Webstart with ntlm proxy?

I remember in the past that webstart could not be used with proxies that use ntlm authentication.
Has this been fixed?
On a semi-related note, does webstart past to the application pass any cookies from the browser to the application?
Thanks.

>
On a semi-related note, does webstart past to the
application pass any cookies from the browser to the
application?No - webstart is invoked as a helper application without any access to the browsers cokie-store.
I think there are enhancements for java.net in 1.5 that will allow HttpURLConnection to access the browsers cokie store (at least for some browsers).
/Dietz

Similar Messages

Safari on Mavericks with NTLM Proxy

Hello,
we use a Bluecoat Proxy in our Company with NTLM Authentication.
I login to the Mac (10.9.2) with my AD Account.
The proxy is configured with hostname and port.
Surfing in Firefox and Chrome works without a problem.
If i sniff the traffic for this two browsers i can see that
both browsers use NTMLSSP for authentication to the proxy.
If i try to use safari i does not work.
If i want to open a website the behaviour is always the same.
The blue bar in the address field stops at specific point but then nothing happens.
Even after half an hour i do not get an error message or the website.
There ist just nothing happening anymore.
Has anybody an idea what the problem could be?
Thanks

I have this same issue, and I have posted requesting insight on it here as well. But this has been to no avail.
It seems the proxy breaks only on networked accounts.
If you use a local account the proxy (in my experience) works fine if set up normally as you would.
-----TEMPORARY WORKAROUND-----
This is just something that I have tried that has worked for me, it may not work for you or anyone else.
Our proxy is a windows server set up with TMG2010 and a web proxy address that is different from the DNS name of the server machine.
Normally we enter into the web proxy address which is something like: proxy.mydomain.com
I had the idea to try entering the local network name of the proxy as the proxy server in the network settings, then set up the user name and password boxes as I normally would as well. This actually worked.
Although I am not sure what to take from WHY it works. DNS has no issues, so it seems to me the authentication through HTTP/HTTPS has broke.
I have also read that somewhere else explaining it more in-depth than I feel necessary here but I will link you: http://apple.stackexchange.com/questions/118150/safari-7-cant-connect-to-intrane t-using-http-authentication
I have found the location to toggle the authentication on our TMG2010 server so now I'm just waiting until closing time to test.
---EDIT---
I just realized that most people tackling these issues look at what could be the problem on the MAC OS X side/Client Side….maybe the web server/proxy could use a good update to support more authentication control/methods/error handling…but then again that is what happens when you have two big brands with different architecture and software competing for floor space.

New Browse does not work with NTLM proxy and Firefox

With the new uploader I cannot upload a file with Firefox and our (NTLM) company proxy. I am prompted for my password, but cannot enter it correctly for a reason.
However the normal attachment functions still works.
Ton
Free Code Capture Tool! Version 2.1.3 with comments, web-upload, back-save and snippets!
Nederlandse LabVIEW user groep www.lvug.nl
My LabVIEW Ideas
LabVIEW, programming like it should be!

Bump
Free Code Capture Tool! Version 2.1.3 with comments, web-upload, back-save and snippets!
Nederlandse LabVIEW user groep www.lvug.nl
My LabVIEW Ideas
LabVIEW, programming like it should be!

WWSAPI - Cannot connect to web service via SSL and HTTP proxy authentication with NTLM, errorCode 0x803d0016, HTTP status 407

