Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

proxy authentication required dialog not going away

I have had a first generation MacBook unibody (not yet named MacBook pro) 13", and have been using it perfectly for 4 years. I rely on HTTP and HTTPS proxy heavily to browse web, due to certain filterings in my country.


I use Google Chrome's ProxySwitchy plugin to switch to my proxy (it's a squid proxy) and it uses scutil to change the systemwide proxy. My proxy requires authentication. Now I had no problems on my mac never ever,


But i've moved to a Retina mac a couple days now and whenever I enable this proxy, the proxy authentication required dialog bugs me so much I'm forced to disable proxy and be unable to use this new mac. It seems that all sorts of applications trigger this and it happens like once or twice every minute, and only for HTTPS proxy.


There's no remember me box or any options in keychain to make it not happen, and I have to type in a long username and password everytime for every app to work, sometimes even when I open a tab in google chrome it pops again!


If someone could not help me with this, I'd have to dump this new Retina mac and have a very bad memory of it.



User uploaded file

MacBook Pro with Retina display, OS X Mountain Lion (10.8.1)

Posted on Sep 9, 2012 8:54 AM

Reply
Question marked as Best reply

Posted on Nov 19, 2013 5:27 PM

Do not use the suggestion to unload the notification center, and don't use squidman.


First try this solution, which is simpler and better.

Usually a proxy authentication dialog allows the user the option to 'allow once' or 'always' etc, and to save the proxy login details to the user's login keychain.

But under both 10.8 and in particular 10.9 whenever a proxy is in use, the user gets bombarded with multiple recurrent proxy authentication dialogs without any save options and without any identifier.

Using the terminal command nettop, I discovered that the offending dialogs come from system processes, most notably syncdefaultsd. (How to do this at the end of the post)

The problem is that syncdefaultsd is not keychain aware. It needs access to the user's proxy settings at regular intervals, but can't get them from the user's login keychain. It's proxy request dialog does not have the option to save the details to the user's keychain, and worse still does not identify syncdefaultsd as the requesting process. Even if you open your login keychain to allow any application access to your proxy, syncdefaultsd will still keep asking for your proxy details.

The solution is to ensure that you have working proxy settings saved in the *system* keychain, not just your personal login keychain.

So when you next get one of these dialogs:

1. Note the server name that is requesting authentication, the port (usually 8080) and if it is an http or https request. Typically it will be something in the form https://someproxyserver.someorganization.com:8080

2. See if you already have an entry for that server in your login keychain. If not, make one manually, (being sure to enter the whole thing as per the example above with the :8080 at the end). Typically that there needs to be two separate keychain entries per proxy server, one for http and a second for https, though syncdefaultsd only uses https.

3. Once you have login keychain entries for the proxy server, double-click them and ensure that under Access all applications are allowed, and that your user name is saved.

4. Now for the fun bit. Option-drag and drop these entries into your system keychain. Click on the system keychain, and confirm that they are there, and that all the settings are exactly right.

For good measure, do a shift-restart then a normal restart.

You should now get no more annoying dialogs for that particular proxy server. If your proxy server has more than one alias, or if you have several, then whenever you get a new unidentified dialog, repeat the above.

I discovered it using the terminal command nettop, typing into the terminal:

nettop -m tcp

This lists all active network processes. If you quit all apps you should still see quite a few network processes. If you see syncdefaultsd, wait for it to go away, or kill it via the Activity Monitor. If you haven't done the fix as above, and you open Safari, you'll see syncdefaultsd open shortly after Safari, and the annoying dialog immediately appears. After the fix is implemented, the dialogs don't appear when syncdefaultsd tries to start up.

Hope this helps someone, and that Apple fixes it in 10.9.1

Cheers

Chris.

38 replies
Question marked as Best reply

Nov 19, 2013 5:27 PM in response to AbiusXX

Do not use the suggestion to unload the notification center, and don't use squidman.


First try this solution, which is simpler and better.

Usually a proxy authentication dialog allows the user the option to 'allow once' or 'always' etc, and to save the proxy login details to the user's login keychain.

But under both 10.8 and in particular 10.9 whenever a proxy is in use, the user gets bombarded with multiple recurrent proxy authentication dialogs without any save options and without any identifier.

