Apple Event: May 7th at 7 am PT

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

proxy authentication required dialog not going away

I have had a first generation MacBook unibody (not yet named MacBook pro) 13", and have been using it perfectly for 4 years. I rely on HTTP and HTTPS proxy heavily to browse web, due to certain filterings in my country.


I use Google Chrome's ProxySwitchy plugin to switch to my proxy (it's a squid proxy) and it uses scutil to change the systemwide proxy. My proxy requires authentication. Now I had no problems on my mac never ever,


But i've moved to a Retina mac a couple days now and whenever I enable this proxy, the proxy authentication required dialog bugs me so much I'm forced to disable proxy and be unable to use this new mac. It seems that all sorts of applications trigger this and it happens like once or twice every minute, and only for HTTPS proxy.


There's no remember me box or any options in keychain to make it not happen, and I have to type in a long username and password everytime for every app to work, sometimes even when I open a tab in google chrome it pops again!


If someone could not help me with this, I'd have to dump this new Retina mac and have a very bad memory of it.



User uploaded file

MacBook Pro with Retina display, OS X Mountain Lion (10.8.1)

Posted on Sep 9, 2012 8:54 AM

Reply
Question marked as Best reply

Posted on Nov 19, 2013 5:27 PM

Do not use the suggestion to unload the notification center, and don't use squidman.


First try this solution, which is simpler and better.

Usually a proxy authentication dialog allows the user the option to 'allow once' or 'always' etc, and to save the proxy login details to the user's login keychain.

But under both 10.8 and in particular 10.9 whenever a proxy is in use, the user gets bombarded with multiple recurrent proxy authentication dialogs without any save options and without any identifier.

Using the terminal command nettop, I discovered that the offending dialogs come from system processes, most notably syncdefaultsd. (How to do this at the end of the post)

The problem is that syncdefaultsd is not keychain aware. It needs access to the user's proxy settings at regular intervals, but can't get them from the user's login keychain. It's proxy request dialog does not have the option to save the details to the user's keychain, and worse still does not identify syncdefaultsd as the requesting process. Even if you open your login keychain to allow any application access to your proxy, syncdefaultsd will still keep asking for your proxy details.

The solution is to ensure that you have working proxy settings saved in the *system* keychain, not just your personal login keychain.

So when you next get one of these dialogs:

1. Note the server name that is requesting authentication, the port (usually 8080) and if it is an http or https request. Typically it will be something in the form https://someproxyserver.someorganization.com:8080

2. See if you already have an entry for that server in your login keychain. If not, make one manually, (being sure to enter the whole thing as per the example above with the :8080 at the end). Typically that there needs to be two separate keychain entries per proxy server, one for http and a second for https, though syncdefaultsd only uses https.

3. Once you have login keychain entries for the proxy server, double-click them and ensure that under Access all applications are allowed, and that your user name is saved.

4. Now for the fun bit. Option-drag and drop these entries into your system keychain. Click on the system keychain, and confirm that they are there, and that all the settings are exactly right.

For good measure, do a shift-restart then a normal restart.

You should now get no more annoying dialogs for that particular proxy server. If your proxy server has more than one alias, or if you have several, then whenever you get a new unidentified dialog, repeat the above.

I discovered it using the terminal command nettop, typing into the terminal:

nettop -m tcp

This lists all active network processes. If you quit all apps you should still see quite a few network processes. If you see syncdefaultsd, wait for it to go away, or kill it via the Activity Monitor. If you haven't done the fix as above, and you open Safari, you'll see syncdefaultsd open shortly after Safari, and the annoying dialog immediately appears. After the fix is implemented, the dialogs don't appear when syncdefaultsd tries to start up.

Hope this helps someone, and that Apple fixes it in 10.9.1

Cheers

Chris.

