Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

"Safari can't connect to the proxy server"

Hello again...

My 10.6 Server is up and running! thanks for all the help...however...

When I try to access the internet via Safari from the actual server, I get the "Safari can't connect to the proxy server" message" but all the client machines can successfully access the internet....

I'll start to read up on proxies but if someone can offer a suggestion in the meantime, that would be terrific. I know it's something simple I am missing...

thanks!

mac mini, Mac OS X (10.6.1)

Posted on Nov 15, 2009 12:50 PM

Reply
15 replies

Nov 15, 2009 1:59 PM in response to gumbah5

here is some more info:


Everything had been working just fine...I was able to use the server machine to access the internet just yesterday...this morning...not able to.

We are behind a router which is handing out DHCP...the server has a static ip and is handling DNS...we're all on the same network...our wireless is secured...surely this must have something to do with the server's settings (something I changed inadvertently)?

the server's network settings has the routers correct address and the DNS Server section has the server's static IP along with the two ISP DNS addresses (68.87.72.134, 68.87.77.134) and the search domain is our FQDN...

In the network preferences on the actual server under the proxies setting there are no protocols to configure that are checked and in the "Bypass proxy settings for these Hosts & Domains:" box is:

"*.local, 169.254/16"

thanks in advance

Nov 15, 2009 2:46 PM in response to gumbah5

Nothing's up with Safari. It's told to use a proxy server, and that proxy server isn't responding (either because the proxy server configuration is wrong, or the proxy server is offline).

The reason why Firefox works is because it ignores the system proxies setting, preferring instead to use its own.

The solution is simple - either fix the proxy server, or click the Proxies button in Safari Preferences -> Advanced and set the proxy server setting accordingly (which may be 'off', depending on your needs).

Nov 15, 2009 7:32 PM in response to Camelot

Thanks for the reply...

I need to hone up on what these proxy servers are all about.

When I go to Safari's preferences the "change proxy" button is greyed out.

Could it be a setting within the server preferences that made this happen? For right now, as long as our client machines can access the internet (which they can), I'm not going to do any panicking...

Thanks for the info!

Nov 16, 2009 7:06 AM in response to gumbah5

If the client box is not locked down, then:

Safari - Preferences - Advanced - Change Settings

If the client box is locked down, then you're off to either establish the proxy server within the configuration or to unlock the knob this via Workgroup Manager. (For details on configuring and using proxies within managed preferences, search the [Mac OS X Server 10.6 User Management manual|http://images.apple.com/server/macosx/docs/User Managementv10.6.pdf] for Configuring Proxy Servers by Port; it's on page 228 in the current Snow Leopard Server version of this manual; in the section on managing user preferences.

Nov 16, 2009 9:02 AM in response to Camelot

hi guys...thanks for the responses...sorry to be so dense on this matter...

1) So normally, there ISN'T a proxy being used? (I don't think we were ever using one prior to the deployment of our server)

2) A proxy "regulates" what traffic is passed between machines? So no proxy in effect means traffic goes unchecked between computers...?

3) Where does a proxy take effect? At the Router/Gateway? The Server? or individual machines?

4) Obviously I have inadvertently set up a proxy somehow over the weekend that won't allow some Safari users to get out of the building.

5) So where the heck did those changes get made?

6) In the safari preferences, the change option is greyed out...Yes, I can get to the network proxy area (nothing is checked at this point)...and I see an area in server admin that also addresses the use of a proxy...

7) I'm just not sure what do to at this point...I'll take more time (which is running out) to read through the server docs...(classes will be making use of the lab tomorrow-i'm testing with a few students right now)...

8) If you have any more immediate thoughts I'd definitely appreciate it!

thanks

greg

Nov 16, 2009 9:53 AM in response to gumbah5

1) So normally, there ISN'T a proxy being used?


Proxies are used in school and corporate environments, and as a mechanism to implement "network nanny" or parental controls, or when information leakage involving sensitive or classified data, or personal or credit card data, or other sensitive data is involved.

When IT folks (or parents) are looking to monitor or control or track network access.

2) A proxy "regulates" what traffic is passed between machines?


A proxy can enforce access, or can cache access, yes.

So no proxy in effect means traffic goes unchecked between computers...?


Correct.

3) Where does a proxy take effect? At the Router/Gateway? The Server? or individual machines?


A functional proxy requires a proxy server, and settings at the firewall, and on the client box.