Hi,
I built a web service client using WWSAPI. The connection works via SSL (without HTTP proxy) and it works with SSL and proxy with basic authentication as well. When I try to connect using a proxy with NTLM authentication, then I get the errorCode
0x803d0016, HTTP status "407 (0x197)", "Proxy Authentication Required".
In WireShark I see only one HTTP request to connect to the proxy with NTLM Message Type: NTLMSSP_NEGOTIATE. The HTTP Response returns Status 407 and the connection ist closed. Comparing this to Internet Explorer - the Connection is not closed and
a second request with NTLMSSP_AUTH is sent.
Why doesn't it make the complete NTLM handshake? Why wasn't sent the NTLMSSP_AUTH directly?
I oriented in the HttpCalculatorWithKerberosOverSslClientExample.
Using WS_HTTP_HEADER_AUTH_SECURITY_BINDING,
WS_SECURITY_BINDING_PROPERTY_HTTP_HEADER_AUTH_SCHEME was set to WS_HTTP_HEADER_AUTH_SCHEME_NTLM, WS_SECURITY_BINDING_PROPERTY_HTTP_HEADER_AUTH_TARGET to WS_HTTP_HEADER_AUTH_TARGET_PROXY. I tried WS_DEFAULT_WINDOWS_INTEGRATED_AUTH_CREDENTIAL_TYPE but also WS_STRING_WINDOWS_INTEGRATED_AUTH_CREDENTIAL_TYPE.
Any idea?
Thanks

Hi,
I built a web service client using WWSAPI. The connection works via SSL (without HTTP proxy) and it works with SSL and proxy with basic authentication as well. When I try to connect using a proxy with NTLM authentication, then I get the errorCode
0x803d0016, HTTP status "407 (0x197)", "Proxy Authentication Required".
In WireShark I see only one HTTP request to connect to the proxy with NTLM Message Type: NTLMSSP_NEGOTIATE. The HTTP Response returns Status 407 and the connection ist closed. Comparing this to Internet Explorer - the Connection is not closed and
a second request with NTLMSSP_AUTH is sent.
Why doesn't it make the complete NTLM handshake? Why wasn't sent the NTLMSSP_AUTH directly?
I oriented in the HttpCalculatorWithKerberosOverSslClientExample.
Using WS_HTTP_HEADER_AUTH_SECURITY_BINDING,
WS_SECURITY_BINDING_PROPERTY_HTTP_HEADER_AUTH_SCHEME was set to WS_HTTP_HEADER_AUTH_SCHEME_NTLM, WS_SECURITY_BINDING_PROPERTY_HTTP_HEADER_AUTH_TARGET to WS_HTTP_HEADER_AUTH_TARGET_PROXY. I tried WS_DEFAULT_WINDOWS_INTEGRATED_AUTH_CREDENTIAL_TYPE but also WS_STRING_WINDOWS_INTEGRATED_AUTH_CREDENTIAL_TYPE.
Any idea?
Thanks

Getting a remote file with Mac OS behind NTLM proxy

Hello
I need to get a file from a server, in this case using an Applet but I do not think it to be much pertinence to this case.
I have standard code that works perfectly in all OS except on Mac when it is behind a NTLM proxy.
The code is the following:
public String urlConnection(String url) {
 URL conf;
 StringBuilder sb = new StringBuilder();
 try {
 conf = new URL(url);
 URLConnection cc = conf.openConnection();
 BufferedReader in = new BufferedReader(
 new InputStreamReader(
 cc.getInputStream()));
 sb = new StringBuilder();
 String inputLine;
 while ((inputLine = in.readLine()) != null)
 //System.out.println(inputLine);
 sb.append(inputLine);
 in.close();
 } catch (MalformedURLException e) {
 logger.error("MalformedURLException", e);
 return "Erro";
 } catch (IOException e) {
 logger.error("IOException", e);
 return "Erro";
 return sb.toString(); //Insted of returning bytes I do intend to return a string, but the return type of the method it is not the issue
 }As I stated, this code works perfectly for 95% of the users accessing the applet.
But behind the NTLM proxy I get a "liveconnect: Java: Returning a null"
Is there some other way to remotly access a file to see if I can go arround this situation?
Thank you
Brian

