=> `community.db.tar.gz'
Resolving proxy.somedomain.internal... 10.x.y.z
Connecting to proxy.somedomain.internal|10.x.y.z|:8080... connected.
Proxy request sent, awaiting response... 200 OK
Length: unspecified [application/octet-stream]
[ <=> ] 49,128 --.--K/s
19:06:51 (7.64 MB/s) - `community.db.tar.gz' saved [49128]
[root@lnx ~]# pacman -Su
Targets: aalib-1.4rc5-4 desktop-file-utils-0.10-2 fam-2.7.0-8 gdm-2.8.0.7-6 glib2-2.10.0-1 gnomebaker-0.5.1-2 pango-1.11.99-2 gtk2-2.8.13-1 kernel26-2.6.15.6-1 libgl-dri-6.4.2-2 links-2.1pre20-1 xorg-server-1.0.1-6 xulrunner-1.8.0.1-2
Total Package Size: 45.7 MB
Proceed with upgrade? [Y/n] n
Does this mean I've got the pacman db updated and ready for update? I did only see file downloads....

Site not working through Transparent Proxy

I have a site that will not load through transparent proxy at one of my buildings.
I have 2 buildings with same BM setup (3.9SP2 on NW6.5 SP7). At one location, I can not resolve a web site when running through transparent proxy.
At the other location, it works just fine.
Also, if I set the proxy to either BM server, the site loads without incident.
As another note, both locations use the same internal DNS server which is located in the building where transparent proxy works for this site.
What am I missing?
Any ideas as to what to try next is greatly appreciated.

On 03/16/2010 03:26 PM, sjdimare wrote:
>
> Thanks for the reply. Both BM servers are using the same proxy.cfg file
> - Craig Johnson's - revision 30.
>
> I ran a lan trace on 2 separate PCs from the different networks.
>
> On the working network, you can see the DNS lookup in the wireshark
> log.
>
> In the network where it is not working, there is no DNS entry even
> showing that it is trying to resolve the domain name. Other sites are
> working just fine and you can see the DNS entry going to our internal
> DNS server.
>
> In the non-working segment, if I hard set the proxy, you see an HTTP
> entry going to the proxy server and resolving the domain in question.
>
> Very strange.
>
> Any new ideas are greatly appreciated.
>
> Steve D.
>
>
Then the pc failing has problem to resolve the entry. When you force the
browser, pc does not resolve anything, just send the url to bm and bm
resolve it. With TP, it is the PC who makes it. It could be that this pc
has already cached this site. But then you should see the reqesut goign
to the bm server. Without seeing the traces ( i do not understand your
there is no DNS entry even
showing that it is trying to resolve the domain name,) i can not comment
in more detail other that you've got a PC or network problem or dns
problem with this particular site, but not a bm.
if trace shows dns query from the pc and no answer, but is really
strange, do the same step but this time take a lan trace on the dns
server to confirm that request is received and what it does with it.

Pacman/wget through ftp proxy with user@site auth(tis fwtk?)

hi
i'm trying to upgrade arch at work.
in debian i had to configure apt like this:
ftp
Proxy "ftp://<user>:<pass>@proxy_ip";
/* Required script to perform proxy login. This example should work
for tisfwtk */
ProxyLogin
"user $(PROXY_USER)";
"pass $(PROXY_PASS)";
"user $(SITE_USER)@$(SITE)";
"pass $(SITE_PASS)";
Timeout "120";
/* Passive mode control, proxy, non-proxy and per-host. Pasv mode
is prefered if possible */
Passive "false";
i exported http_proxy and ftp_proxy env. vars.
and told pacman to use wget (the default XferCommand in pacman.conf)
of course pacman/wget can't get anything through the proxy because of the missing user@site auth.
any chance i can get something similar to work with pacman/wget?
TIA

sry, i forgot to mention. normal http proxy-ing is working. but there is some kind of pop-up virus scanner implemented, i only get the pop-up HTML code when i try to use it with wget.
the ftp proxy is more like a a gateway i guess.