4) Obviously I have inadvertently set up a proxy somehow over the weekend that won't allow some Safari users to get out of the building.


The proxy setting can be established via WGM, or locally via the system preferences, or (and the following are less common) via malware or such, or due to a bug. These settings are usually altered with WGM and system preferences, in the vast majority of cases.

5) So where the heck did those changes get made?


See 4.

6) In the safari preferences, the change option is greyed out...Yes, I can get to the network proxy area (nothing is checked at this point)...and I see an area in server admin that also addresses the use of a proxy...


If grayed out, then WGM is your next stop.

8) If you have any more immediate thoughts I'd definitely appreciate it!


Without intending any snark, read the manuals? Servers are big and complex and expect an understanding of much more than the client boxes do; that's the inherent difference between "server computing" and "client computing", after all.

Nov 16, 2009 11:38 AM in response to MrHoffman

No snarkiness taken Mr. Hoffman...As a full-time high school teacher, I've been setting up our small school server on my own time for the past three months...with the help of the server docs, manuals, and the great help found within this forum, we are finally to a point where we can begin using the server.

What I'm just not understanding is WHAT proxy do I use? I see all kinds of proxy servers out there but is there a specific one I should be using?

Again, forgive me for my ignorance on this matter...I just don't understand why after a year of not using a proxy server, all of a sudden we need to have one? And this issue came about when Safari was unable to "connect to the proxy server"...

MrHoffman wrote:
1) So normally, there ISN'T a proxy being used?


Proxies are used in school and corporate environments, and as a mechanism to >implement "network nanny" or parental controls, or when information leakage >involving sensitive or classified data, or personal or credit card data, or >other sensitive data is involved.

When IT folks (or parents) are looking to monitor or control or track network access.


up to this point I don't believe we were using a proxy server?

2) A proxy "regulates" what traffic is passed between machines?


A proxy can enforce access, or can cache access, yes.

So no proxy in effect means traffic goes unchecked between computers...?


Correct.


do we HAVE to use a proxy server with the server?

3) Where does a proxy take effect? At the Router/Gateway? The Server? or >individual machines?


A functional proxy requires a proxy server, and settings at the firewall, and >on the client box.

The proxy setting can be established via WGM, or locally via the system >preferences, or (and the following are less common) via malware or such, or due >to a bug. These settings are usually altered with WGM and system preferences, >in the vast majority of cases.


Enabling a proxy server on the snow leopard server should help us out...but again, which address do I use? (in the server doc you referenced, it had "proxyserver.apple.com:8080")but I think that was just the format to use...


Without intending any snark, read the manuals? Servers are big and complex >and expect an understanding of much more than the client boxes do; that's the >inherent difference between "server computing" and "client computing", after >all.


I'm definitely appreciating how much involvement and understanding it takes to get one of these set up...and over the past three months, we've come a long way...

again, thanks for the guidance and help!

Nov 16, 2009 11:49 AM in response to gumbah5

There's no absolute requirement to use a proxy server.

The decision to use one (or not) depends on your network configuration. No one here can tell you whether you should, should not (nor must or must not) use a proxy.

In addition to the above reasons, proxy servers are often used to cache content to improve performance for users and optimize (often limited) bandwidth.

up to this point I don't believe we were using a proxy server?


That's entirely fine, but you should clearly ensure that your machines aren't trying to use one (which is what sounds like the case here).

do we HAVE to use a proxy server with the server?


Not at all. It's your choice (or your network admin's choice).

Enabling a proxy server on the snow leopard server should help us out...but again, which address do I use?


You use the address of your proxy server. If you set it up on server.yourdomain.com, port 12345 then you enter server.yourdomain.com:12345 as the proxy. No one here can predict where your proxy server is. If you have one, someone there should be able to tell you where it is. If you don't have one and are setting one up yourself then you'll know what these values would be.
If you don't have a proxy and don't intend to use a proxy then remove the proxy server setting and be happy. 🙂

Nov 16, 2009 12:10 PM in response to Camelot

up to this point I don't believe we were using a proxy server?


That's entirely fine, but you should clearly ensure that your machines aren't trying to use one (which is what sounds like the case here).

Enabling a proxy server on the snow leopard server should help us out...but again, which address do I use?