It is in fact HTTPs and not HTTP.
However, this does not has any problem in Windows and Linux, only on mac and only behind the NTLM proxy...
The stack trace is:
network: Connecting http://A/generic/javascript/java/lang/ObjectBeanInfo.class with proxy=DIRECT
network: Connecting http://A/generic/javascript/java/lang/ObjectBeanInfo.class with cookie "ASP.NET_SessionId=2kvabj55dmof3meqgsw2g445; Start=true;
liveconnect: Java: Obj is <applet.AppletTest>
liveconnect: Java: method is <public String urlConnection(String url)>
liveconnect: Java: method has 1 arguments.
liveconnect: JavaScript: caller and callee have same origin
liveconnect: JavaScript: default security policy = http://A/generic/javascript/index.htm
Ola
network: Connecting https://Cliente/config_final.xml with proxy=HTTP @ proxy.Cliente.pt/20.0.0.251:8080
network: Searching for authentication for protocol=https, siteName="proxy.Cliente.pt", port = 8080, scheme=ntlm, realm=, requestingURL="https://Cliente/config_final.xml, isProxy = yes
network: Found username=Cliente\utilizadorTeste
liveconnect: Java: Returning a null

Two Macs, only one fully autheticates with MS proxy... any suggestions?

*+The short version:+* I have two Macs with identical settings, but after installing Security Update 2007-007 one will play streaming MPEG audio in iTunes (amongst other things) and one will not.
*+The long detailed version:+*
I'm having a weird network authentication problem with two Macs that have identical setups. Both are behind a crappy corporate Microsoft ISA proxy server that has driven me nuts for years. They are both running identical systems (10.4.10), both have identical network settings and both are bound to Active Directory.
One Mac connects to the internet fine, while the other usually prompts for authentication or fails to connect with many apps. For example the Mac that works (let's call it Mac A) can connect to the iTunes Store and Microsoft AutoUpdate, while Mac B does not. In iTunes I would get the message “iTunes could not connect to the iTunes Store. You must log in to the proxy server in order to access the iTunes Store.”
The weird thing is that I could still listen to MPEG audio streams and access song names from the CDDB on Mac B (I have grown used to there not being true universal proxy support in OS X. Adobe CS2 Software Update will not work with a proxy that needs to authenticate, iChat has its own settings, and for a long time Mozilla with its built-in NTLM authentication was the only way besides IE that I could even get online before 10.4).
The problem for me is that after running Security Update 2007-007 I noticed that I can no longer listen to streaming music in iTunes on Mac B, but Mac A still works. That's when I noticed the other things that Mac A can connect to but Mac B does not, which is why this is starting to drive me crazy.
Things I've tried or checked to get Mac B to work:
-Set proxy to either IP address (Web Proxy (HTTP)) or Automatic Proxy Configuration, same problem on both.
-Both have identical Samba config file settings.
-Deleted all of my keychains and started fresh.
-I tried updating iTunes from 7.3.1 to 7.3.2, but no go.
-Both have the same time set (though they both cannot reach the time.apple.com server to automatically set the time. An error shows in the system.log).
-Tried creating a new test account on Mac B, but it has the same problems.
-Tried installing Authoxy 3.2.5 on Mac B to do the NTLM authentication, but I could never get Authoxy to connect. I get the following messages in Authoxy:
Fatal Error: unable to connect to talker socket. Errno: Interrupted system call
Couldn't open connection to proxy server. Errno: Interrupted system call
-I've tried running OnyX, Yasu and AppleJack to repair permission and clear out any cache that might be causing a problem.
-I've gone through the various log files to look for noticeable errors, but nothing seems to be coming up.
Network items that work on both Macs:
-Safari, Firefox, Dashboard Widgets, Software Update, Entourage, network drives
Another difference is that Firefox never prompts for username & password on Mac A, but does at startup every time on Mac B. The only way I can get around this is to manually create a Kerberos ticket and then Firefox will not prompt for authentication (Kerberos will not create a ticket automatically on both Macs, I read this was a bug with logging in to AD with an admin Mac account). But the Kerberos ticket does not help with my iTunes or other network problems.
If I've gotten all this to work, then why am I complaining? Because the streaming radio gets me through the day at work, simple as that.
I'm trying to be as detailed as possible so that I cover the bases and hope that maybe someone comes across this with a search and have found an answer or maybe have something new to try.
A big thanks for taking the time to read all of this and think it over.
P.S. I hate you Microsoft.