Apache Sling JCR Resource Resolver doesn't work for the anchor tags which is been rendered through j

Certainly I realized that Apache Sling JCR Resource Resolver doesn't work for the anchor tags which is been rendered through jquery or javascript.
e.g.
In Felix Console , in Apache Sling JCR Resource Resolver configuration I have added following mapping.
/content/myproject/-/
So If any anchor tag is there like <a href="/content/myproject/en.html"> click me </a> then it will be mapped to "/en.html" automatically.
But the problem is there in following scenario.
I have an anchor tag as follows.
<a href="#" id="test"> click here </a>
And I am assigning the href to anchor through JQUERY.
<script>
$("#test").attr("href","/content/myproject/en.html");
</script>
Ideally this should have been mapped to "/en.html".
But it is not mapping to "/en.html". It still shows "/content/myproject/en.html".
How to resolve this.
Thanks,
Sai

In a servlet you have access to the resourceResolver so if you know which attributes contain links then it's relatively easy to apply resourceResolver.map to those links.
Your challenge is clearly how do you know which attributes are links and which aren't. Its is the same challenge that makes parsing the response and rewriting it on the way out difficult - the JSON doesn't have any semantic meaning so how do identify which attributes require rewriting. There really is no good answer ot that question in my experience - all the options have down sides.
Create some convention - all attributes matching this pattern X get mapped before being converted to JSON (could be attributes whose name ends in link, or it could a convention applied to the value of the attribute - if the attribute is a string that starts with /content apply the resource resolver mapping. In this case you have train your developers to follow this convention which is the down side.
Create some configurable list of attribute names that require mapping. This is brittle, requires training and is easy to break.
Implement a client side version of the resource resolver mapping. It wouldn't be as full proof as server side mapping (because that takes into account but you could make it work for simple logic like stripping of /content/site/en. If ou are just trying to solve the simple version of this issue - stripping off the top of the repository path this might be your best option.
Not worry about it and set up Apache 301 redirects that catch any long URLs and redirect them to short URLs (so configure apache to look for any URL matching /content/site/en and strip off /content/site/en and do a 301 redirect to the shortened URL. You end up with a lot of extra HTTP request because of all the 301s but it would work (I wouldn't recommend this option - but it is possible).

Does iTunes Producer work through a proxy?

I am trying to get iTunes Producer to work through our corporate proxies. I have opened up TCP 33001 and TCP 44001 like the documentation stated. From the proxy servers I am able to connect to these TCP ports as well as the required UDP ports that are listed in the documentation. However, as soon as I try to upload a book in iTunes Producer, it get an error.
Does iTunes Producer work in a corporate environment that uses a proxy? Or is it like APNS that will not work through a proxy?

It seems that your office network is blocking the app. Maybe the old releases used a port not closed by your firewall but in the newer releases it uses another port which it is closed. That maybe explains the reason you cannot connect. You should contact your network administrator.

Since installation of last 4.0b12 version, I'm unable to connect to any https site through a proxy. Connection works if no proxy is involved, with proxy I receive a message like "proxy refuses the connection". Thank you for your answer

I'm connected to a customer's network and I have to use a proxy.
I correctly authenticate myself to the proxy and I try to access https://mail.google.com.
I receive a message that the proxy refuses the connection.
I noticed that this happens with all the https sites.
If I connect with my mobile internet key without proxy, I'm able to connect: the combination of proxy and https is failing.
Other computers on the same network with different browsers can connect to https through the proxy.

I'm working with the Firefox development team on this one. As far as I can tell, they seem to think that there are 2-3 different problems with the same/very similar symptoms, all involving proxies. They think they've fixed them all for RC1.
Right now, it looks like we just want people to test an early build.
You can get that here:
[http://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/2011-03-03-12-mozilla-central/firefox-4.0b13pre.en-US.win32.installer.exe]
Install that somewhere (not in your current install directory), quit all open Firefox instances and try it. Let me know if it works.

Is there any way to get Siri to work via wifi through a proxy?

