Miscbrah Posted January 5, 2015 Posted January 5, 2015 (edited) Hi gang, losing my rag with this now. %SLT member% wants iTunes on his pc and it's one of those things we have to do. I also kinda like the guy so in principle I don't mind. However, I do mind this old garbage that keeps popping up: http://i1236.photobucket.com/albums/ff441/TerrifyingGiantSquid/ae8d713e-5c4e-48cd-8cdb-be6e1f938ef8_zpsb4eac700.jpg Windows 7 domain, run a dansguardian proxy. Now, I understand this is NTLM authentication issues and the Apple geniuses in California haven't magic-ed up a way for the thing to behave normally over X-million versions of iTunes, but I need to magic up a way for this to work. So I figured someone out there in EduGeek land must have knocked this into line before now. Right? Anyone? ...Help? Edited January 5, 2015 by Miscbrah
sted Posted January 5, 2015 Posted January 5, 2015 could you give the laptop a reserved ip and allow apple stuff to/from that ip address direct rather than via the proxy? 1
Miscbrah Posted January 5, 2015 Author Posted January 5, 2015 I could, but I can't find out (and the proxy has no idea) what's hitting it and what it's 'blocking' - it's blocking nothing from the test VM's IP address yet there the prompts are. Unblocked the only thing I could initially find, which was init.itunes.apple.com and now *.apple.com is unblocked.
CyberDrac Posted January 5, 2015 Posted January 5, 2015 The full list of apples websites that are sometimes used by their varous services include ... airport.us ibook.info macbookair.net macintosh.me applecare.info macintosh.info itunes.info itunes.us iphoto.us applecare.us macbook.us itunesmobile.com ipod.us itunestelevision.com macosxversions.com itunes.me itunesaircheck.com mac.us macbookair.us ipod.me applestore.info iphone.me osxlionlaunchpad.com macgestures.com macbookair.org mac.info macos.us myipod.net itunesu.net appleiphonecell.com firewire.us airport.info itunesparty.com applecomputer.info appletv.info applecomputers.us idvd.us osx.info macbookair.info itunesu.org itunesuniversity.com imovie.us theapplestore.org macbookpro.org apple.me itools.info thinkdifferent.us thinkdifferent.info macintosh.us ipod.info applescript.us quicktime.info macosxlionairdrop.com itunesshow.com airtunes.net ipod.net macos.info imac.info imac.us appleiosv.com ipodnano.me
Meldrew Posted January 5, 2015 Posted January 5, 2015 (edited) We had this problem, but we don't use DansGuardian, we use censornet instead. The problem I believe is that iTunes doesn't send the users details to your proxy, so it requests them, so iTunes asks for them, but due to some security issues (kerberos from memory), the details don't work. Our way around the issue is to set the specific MAC address of the PC in censornet to be non-user authentication. That way it won't ask iTunes for credentials as it knows them. HTH, Meldrew Edited January 5, 2015 by Meldrew 1
CyberDrac Posted January 5, 2015 Posted January 5, 2015 We added the list I supplied to out authentication bypass list on our Smoothwall 1
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now