Aha! I've figured it out!
But not before resetting the PRAM and VRAM, re-installing 10.4.10 with the combo installer, and installing Wireshark to try and figure out what network requests were getting denied.
What did it was manually setting the IP address on the problem Mac to the IP from the Mac that was working. I came across this post (http://forums.macosxhints.com/archive/index.php/t-25049.html) where someone said the fix for them was to be in a certain IP range. I had previously tried renewing the DHCP, but I had to manually set the IP to the specific address to get it to work. I figured it had to be something on the server side since, like I said, both Macs had the same exact network settings.
Thanks to everyone that took the time to read my first post, and sorry about the typo in the title. It was late and I was getting frustrated.

How do I run Safari with a proxy on start up by command line?

Hello,
I am using a piece of software called Sahi to perform automated testing of websites. It uses a local proxy to accomplish this task, so it runs the browser with parameters needed so that that instance of the browser is running with the proxy settings. For some reason it's not correctly setup by default with Safari on the Mac. But it has a configuration file where you can set the command line parameters that it runs the browser with.
So when I use Sahi in its default configuration, it doesn't work because the proxy is not configured, and I get an error ( http://sahi.co.in/forums/discussion/4607/sahi-doesn039t-work-with-safari-5-0-1-o n-macosx )
So I need to set the proxy. When I set the 127.0.0.1:9999 proxy in the System Preferences it works. My question is how do I run Safari so that it provides the proxy settings as a command line option?
This way I can add the command line option to the Sahi configuration file so that it runs Safari properly. I don't want to have the proxy settings system wide because I need other programs to work. I don't want to have the proxy settings set for Safari permanently because I also need to be able to run Safari normally outside of this special context.
Any assistance would be appreciated.

I should mention this is Safari 5.0.1

Using a Mac on windows network with a proxy server

Hi I’m very new to Macs to apologies if this is a really silly question. I’m
trying to setup a Mac on our network and I’m having an issue getting it to work
properly with our proxy server. I have connected the Mac to the network and
selected automatic proxy configuration in the network settings using the URL of
our Pac file. I am asked for a proxy username and password when I initially try and
access a website but once I have entered my credentials they are saved in
keychain and anyone coming after me can browse using my account. I work in a
hospital so there are many different people accessing different devices. We
monitor and trace all users internet browsing so my question is can I configure
the Mac to ask for proxy credentials for different users? On our windows devices
a login box will appear if the browser has been closed and reopened. Can I do
this with the Mac?????
Any help you can offer will be very much appreciated.
Thanks

The short answer is that the IT department is a strict Microsoft shop and also incompetent. Almost everything in that message is patently false. Unfortunately, when accessing Microsoft Server services like this, you will need the support of the IT staff to tell you various settings to use. I think it is pretty clear that they have no intention of doing that.
There is nothing "special" about bootcamp. It is just a boot loader. A Mac running Windows via bootcamp is a Windows PC, not a Mac. As such, it will work perfectly fine in the network. You could also try running Parallels. I believe Parallels can be configured to use a bootcamp partition so you could run Windows via either bootcamp or Parallels.
One of the few things that is correct is that Apple does have to provide driver support for bootcamp and there is the possibility of random incompatibilities - but no more so than any other PC manufacturer. Parallels/VMWare may work around that with a different set of incompatibilities. Don't be too worried about this part. These "incompatibilities" are minor and almost always with funky hardware devices. What you want to do should work perfectly with either Parallels/VMWare or Bootcamp.

