iTunes and Proxy Prompts. Point of Despair.

[Miscbrah]

Hi gang, losing my rag with this now. %SLT member% wants iTunes on his pc and it's one of those things we have to do. I also kinda like the guy so in principle I don't mind.

 

However, I do mind this old garbage that keeps popping up:

 

http://i1236.photobucket.com/albums/ff441/TerrifyingGiantSquid/ae8d713e-5c4e-48cd-8cdb-be6e1f938ef8_zpsb4eac700.jpg

 

Windows 7 domain, run a dansguardian proxy.

 

Now, I understand this is NTLM authentication issues and the Apple geniuses in California haven't magic-ed up a way for the thing to behave normally over X-million versions of iTunes, but I need to magic up a way for this to work. So I figured someone out there in EduGeek land must have knocked this into line before now. Right?

 

Anyone?

 

 

...Help?

Edited January 5, 2015 by Miscbrah

[sted]

could you give the laptop a reserved ip and allow apple stuff to/from that ip address direct rather than via the proxy?

[Miscbrah]

I could, but I can't find out (and the proxy has no idea) what's hitting it and what it's 'blocking' - it's blocking nothing from the test VM's IP address yet there the prompts are. Unblocked the only thing I could initially find, which was init.itunes.apple.com and now *.apple.com is unblocked.

[CyberDrac]

The full list of apples websites that are sometimes used by their varous services include ...

 

airport.us

ibook.info

macbookair.net

macintosh.me

applecare.info

macintosh.info

itunes.info

itunes.us

iphoto.us

applecare.us

macbook.us

itunesmobile.com

ipod.us

itunestelevision.com

macosxversions.com

itunes.me

itunesaircheck.com

mac.us

macbookair.us

ipod.me

applestore.info

iphone.me

osxlionlaunchpad.com

macgestures.com

macbookair.org

mac.info

macos.us

myipod.net

itunesu.net

appleiphonecell.com

firewire.us

airport.info

itunesparty.com

applecomputer.info

appletv.info

applecomputers.us

idvd.us

osx.info

macbookair.info

itunesu.org

itunesuniversity.com

imovie.us

theapplestore.org

macbookpro.org

apple.me

itools.info

thinkdifferent.us

thinkdifferent.info

macintosh.us

ipod.info

applescript.us

quicktime.info

macosxlionairdrop.com

itunesshow.com

airtunes.net

ipod.net

macos.info

imac.info

imac.us

appleiosv.com

ipodnano.me

[Miscbrah]

Look at the size of that motherfather.

[Meldrew]

We had this problem, but we don't use DansGuardian, we use censornet instead. The problem I believe is that iTunes doesn't send the users details to your proxy, so it requests them, so iTunes asks for them, but due to some security issues (kerberos from memory), the details don't work. Our way around the issue is to set the specific MAC address of the PC in censornet to be non-user authentication. That way it won't ask iTunes for credentials as it knows them.

 

HTH,

 

Meldrew

Edited January 5, 2015 by Meldrew

[CyberDrac]

We added the list I supplied to out authentication bypass list on our Smoothwall