38 replies

Jun 16, 2014 5:40 PM in response to AbiusXX

Hi everyone. This is an interesting thread, i've read most of it. Im running OSX 10.9.3, using Safari and Chrome. I am a proxy tester for my company and need to be able to configure a static proxy assignment on my settings to test filtering issues at different sites. By static, i mean that I configure the proxy IP address and port in settings. I cannot test Safari behaviour at different sites without being able to statically assign a Proxy in this manner. To solve this, I've configured the explicit proxy settings under Network > Advanced > Proxies in my macbook pro OSX 10.9.3 (Mavericks) OS . Our proxy at work does not require authentication so I dont have a pop up, however no matter what I do my Safari and Google Chrome traffic is not going through the Proxy. The way I test whether the Proxy settings work or not is by going to http://whatismyipaddress.com and confirming I should get the IP address of the remote site, not my local internet surfing IP address. Everytime I configure the static proxy I continue to get my local internet surfing IP address (aka "surfing NAT"), and not the remote Proxy's external IP address as I do on Windows machines. The keychain solution doesnt seem like it will help, besides I cannot find anything called a "keychain" in Finder, and System Preferences takes me to iCloud. I've rebooted the machine 2 or 3 times with the same results. Could Apple really have left this big a problem unchecked/unfixed 3 versions after the release of Mavericks?

Jun 16, 2014 6:12 PM in response to goofyzig

I think you didn't understand... It seems that your proxy doesn't ask for an "authentication" pop-up, so you don't have the same problem. "Keychain" is an application in which are stored all your saved passwords, including key proxy. Not part of either the finder or the preference pane. Look at Aplications/utilities/keychain.

If you use proxy authentication, open the keychain and copy de saved keys located in "user" on the left side, and paste them in "system". Don't forget to open the proprieties of each key (http and https) and alow all aplications to acess those items.

Oct 21, 2014 9:35 PM in response to AbiusXX

I have gone through a few of the replies, so apologies if I am double posting.


Firstly, regarding the persistent proxy (with the redtop sign exclamation) I have been told that this is due to perhaps an older proxy being used. Now whether this is server, software, policies, etc, our tech team have not advised, but obviously something is not liking the OS X environment and from my understanding this is only happening from 10.6 or 10.7 (right?). This does only happen on Mac, and yes - it is frustrating. It is basically the need for the proxy server to authenticate on every little bit of information outside of the organisation's servers, so for instance, using iTunes as the example, the pop-up will keep coming up for every album artwork image being read from outside your organization, for every request being made back to Apple to retrieve album metadata (including images/artwork) and so forth. Once validated once (one time) for each bit of information, if you were to refresh the view and new content is available, you would have to authenticate again for each bit of new information. This does not help that iTunes may make requests back to Apple to retrieve updated information of existing material you may already have authenticated against your proxy.


So I do not have an answer for the above.


Below however, in reading some people's comments, there may be slight confusion with a proxy authentication pop-up which appears in Safari, but that cannot be typed into or cancelled out of... quite frustrating and took my a while to fiddle with my settings (as I dislike using third-party tools such as Authoxy etc), but here goes.


What I found solved the stubborn proxy authentication pop-up for me is by the following steps:

  • go into the Network option within System Preferences
  • select the network interface you are using/connected to (WiFi, ethernet, etc)
  • click the advanced button
  • select the proxy tab (in my case I use the automatic proxy configuration but this is just a FYI )
  • in the Bypass proxy settings for these hosts & domains i included the full url followed by /* - for example, if safari is getting stuck on running video's on a website called www.example.com, and although you have the *.example.com in the bypass section, I included www.example.com/*


This resolved my issue. From my understanding, this proxy popup appears and cannot be accessed only on safari for automatically playing videos on a website, whereby a proxy server is configured.


I hope this helps any of you.


fabio

Oct 11, 2016 5:33 AM in response to AbiusXX

Hello, I think i may have the same problem as you but exatly the opposite...

A month ago, i started my new college, and in the rooms they had ethernet that i could connect my mac to,

i had to set up a HTTP & HTTPS in my network preferences with an account & password.. after a lot of frustration i got the internet to work, every time i got the message 'allow keychain to acces such and such application or setting with that account... i pressed always allow.

And now im home, i try and connect to the wifi, and my mac wont see my own house wifi network which i've connected to thousands of times before, in fact it wont see any network, at all

i've tried everything apple told me to do, and there is still no wifi....

help!

proxy authentication required dialog not going away

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.