Using a Mac with a proxy server

Hi I’m very new to Macs to apologies if this is a really silly question. I’m
trying to setup a Mac on our network and I’m having an issue getting it to work
properly with our proxy server. I have connected the Mac to the network and
selected automatic proxy configuration in the network settings using the URL of
our Pac file. I am asked for a proxy username and password when I initially try and
access a website but once I have entered my credentials they are saved in
keychain and anyone coming after me can browse using my account. I work in a
hospital so there are many different people accessing different devices. We
monitor and trace all users internet browsing so my question is can I configure
the Mac to ask for proxy credentials for different users? On our windows devices
a login box will appear if the browser has been closed and reopened. Can I do
this with the Mac?????
Any help you can offer will be very much appreciated.
Thanks

Do NOT store the proxy server username and password in Keychain.
Easy to say, but by default, the next person to enter their password is likely to store their username password in the Keychain.
You can use Applications -> Utilities -> Keychain Access to give the Keychain a separate password and to auto-lock it after 'n' minutes. If you are the only one to know the Keychain password, then no one will be able to add the Proxy server username/password to the keychain.
Keychain Access -> Edit -> Change Settings for Keychain Login...
Keychain Access -> Edit -> Change Password for Keychain Login... (this is NOT required; you can keep the keychain set to use the same password you use for your login, as long as no one else knows that password; changing the settings to lock the keychain is sufficient for your needs)
The good news is that only you will be able to access stuff stored in the Keychain. The bad news is that if you do need stuff in the Keychain, you will need to enter the keychain password everytime you need to get at them.

When i open Firefox (in general), i dont mean sign into any email address, just to start using Firefox, i want to have always to sign in with my proxy account = username and password..how? thank you!

when i click on the Firefox icon i want always to have to sign in with my proxy username and password.. i want more privacy in using Firefox in general.. is that possible? thanks

If you use extensions (Tools > Add-ons > Extensions) like Adblock Plus or NoScript or Flash Block that can block content then make sure that such extensions aren't blocking content.
Start Firefox in [[Safe Mode|Safe Mode]] to check if one of the extensions (Firefox/Tools > Add-ons > Extensions) or if hardware acceleration is causing the problem (switch to the DEFAULT theme: Firefox/Tools > Add-ons > Appearance).
*Do not click the Reset button on the Safe mode start window or otherwise make changes.
*https://support.mozilla.org/kb/Safe+Mode
You can use one of these to start Firefox in Safe mode:
*On Windows, hold down the Shift key while starting Firefox with a double-click on the Firefox desktop shortcut
*On Mac, hold down the Options key while starting Firefox
*Help > Restart with Add-ons Disabled
If it works in Firefox Safe-mode then disable all extensions (Tools > Add-ons > Extensions) and then try to find which is causing it by enabling one extension at a time until the problem reappears.
Close and restart Firefox after each change via "File > Exit" (Mac: "Firefox > Quit"; Linux: "File > Quit")
See also:
*https://support.mozilla.org/kb/Troubleshooting+extensions+and+themes

Jar files download problems in Java Webstart with JRE 1.6

We have encountered a few problems in Java Webstart with JRE 1.6
In JRE 1.5, the jar files are getting downloaded onto the client
machine with it's original names.
Example :
Server File Name : acm.jar
Client File Name : RMacm.jar
But in JRE 1.6, the jar files are getting downloaded with improper file names.
Example :
Server File Name : acm.jar
Client File Name : 4fb074cc-66fc7407
Moreover the path itself seems to be invalid.
Example Path :
JRE 1.5 path:
C:\Documents and Settings\Administrator\Application
Data\Sun\Java\Deployment\cache\javaws\https\D17.16.23.11\P443\DMtest\DMwebStart
JRE 1.6 path:
C:\Documents and Settings\Administrator\Application
Data\Sun\Java\Deployment\cache\6.0\12
Due to this, we are facing Classpath problems.
What changes do we have to make to the code, for Java
Webstart to work ?
We are using JBoss 4.0.4 and JDK 1.5 in the Server
On the client machine, we have IE 6 and JRE 1.6.01
Help would be appreciated.

