Printable View
Hi All
Our Mac's are, as are all computers in the school, behind a proxy server. When using Safari authentication works perfecttly for the users.
Our problem is iPhoto. Our art teacher wants to purchase a photo book however, when selecting "Order Prints", we get "A connection could not be established at this time" error. If we go out through our back door it works perfectly. It has to be a proxy\authentication error.
Can anyone help.
Cheers!!
Paul
iPhoto: Difficulty submitting a book, card, or calendar order
You may also need to temporarily turn off any firewall or disable your proxy settings. iPhoto uses ports 80 and 443 for book, card, calendar and print orders.
If you are using the Mac OS X firewall settings, you will need to specifically allow iPhoto to connect. If you are using software not manufactured by Apple to protect your computer, please refer to support site for that software for information on how to enable the specific iPhoto ports. See Well known TCP and UDP ports used by Apple software products for more information.
Also when logged on as a student does your proxy block any sites / url's that iPhoto requires to order the books ?
Try requesting the following to opened up on your firewall
configuration.apple.com
securemetrics.apple.com
storeimages.apple.com.edgekey.net
store.apple.com
www.mac.com
these are all requested when purchasing prints/books in iPhoto
@mac_shinobi
Ports 80 and 443 are open on our ISA server.
Mac firewall is set to allow all connections.
I think the problem is that iPhoto is not asking to be authenticated against our ISA server. We have used Little Snitch to check which sites & ports are required to be open, but still get the "A connection could not be established at this time" error.
Grrrr!!
Paul
@rbelson
configuration.apple.com - Page not found
storeimages.apple.com.edgekey.net - Access Denied
All other pages OK.
Paul
Just to confirm
1. Date / Time settings you have configured this to point to a server on your domain that has NTP setup / configured on it to ensure that the macs are using the same date / time / time zone ?
2. In the network settings you have configured the search domain field with your FQDN or the IP Address of the DC
3. I presume you have used workgroup manager to assign safari with the relevant proxy details
Not sure if any of the above will help but just some thoughts / long shots
4. What version of iPhoto is it ?
08, 09 or 11 ?
I did find authoxy ( version 3.6 seems to be the latest thus far )
http://www.hrsoftworks.net/Products.php
more a work around then a fix though
quick guide on authoxy
http://davidtse916.wordpress.com/200...de-to-authoxy/
@mac_shinobi
Date/Time OK.
Network settings correct.
Manual configuration of proxy information.
Our Default Gateway is the same address as our ISA server. ISA server details set in system preferences/proxy settings, internet works OK on ports 80 and 443.
iPhoto '09
If I take the proxy settings out and set the default gateway to our "back door" (BT router), the program works perfectly.
I think what is happening is that iPhoto is unaware of the proxy server and when faced with authentication it just errors.
Hope this makes sense.
Paul
Quote:
Originally Posted by HallX
These domains will not be web facing via a browser as they provide transaction and authentication services for the purchasing of these products.
Try adding these domains to the bypass proxy area of System Preferences (as shown here http://www.its.unimelb.edu.au/__data...ies_manual.jpg)
That wont work unfortunately. If these sites are put into the bypass proxy area then they will never get out into the big wide world :-(Quote:
Originally Posted by rbelson
I've specifically entered all the above sites into ISA's whitelist & I'm convinced this is an iPhoto authentication problem (iPhoto not realising it needs to go through a proxy), not an ISA one.
Fortunately this is a one off issue so I can allow this student supervised access through the back door so as he can purchase his book, or whatever he's doing.
Good old iPhoto.
Paul
edit - @mac_shinobi - authoxy would be no good because we need the Mac users to authenticate against ISA with their Windows account so we can track any problems.
Ho Hum.
I maybe wrong but I believe it IS a proxy server problem. In my college we use a Windows proxy server which worked seamlessly with our windows machines. The Macs however were regularly asked to authenticate. So now we use a Unix box for the Macs without issues.
seems to point to iPhoto not being the problem.Quote:
If I take the proxy settings out and set the default gateway to our "back door" (BT router), the program works perfectly.
Just curious - is there a trial version of ISA server that I could use in a VM so I could have a play around with this at home ?
I think the problem is that iPhoto doesn't know to ask for authentication ie. it doesn't read the proxy information from system preferences or ask for authentication when challenged. There is no option in iPhoto to enter proxy information.Quote:
Originally Posted by nonmonotonic
Paul
Download details: Internet Security and Acceleration (ISA) Server 2006 180-Day Trial VersionQuote:
Originally Posted by mac_shinobi
Paul
ISA has been replaced by Forefront TMG - Forefront Threat Management Gateway: Home Page as ISA is now old.Quote:
Originally Posted by mac_shinobi