HallX Posted February 15, 2011 Posted February 15, 2011 Hi All Our Mac's are, as are all computers in the school, behind a proxy server. When using Safari authentication works perfecttly for the users. Our problem is iPhoto. Our art teacher wants to purchase a photo book however, when selecting "Order Prints", we get "A connection could not be established at this time" error. If we go out through our back door it works perfectly. It has to be a proxy\authentication error. Can anyone help. Cheers!! Paul
mac_shinobi Posted February 15, 2011 Posted February 15, 2011 iPhoto: Difficulty submitting a book, card, or calendar order You may also need to temporarily turn off any firewall or disable your proxy settings. iPhoto uses ports 80 and 443 for book, card, calendar and print orders. If you are using the Mac OS X firewall settings, you will need to specifically allow iPhoto to connect. If you are using software not manufactured by Apple to protect your computer, please refer to support site for that software for information on how to enable the specific iPhoto ports. See Well known TCP and UDP ports used by Apple software products for more information. Also when logged on as a student does your proxy block any sites / url's that iPhoto requires to order the books ?
rbelson Posted February 15, 2011 Posted February 15, 2011 Try requesting the following to opened up on your firewall configuration.apple.com securemetrics.apple.com storeimages.apple.com.edgekey.net store.apple.com http://www.mac.com these are all requested when purchasing prints/books in iPhoto
HallX Posted February 15, 2011 Author Posted February 15, 2011 @mac_shinobi Ports 80 and 443 are open on our ISA server. Mac firewall is set to allow all connections. I think the problem is that iPhoto is not asking to be authenticated against our ISA server. We have used Little Snitch to check which sites & ports are required to be open, but still get the "A connection could not be established at this time" error. Grrrr!! Paul
HallX Posted February 15, 2011 Author Posted February 15, 2011 @rbelson configuration.apple.com - Page not found storeimages.apple.com.edgekey.net - Access Denied All other pages OK. Paul
mac_shinobi Posted February 15, 2011 Posted February 15, 2011 (edited) Just to confirm 1. Date / Time settings you have configured this to point to a server on your domain that has NTP setup / configured on it to ensure that the macs are using the same date / time / time zone ? 2. In the network settings you have configured the search domain field with your FQDN or the IP Address of the DC 3. I presume you have used workgroup manager to assign safari with the relevant proxy details Not sure if any of the above will help but just some thoughts / long shots 4. What version of iPhoto is it ? 08, 09 or 11 ? I did find authoxy ( version 3.6 seems to be the latest thus far ) http://www.hrsoftworks.net/Products.php more a work around then a fix though quick guide on authoxy http://davidtse916.wordpress.com/2008/03/14/a-step-by-step-guide-to-authoxy/ Edited February 15, 2011 by mac_shinobi
HallX Posted February 15, 2011 Author Posted February 15, 2011 @mac_shinobi Date/Time OK. Network settings correct. Manual configuration of proxy information. Our Default Gateway is the same address as our ISA server. ISA server details set in system preferences/proxy settings, internet works OK on ports 80 and 443. iPhoto '09 If I take the proxy settings out and set the default gateway to our "back door" (BT router), the program works perfectly. I think what is happening is that iPhoto is unaware of the proxy server and when faced with authentication it just errors. Hope this makes sense. Paul
rbelson Posted February 15, 2011 Posted February 15, 2011 @rbelson configuration.apple.com - Page not found storeimages.apple.com.edgekey.net - Access Denied All other pages OK. Paul These domains will not be web facing via a browser as they provide transaction and authentication services for the purchasing of these products. Try adding these domains to the bypass proxy area of System Preferences (as shown here http://www.its.unimelb.edu.au/__data/assets/image/0005/179159/leopard_safari_proxies_manual.jpg)
HallX Posted February 15, 2011 Author Posted February 15, 2011 Try adding these domains to the bypass proxy area of System Preferences (as shown here http://www.its.unimelb.edu.au/__data/assets/image/0005/179159/leopard_safari_proxies_manual.jpg) That wont work unfortunately. If these sites are put into the bypass proxy area then they will never get out into the big wide world :-(
HallX Posted February 15, 2011 Author Posted February 15, 2011 (edited) I've specifically entered all the above sites into ISA's whitelist & I'm convinced this is an iPhoto authentication problem (iPhoto not realising it needs to go through a proxy), not an ISA one. Fortunately this is a one off issue so I can allow this student supervised access through the back door so as he can purchase his book, or whatever he's doing. Good old iPhoto. Paul edit - @mac_shinobi - authoxy would be no good because we need the Mac users to authenticate against ISA with their Windows account so we can track any problems. Ho Hum. Edited February 15, 2011 by HallX
nonmonotonic Posted February 15, 2011 Posted February 15, 2011 I maybe wrong but I believe it IS a proxy server problem. In my college we use a Windows proxy server which worked seamlessly with our windows machines. The Macs however were regularly asked to authenticate. So now we use a Unix box for the Macs without issues. If I take the proxy settings out and set the default gateway to our "back door" (BT router), the program works perfectly. seems to point to iPhoto not being the problem.
mac_shinobi Posted February 16, 2011 Posted February 16, 2011 Just curious - is there a trial version of ISA server that I could use in a VM so I could have a play around with this at home ?
HallX Posted February 16, 2011 Author Posted February 16, 2011 seems to point to iPhoto not being the problem. I think the problem is that iPhoto doesn't know to ask for authentication ie. it doesn't read the proxy information from system preferences or ask for authentication when challenged. There is no option in iPhoto to enter proxy information. Paul
HallX Posted February 16, 2011 Author Posted February 16, 2011 Just curious - is there a trial version of ISA server that I could use in a VM so I could have a play around with this at home ? Download details: Internet Security and Acceleration (ISA) Server 2006 180-Day Trial Version Paul
localzuk Posted February 16, 2011 Posted February 16, 2011 Just curious - is there a trial version of ISA server that I could use in a VM so I could have a play around with this at home ? ISA has been replaced by Forefront TMG - Forefront Threat Management Gateway: Home Page as ISA is now old.
HallX Posted February 16, 2011 Author Posted February 16, 2011 The Macs however were regularly asked to authenticate. So now we use a Unix box for the Macs without issues.. We need the Macs to authenticate so as we can track students web activity. We use a program called Analyser Premium to go through ISA servers daily logs. Paul
nonmonotonic Posted February 17, 2011 Posted February 17, 2011 We need the Macs to authenticate so as we can track students web activity. We use a program called Analyser Premium to go through ISA servers daily logs. Paul Squid proxy plus LightSquid ?
rbelson Posted February 17, 2011 Posted February 17, 2011 Or this on a VM - Squid Proxy with DansGuardian Content filtering | Virtual Appliance Marketplace
damien.deakes Posted February 22, 2011 Posted February 22, 2011 Just a quick thing to try Proxifier should fix this. You can add the application to the list to route it through an authenticated route
HallX Posted February 22, 2011 Author Posted February 22, 2011 Just a quick thing to try Proxifier should fix this. You can add the application to the list to route it through an authenticated route Cheers fella, I'll give it a go. BTW, just got up? Paul
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now