I work in a school that has wifi with Internet accessible through a proxy. With my previous iPhone 3GS, I was able to get online, access the app store.. In fact, do everything on wifi except receive and send email. Now, with the 4s, I have to add Siri to that list. It works fine everywhere else (on 3G or wifi) but no joy at work. Any ideas? I do have access to the school server so if there's a sneaky server side change to make, I can :)

We were having the same problem here at the School I work at. By looking at some traffic logs and doing some internal testing, it appears Siri attempts to make a direct connection to the outside network using HTTPS (port 443), without using any of the proxy settings you may have configured on the Wifi network.
We've reported it as a bug to Apple but haven't heard anything back yet.
To get around it in the meantime you'll have to punch a hole in your firewall to allow Siri traffic through.
Currently Siri appears to contact IP address 17.174.4.14 over port 443. The IP address may change in the future, but that will at least get you up and going for now. We went ahead and opened the entire 17.174.4.0/24 network, as the entire block of addressess is owned by Apple.
Again, there is no gaurentee that this will not change in the future and break again.
Good luck!

WebDynpro applications not working through Reverse Proxy

Hi All,
I have configured a Reverse Proxy using apache 2.2.4 and when i access my Portal (NW04s EP 7.0 SPS08) through reverse proxy i'm not able to display any webdynpro application (e.g. Identity Management). I'm getting Page can not be displayed. I think reverse proxy is not able to convert the request into absolute URLs.
If someone had the same problem,please let me know.
Regards
Vaib

I resolved the problem on my own by adding webdynpro directive to the httpd.conf.
Thanx
Vaib

How to use Axis to access a web service through Authentication proxy

Using axis access internat web service is success,but access a web service through Authentication proxy is failure.But other java classes connect through a proxy to the internet which works very well:
please help me ,thank you!!!
import org.apache.axis.client.Call;
import org.apache.axis.client.Service;
import javax.xml.namespace.QName;
//this is my access webservice faliure   codes
public class TestClient
   public static void main(String [] args) {
       try {
            System.getProperties().setProperty("http.proxySet", "true");
            System.getProperties().setProperty("http.proxyHost","proxy.com");
            System.getProperties().setProperty("http.proxyPort", "8080");
            System.getProperties().setProperty("http.proxyUser", "username");
            System.getProperties().setProperty("http.proxyPassword","password");
           String endpoint =
                    "http://nagoya.apache.org:5049/axis/services/echo";
           Service service = new Service();
           Call     call    = (Call) service.createCall();
           call.setTargetEndpointAddress( new java.net.URL(endpoint) );
           call.setOperationName(new QName("http://soapinterop.org/", "echoString") );
           String ret = (String) call.invoke( new Object[] { "Hello!" } );
           System.out.println("Sent 'Hello!', got '" + ret + "'");
       } catch (Exception e) {
           System.err.println(e.toString());
   }I get an "(407)Proxy authorization required" error?

I am also looking for a solution. Does any one know how to do through code instead of jvm settings?
Thanks in advance!

Mobile me/icloud find my iphone through a proxy server?

Hi All,
I'm not sure if this is the right place to post this so if it's not please let me know where is best.
I have a fleet of 600 ipads who are forced to run through a proxy server via a 3g connection. Up untill last week I could trace all these iPads via mobile me or icloud and use the find my iPhone feature. In this last week I seem to have lost this ability. All iPads are coming up with "no location". Mixture of iOS5 and variations of iOS4
If I turn off the proxy on the iPad I can trace the iPad.
me.com, apple.com amd icloud.com are all allowed through the proxy.
I cannot see anoy other banned traffic with a web address I can unblock.
I really just need to know what else I need to allow out via the proxy to get this working again? I'm guessing something has changed in Apple world as the proxy hasn't changed.
Thanks

Hi - did you have any luck with this? I have a similar problem, but only on a private APN through our proxy. I've managed to allow all the URLs to get the iCloud account registered for each device via the APN/proxy, but they do not appear on my icloud.com device view. If I remove the APN, therefore our network proxy is not used, it works fine.
Thanks