You use the address of your proxy server. If you set it up on >server.yourdomain.com, port 12345 then you enter server.yourdomain.com:12345 as >the proxy. No one here can predict where your proxy server is. If you have one, >someone there should be able to tell you where it is. If you don't have one and >are setting one up yourself then you'll know what these values would be.


ah hah! that was what I was looking for...is there a list of ports to which I can refer? found this http://support.apple.com/kb/TS1629

If you don't have a proxy and don't intend to use a proxy then remove the proxy server setting and be happy. 🙂


well, I would love to remove the setting but I don't see any settings that are enabled! There's nothing checked under the "Web" setting in Server Admin; Nothing checked under WGM with any of my computer or user groups; and nothing is checked in network preferences on the server machine; and I can't get to the Safari Proxy settings because it is greyed out.

could this happen if just one of our client machines have their proxy settings checked? But it wouldn't affect the server woould it?

On a side note, when a student tried accessing certain pages within a website, Safari came up saying it couldn't establish a secure connection to that page.

Now I'm wondering if there is some random setting in WGM within the user or group settings that is the cause of this...

sigh...

thanks though!

Message was edited by: gumbah5

Nov 16, 2009 12:55 PM in response to gumbah5

ah hah! that was what I was looking for...is there a list of ports to which I can refer?


If you're running your own proxy server you can use any port on the server that's not already being used for something else. There is no 'standard' for proxy servers (although 8080 seems to be a favorite). That's why I say that if you do need to connect to a proxy server you may need to ask the admin where it's running since there is no standard.

well, I would love to remove the setting but I don't see any settings that are enabled! There's nothing checked under the "Web" setting in Server Admin;


Wouldn't be here.

Nothing checked under WGM with any of my computer or user groups;


This could be where it's set if you're using managed preferences for your users.

and nothing is checked in network preferences on the server machine;


Did you check all the interfaces? If your server has multiple active interfaces, the proxy server could be defined under any one of them.

and I can't get to the Safari Proxy settings because it is greyed out.


I've never seen this personally. Kind of leads me towards a Managed Preferences setup (since I don't use that). I can't think what else would block this button.
Is it still blocked when you log in as another user?

could this happen if just one of our client machines have their proxy settings checked? But it wouldn't affect the server woould it?


No, a client setting would only affect that client. It could not affect the server's behavior.

On a side note, when a student tried accessing certain pages within a website, Safari came up saying it couldn't establish a secure connection to that page.


That sounds more like a SSL problem with the site you're connecting to (e.g. it's using an expired certificate, or using a certificate signed by an unknown authority). You'd need to look at that specific site in more detail in order to determine what's wrong.

Now I'm wondering if there is some random setting in WGM within the user or group settings that is the cause of this...


I don't know about random settings - the network settings are pretty clearly defined - Workgroup Manager -> Preferences (in the toolbar) -> Network

However if that were the case I'd expect it to push out to all client machines, not just the server. Unless, of course, it was attached to the specific user account you're using on the server.

Nov 16, 2009 1:15 PM in response to Camelot

thanks Camelot...I'll look into your suggestions...and here's the scary part...
I AM the system administrator!

However I did get it "fixed"!

I logged out as the admin and logged in as a "test" user...checked the network preferences and nothing was checked...BUT...I was able to access the internet with Safari!

So, I log back in as the admin and...Safari now works...weird, eh?

So it appears we aren't using a proxy server after all.

Thanks for your time!

greg

Nov 16, 2009 1:19 PM in response to gumbah5

What I'm just not understanding is WHAT proxy do I use? I see all kinds of proxy servers out there but is there a specific one I should be using?


None? Don't use one?

A proxy server is usually locally established and maintained; within your own particular organizational entity. A proxy server is an explicit choice that you make and that you maintain.

If you are the local IT staff (and as it appears) and you don't know about a proxy server and if your other web clients here are not using a proxy server (as it appears), then you likely don't have one, and thus don't want the proxy setting enabled.

Without a proxy server around, you'll be routing traffic via your normal IP gateway host out to your upstream ISP provider; all traffic will be via your existing IP network routing.

...I just don't understand why after a year of not using a proxy server, all of a sudden we need to have one? And this issue came about when Safari was unable to "connect to the proxy server"...


It would seem most expedient to skip the "how" and determine where the setting has been enabled, and disable it.

If this proxy switch setting is somehow stuck, or if the switch indicates that the current proxy processing is disabled, or if the switch somehow becomes enabled again, then this "how" can be worth researching. But for an isolated activation? This particular case of "how" is certainly something that could be attributed to an accidental button-push, for instance.

"Safari can't connect to the proxy server"

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.