Proxy authentication specifying domain

Proxy authentication specifying domain

Postby radrob77 » 01.10.2016, 12:29

Hi,

I have been using WSUSOFFLINE for quite some time and love it.

Recently, our organisation has moved across to SPA (Secure Proxy Authentication) and in turn now have to specify the domain in our usernames whilst authenticating to the proxy server. Our proxy username now needs to be appended by the domain in the following format: username@domain

Since moving across to SPA (and having to specify the domain with the @ symbol, now WSUSOFFLINE thinks the domain is the proxy server settings.

This is what the UpdateGenerator.exe proxy settings suggest:
Code: Select all
http://username:@server:port

However, as our new SPA settings requires to specify the domain our string looks like this now:
Code: Select all
http://username@domain:@server:port

The errors state unable to resolve the server. Essentially, it thinks our domain is the proxy server.
Are you able to advise if there is a work around to this situation please.
radrob77
 
Posts: 1
Joined: 01.10.2016, 12:00

Re: Proxy authentication specifying domain

Postby harry » 01.10.2016, 14:50

Please try with escaped @ (\@):
Code: Select all
http://username\@domain:@server:port

[source]
harry
 
Posts: 700
Joined: 29.10.2009, 18:02

Re: Proxy authentication specifying domain

Postby nigelh » 08.05.2017, 03:05

Hi,
I have tried the workaround using the escaped @, but get a parsing error.

This is the error message (user name and password obscured, the lengths are correct):

Error parsing proxy URL http://xxxxx.yyyyyyyy\@detnsw:*******@proxy.det.nsw.edu.au:8080: Bad port number.

The port number is correct. I am using version 10.9.2 Thanks for any advice, the product is very useful!
nigelh
 
Posts: 3
Joined: 08.05.2017, 02:56

Re: Proxy authentication specifying domain

Postby WSUSUpdateAdmin » 08.05.2017, 14:35

Hi.

Please try the "NetBIOS\sAMAccountName" syntax: http://domain\username:password@server:port

RTW
WSUSUpdateAdmin
Administrator
 
Posts: 2123
Joined: 07.07.2009, 15:38

Re: Proxy authentication specifying domain

Postby nigelh » 09.05.2017, 00:26

Thanks. I tried that but no go.

Figuring that the "\" required escaping I tried domain\\PreWin2000username

This does not work for the initial check for UpdateGenerator updates, but works once the process gets to the actual Windows Update download. This is the output:

Code: Select all
Starting WSUS Offline Update download (v. 10.9.2) for w61-x64 glb...
Checking for sufficient file system rights...
Cleaning up existing directories...
Preserving custom language and architecture additions and removals...
Updating static and exclude definitions for download and update...
--2017-05-09 08:29:45--  http://download.wsusoffline.net/StaticDownloadLinks-o2k10-glb.txt
Resolving proxy.det.nsw.edu.au... 153.107.192.75, 153.107.193.75
Connecting to proxy.det.nsw.edu.au|153.107.192.75|:8080... connected.
Proxy request sent, awaiting response... 407 Proxy Authentication Required
2017-05-09 08:29:45 ERROR 407: Proxy Authentication Required.

--2017-05-09 08:29:45--  http://download.wsusoffline.net/StaticDownloadLinks-o2k10-x64-glb.txt
Connecting to proxy.det.nsw.edu.au|153.107.192.75|:8080... connected.
Proxy request sent, awaiting response... 407 Proxy Authentication Required
2017-05-09 08:29:45 ERROR 407: Proxy Authentication Required.

--2017-05-09 08:29:45--  http://download.wsusoffline.net/StaticDownloadLinks-win-glb.txt
Connecting to proxy.det.nsw.edu.au|153.107.192.75|:8080... connected.
Proxy request sent, awaiting response... 407 Proxy Authentication Required
2017-05-09 08:29:45 ERROR 407: Proxy Authentication Required.

No URLs found in ../exclude/ExcludeDownloadFiles-modified.txt.
--2017-05-09 08:29:45--  http://download.wsusoffline.net/StaticUpdateIds-w60-x64.txt
Resolving proxy.det.nsw.edu.au... 153.107.192.75, 153.107.193.75
Connecting to proxy.det.nsw.edu.au|153.107.192.75|:8080... connected.
Proxy request sent, awaiting response... 407 Proxy Authentication Required
2017-05-09 08:29:45 ERROR 407: Proxy Authentication Required.

--2017-05-09 08:29:45--  http://download.wsusoffline.net/StaticUpdateIds-w60-x86.txt
Connecting to proxy.det.nsw.edu.au|153.107.192.75|:8080... connected.
Proxy request sent, awaiting response... 407 Proxy Authentication Required
2017-05-09 08:29:45 ERROR 407: Proxy Authentication Required.

--2017-05-09 08:29:45--  http://download.wsusoffline.net/StaticUpdateIds-w61-seconly.txt
Connecting to proxy.det.nsw.edu.au|153.107.192.75|:8080... connected.
Proxy request sent, awaiting response... 407 Proxy Authentication Required
2017-05-09 08:29:45 ERROR 407: Proxy Authentication Required.