Cannot call pacman through schroot

I have a 32-bit chroot setup which I use for building i686 packages. Ever since upgrading to pacman4, I am unable to call pacman through the shcroot command:
Example:
$ schroot -p -- sudo pacman -S libnetfilter_queue
resolving dependencies...
looking for inter-conflicts...
Targets (2): libnfnetlink-1.0.0-2 libnetfilter_queue-1.0.0-1
Total Installed Size: 0.14 MiB
Proceed with installation? [Y/n]
(2/2) checking package integrity [#####################################] 100%
error: GPGME error: Inappropriate ioctl for device
error: failed to commit transaction (invalid or corrupted package)
Errors occurred, no packages were upgraded.
I can use pacman as expected if do not try through the schroot command, but if I manually chroot into the chroot.
Example:
$ sudo chroot /opt/arch32 /bin/bash
# pacman -S libnetfilter_queue
resolving dependencies...
looking for inter-conflicts...
Targets (2): libnfnetlink-1.0.0-2 libnetfilter_queue-1.0.0-1
Total Installed Size: 0.14 MiB
Proceed with installation? [Y/n]
(2/2) checking package integrity [#####################################] 100%
(2/2) loading package files [#####################################] 100%
(2/2) checking for file conflicts [#####################################] 100%
(1/2) installing libnfnetlink [#####################################] 100%
(2/2) installing libnetfilter_queue [#####################################] 100%
Thoughts?

falconindy wrote:ttyname_r calls are failing because of the way you've mounted /dev/pts. Do not mount it with the "newinstance" option. Better yet, just bind mount it over from the real root. We already solved this in devtools.
Here is the relevant bit of /etc/rc.d/arch32 initscript which setups-up my chroot for me. I'm confused what you mean by the "newinstance" option. Can you take a peek and educate me?
dirs=(/dev /dev/pts /tmp /home)
case $1 in
start)
stat_busy "Starting Arch32 chroot"
[[ ! -f /opt/arch32/.arch32 ]] && mount LABEL="arch32" /opt/arch32
for d in "${dirs[@]}"; do
mount -o bind $d /opt/arch32$d
done
mount -t proc none /opt/arch32/proc
mount -t sysfs none /opt/arch32/sys
linux32 chroot /opt/arch32 sh -c "/etc/rc.d/distccd start" || return 1
add_daemon arch32
stat_done
Thanks!
Last edited by graysky (2011-11-18 19:11:45)

How to manage VM servers in DMZ through NAT proxy?

Dear all,
We need to build some VM servers in DMZ network. And the OVM Manager is located in trust zone (behind DMZ). OVM manager can connect to the DMZ vm servers through NAT proxy. But, there are some errors after I have added the servers.
In fact, there is no management network for OVM manager. So, I seem no workaround.
Have you any idea about this deployment?
Mike

mtktang wrote:
We need to build some VM servers in DMZ network. And the OVM Manager is located in trust zone (behind DMZ). OVM manager can connect to the DMZ vm servers through NAT proxy. But, there are some errors after I have added the servers. We do not support Oracle VM Server via NAT, because the Servers get the IP address of the Manager to connect to (and not the NAT'd address). So the API python binding download and notifications will fail. It is very unlikely that this would work.

SSH through http proxy

Hi,
Currently I have to pass all traffic through a http proxy that only lets ports 25, 80 and 443 through.
I'd like to ssh to a machine in our office outside of the above network and using Putty on Windows I can set the proxy details with username and password and it works fine as I have set my listing machine to use port 443.
How can I achieve the same access through the proxy with ssh on Mac? I have tested that ssh with port 443 works when not using the proxy so it seems the proxy is the issue.

You could use Corkscrew
<http://wiki.kartbuilding.net/index.php/Corkscrew-_ssh_overhttps>
You might also look into Hamachi (VPN)
<http://www.macupdate.com/app/mac/36286/logmein-hamachi>
Message was edited by: BobHarris

RESOLVED-pacman through work proxy

Similar Messages

Maybe you are looking for