Ask your Java Web Start question at:
http://forum.java.sun.com/forum.jspa?forumID=38

Intermittent proxy error "There is a problem with the proxy server's security certificate. Outlook is unable to connect to the proxy server "

Hi all,
From time to time (at least once a day), the following message pops up on the user's screen:
"There is a problem with the proxy server's security certificate. Outlook is unable to connect to the proxy server . Error Code 80000000)."
If we click "OK" it goes away and everything continues to work although sometimes Outlook disconnects. It is quite annoying...
Any ideas?
Thank you in advance

Hi,
For the security alert issue, I'd like to recommend you check the name in the alert windows, and confirm if the name is in your certificate.
Additionally, to narrow down the cause, when the Outlook client cannot connect again, I recommand you firstly check the connectivity by using Test E-mail AutoConfiguration. For more information, you can refe to the following article:
http://social.technet.microsoft.com/Forums/en-US/54bc6b17-9b60-46a4-9dad-584836d15a02/troubleshooting-and-introduction-for-exchange-20072010-autodiscover-details-about-test-email?forum=exchangesvrgeneral
Thanks,
Angela Shi
TechNet Community Support

There is a problem with the proxy server's security certificate. The name on the security certificate is invalid or does not match the name of the target site "Mailserver"

Good day Guys
First of all I am not an Exchange Expert, and I might be asking a very stupid question, but please bare with me. :)
While I was on leave our Mail server fell over and The company got a Specialist to help out for the time being.
We where\are on Microsoft Exchange 2007 , which Fell over, and the specialist was able to recover as much data as he could.
They then installed Exchange 2013 and tried to migrate everything from 2007 to 2013 and not everything migrated over.
But the problem is, Outlook Anywhere was enable on 2007 and worked a 100% (before the disaster)
With Exchange 2013 I get the following error message when trying to connect With Outlook 2013, using an external connection:
"There is a problem with the proxy server's security certificate. The name on the security certificate is invalid or does not match the name of the target site "Mailserver"
Outlook is unable to connect to the Proxy server. (Error Code 0)"
Has anyone had the Similar when migrating over from 2007 to 2013 or is this an Issue on IIS and nothing to do with Exchange migration?
Your assistance will be greatly appreciated.

Hi,
Firstly, I would suggest we use Exchange 2013 FE as the Outlook Anywhere proxy server.
For the certificate issue, it mostly occurs because the host name that Outlook are trying to access does not match the certificate SAN. Please check with this point. If they do not match, you
can change the host name by referring to the following article:
https://support.microsoft.com/kb/940726/en-us?wa=wsignin1.0
Thanks,
Simon Wu
TechNet Community Support

LDAP connections with multiple proxy instances

After configuring LDAP connectivity through the Admin application on a machine with multiple proxy instances I end up with:
number of proxy instances x LDAPConnPool times number of connections to the LDAP server.
Question: Is it possible to prevent some of the proxy instances from opening LDAP connections?

Hi
Increase the IDLE timeout value on the LDAP server. Of course, this just extends the inevitable. Check if there is a way to disable IDLE timeout on LDAP server.
Regards,
Nagendra HK

Starting webstart with parameters?

Hi all,
Just wondering if you can start up webstart with a number of parameters, eg.
www.somesite.com/webapp.jnlp&param1=a&param2=b
Can this be done? How does webstart treat the extra parameters? Does it pass it on to the main method as arguments?
thanks,
J

Instead, you can use a scripting language like PHP.
You write something like this:
<?php
header('Content-type: application/x-java-jnlp-file');
echo '
JNLP source goes here
?>
Within the echo command you are free to output anything you want, even parameters to the script itself.

Webstart with ntlm proxy?

Similar Messages

Maybe you are looking for