Using the terminal command nettop, I discovered that the offending dialogs come from system processes, most notably syncdefaultsd. (How to do this at the end of the post)

The problem is that syncdefaultsd is not keychain aware. It needs access to the user's proxy settings at regular intervals, but can't get them from the user's login keychain. It's proxy request dialog does not have the option to save the details to the user's keychain, and worse still does not identify syncdefaultsd as the requesting process. Even if you open your login keychain to allow any application access to your proxy, syncdefaultsd will still keep asking for your proxy details.

The solution is to ensure that you have working proxy settings saved in the *system* keychain, not just your personal login keychain.

So when you next get one of these dialogs:

1. Note the server name that is requesting authentication, the port (usually 8080) and if it is an http or https request. Typically it will be something in the form https://someproxyserver.someorganization.com:8080

2. See if you already have an entry for that server in your login keychain. If not, make one manually, (being sure to enter the whole thing as per the example above with the :8080 at the end). Typically that there needs to be two separate keychain entries per proxy server, one for http and a second for https, though syncdefaultsd only uses https.

3. Once you have login keychain entries for the proxy server, double-click them and ensure that under Access all applications are allowed, and that your user name is saved.

4. Now for the fun bit. Option-drag and drop these entries into your system keychain. Click on the system keychain, and confirm that they are there, and that all the settings are exactly right.

For good measure, do a shift-restart then a normal restart.

You should now get no more annoying dialogs for that particular proxy server. If your proxy server has more than one alias, or if you have several, then whenever you get a new unidentified dialog, repeat the above.

I discovered it using the terminal command nettop, typing into the terminal:

nettop -m tcp

This lists all active network processes. If you quit all apps you should still see quite a few network processes. If you see syncdefaultsd, wait for it to go away, or kill it via the Activity Monitor. If you haven't done the fix as above, and you open Safari, you'll see syncdefaultsd open shortly after Safari, and the annoying dialog immediately appears. After the fix is implemented, the dialogs don't appear when syncdefaultsd tries to start up.

Hope this helps someone, and that Apple fixes it in 10.9.1

Cheers

Chris.

Sep 10, 2012 7:46 AM in response to AbiusXX

What I would do in your place is to wipe out the proxy configuration completely and recreate it. Delete the keychain items that refer to it, and also delete it from the network settings. You might even have to delete some or all of the files in the folder /Library/Preferences/SystemConfiguration and recreate all your network settings.

Sep 11, 2012 6:15 AM in response to Linc Davis

I'll try that.

It's getting less frequent, it seems that everytime an application asks for access to keychain entry on proxy and I click always allow, it no longer pops up the dialog for that particular application.


Either something is wrong with scutil command line utility (which Chrome uses to set proxy on system) or the API behind it.

Jan 29, 2013 7:31 PM in response to AbiusXX

I know this is a bit tricky and i am not a technical expert..
But i found it myself and whoa it works..


1. Download Squidman and install it.


2. Run it and go to preferences and under "Parent" tab enter your proxy settings with authentication details.


User uploaded file


3. Now, go under "General" tab and enter "3128" or any other number (four digits and greater than 1024) in HTTP Port and select cahe size as much you want and check all checkboxes.


User uploaded file

4. Click save.

5. Click Start on smaller Squid window with a pink octopus(i love that symbol).


User uploaded file

It will Start with a message "Squid is running"


User uploaded file

6. Now, go to your proxy settings unser System Preferences>Network>Advanced>Proxies Tab and chech
HTTP, HTTPS, FTP and for each enter proxy as "127.0.0.1" or "localhost" and port "3128" (or the number you entered in HTTP Port earlier.


User uploaded file

7. Thats, the best point, DONE!


Basically you are running a Squid proxy server on your system and now web content reaches you via two proxy servers, one of your corporate and the other on your system. You may think that this might slow down your connection as there are two proxy servers involved. My friend that is 100% correct. So a solution.

While selecting cache size remember to keep it above 1 GB. Believe me at first your internet would lag a bit, but after about 10 hours of usage it would be faster than ever. Atleast for me this has happened.


One important thing the use of other proxy server here doesn't mean that you are anonymous to the corporate proxy server as some programs like "Tor" or "Hotspot Shield" does. It simply creates another layer of proxy server. IP address spoofing is not the thing done here.


Any further queries will be greatly acknowledged.


I have done this for about 3 days and trust me that irritating Dialog never appeared. Not, even a single time.


Good Luck!

proxy authentication required dialog not going away

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.