proxy authentication required dialog not going away

Thank you so much, Chris!

Cheers

Carlos

Dear Chris,

thanks a lot for your intelligent solution.

I have been annoyed by this problem for one year!

I think Apple should properly publicize this.

Gabriele

Great to hear that this has helped other people, thanks for saying so!

Unfortunately not fixed in the 10.9.1 Mavericks update.

Could I ask everyone who has this issue to log in to https://bugreport.apple.com/ and let Apple know? They don't monitor these discussions so every report helps.

Thanks,

Chris.

Chris,

Can this method be used in enterprise deployment?

Elmer

Elmer

Only if the enterprise management tools allow system keychain entries to be distributed. That I don't know. But if they can, and you know your enterprise proxies, then it should be possible.

Sorry I can't help more, maybe an enterprise management post might find someone who knows.

Chris.

Thank you ever so much for this ctzsnooze. I am new to OSX and Macs in general, without your help I would have been fustrated for decades! The proxy I setup is university related, therefore I have installed it also on my iPad as I take it to lectures on a daily basis. However, on my iPad the problem persists (i am bombarded with authentication requests every 30 seconds). Is there a solution to this? If so, how would I go about it?

Thanks for your help in advance.

Christopher

Hi Christopher -

I have an iPhone inside the same network as my MacBook, using the same proxies. Although the MacBook had issues with repeated proxy dialogs, the iPhone was never affected with the same problem. This experience was the same for all our users, only MacOSX, not iOS users, were affected.

So maybe your issue on the iPad is different? Once proxy settings are saved in the iPad, you should not have to keep re-entering them. If you keep having issues with the iPad, I would suggest some of the basic resets, including rebuilding your network connection settings cleanly from scratch.

Sorry I can't be more helpful at this point.

Chris.

@e.a.t,

Your suggestion, if I understand it properly, is to select the hard disk itself, then use the Finder to allow user-level read-write access to all files on the entire hard disk? In practice this would put an inherited ACL at the root level of the machine allowing you to read, write and delete any file on the whole machine (including other users).

I can imagine that this would fix the dialog issue.

However, it would be extremely hazardous from a security perspective, because it allows any person with your user access the ability to wreck your entire machine. I would not recommend using this approach as it circumvents most of the major security features of the machine.

Chris.

Dear Chris,

The proxy server provided to me by my institute doesn't require authentication so I don't have the same problems as you guys with multiple annoying requests for authentication.

However, Safari still ignores proxy settings. I tried the Squidman solution and that failed too. Mozilla works fine though.

Any ideas why?

K.

I can't give you a specific answer, but it sounds like it could be a Safari specific problem, perhaps corrupt preferences, perhaps cache issues. In general I'd:

- make a new user and see if they have the same problem (rules out user level prefs issues)

- do a shift restart

- clear all caches manually and restart

- look in console for clues

- consider clearing all network settings by clearing Library/SystemConfiguration

- consider temporarily disabling all internet plugins (put in a different folder)

- considern clearing all DNS caches

All the above is fairly generic advice... not specific, exactly, to your problem, but could help clear an issue that perhaps might cause your problem.

Chris

CHris, you legend! You saved me serious blushes at my all Windows workplace 😉

Hi Chris,

your solution works quite well for single user of a macbook or imac. But we are having this same issue on a shared iMac. Which means we can't store the keychain info into the System area as all users will then be able to easily see the password used for proxy authentication.

Is there a way to make your solution work on a shared machine without compromising the security aspect as described above.

at our work we are behind a proxy that requires authentication and that authentication is based on AD accounts credentials.

thanks

Hi Aerys

Good question.

Maybe you could test this... If the system keychain entries are stored by an admin user, is an admin level password required to view the password? If so, then your shared users could be configured as non-admin users, and they would not be able to open the keychain entry.

It also may be possible to more severely restrict access to these passwords using the unix chmod terminal commands, say to something like only root/wheel for read access, denying everyone else. I use batchmod for this. Depending on those settings, with an admin password might still be able to access them but there are bits of the system that even an admin can't easily read so you could set permissions very strictly if needed. The downside is that this might make these entries difficult to delete later on....

Please let us know what works for you - thanks!

Chris.

Now appears something in my app store, but it still looks weird and does not work. Do you know why?

Perfect, it worked! Thanks.