--2017-05-09 08:29:45--  http://download.wsusoffline.net/StaticUpdateIds-w62-seconly.txt
Connecting to proxy.det.nsw.edu.au|153.107.192.75|:8080... connected.
Proxy request sent, awaiting response... 407 Proxy Authentication Required
2017-05-09 08:29:45 ERROR 407: Proxy Authentication Required.

--2017-05-09 08:29:45--  http://download.wsusoffline.net/StaticUpdateIds-w63-seconly.txt
Connecting to proxy.det.nsw.edu.au|153.107.192.75|:8080... connected.
Proxy request sent, awaiting response... 407 Proxy Authentication Required
2017-05-09 08:29:45 ERROR 407: Proxy Authentication Required.

--2017-05-09 08:29:45--  http://download.wsusoffline.net/StaticUpdateIds-wupre-w60.txt
Connecting to proxy.det.nsw.edu.au|153.107.192.75|:8080... connected.
Proxy request sent, awaiting response... 407 Proxy Authentication Required
2017-05-09 08:29:45 ERROR 407: Proxy Authentication Required.

Restoring custom language and architecture additions and removals...
Downloading/validating mkisofs tool...
--2017-05-09 08:29:45--  http://download.wsusoffline.net/mkisofs.exe
Resolving proxy.det.nsw.edu.au... 153.107.193.75, 153.107.192.75
Connecting to proxy.det.nsw.edu.au|153.107.193.75|:8080... connected.
Proxy request sent, awaiting response... 407 Proxy Authentication Required
2017-05-09 08:29:45 ERROR 407: Proxy Authentication Required.

Warning: Download of mkisofs tool failed.
Warning: Integrity database ..\client\md\hashes-wsus.txt not found.
Downloading/validating most recent Windows Update catalog file...
--2017-05-09 08:29:45--  http://download.windowsupdate.com/microsoftupdate/v6/wsusscan/wsusscn2.cab
Resolving proxy.det.nsw.edu.au... 153.107.193.75, 153.107.192.75
Connecting to proxy.det.nsw.edu.au|153.107.193.75|:8080... connected.
Proxy request sent, awaiting response... 200 OK
Length: 209404298 (200M) [application/vnd.ms-cab-compressed]
Server file no newer than local file `../client/wsus/wsusscn2.cab' -- not retrieving.

Verifying digital file signature of Windows Update catalog file...
Creating integrity database for Windows Update catalog file...
                                                          Warning: Integrity database ..\client\md\hashes-dotnet.txt not found.
Downloading/validating installation files for .NET Frameworks 3.5 SP1 and 4.x...
--2017-05-09 08:29:51--  http://download.microsoft.com/download/2/0/e/20e90413-712f-438c-988e-fdaa79a8ac3d/dotnetfx35.exe
Resolving proxy.det.nsw.edu.au... 153.107.193.75, 153.107.192.75
Connecting to proxy.det.nsw.edu.au|153.107.193.75|:8080... connected.
Proxy request sent, awaiting response... 200 OK
Length: 242743296 (231M) [application/octet-stream]
Server file no newer than local file `../client/dotnet/dotnetfx35.exe' -- not retrieving.

--2017-05-09 08:29:51--  http://download.microsoft.com/download/C/3/A/C3A5200B-D33C-47E9-9D70-2F7C65DAAD94/NDP46-KB3045557-x86-x64-AllOS-ENU.exe
Connecting to proxy.det.nsw.edu.au|153.107.193.75|:8080... connected.
Proxy request sent, awaiting response... 200 OK
Length: 65444688 (62M) [application/octet-stream]
Server file no newer than local file `../client/dotnet/NDP46-KB3045557-x86-x64-AllOS-ENU.exe' -- not retrieving.

--2017-05-09 08:29:51--  http://download.microsoft.com/download/5/4/C/54C214DA-370D-4CD8-8FA4-163603E02BA3/NDP46-KB3045557-x86-x64-AllOS-DEU.exe
Connecting to proxy.det.nsw.edu.au|153.107.193.75|:8080... connected.
Proxy request sent, awaiting response... 200 OK
Length: 6696464 (6.4M) [application/octet-stream]
Server file no newer than local file `../client/dotnet/NDP46-KB3045557-x86-x64-AllOS-DEU.exe' -- not retrieving.

--2017-05-09 08:29:51--  http://download.microsoft.com/download/F/9/4/F942F07D-F26F-4F30-B4E3-EBD54FABA377/NDP462-KB3151800-x86-x64-AllOS-ENU.exe
Connecting to proxy.det.nsw.edu.au|153.107.193.75|:8080... connected.
Proxy request sent, awaiting response... 200 OK
Length: 62008080 (59M) [application/octet-stream]
Server file no newer than local file `../client/dotnet/NDP462-KB3151800-x86-x64-AllOS-ENU.exe' -- not retrieving.

--2017-05-09 08:29:51--  http://download.microsoft.com/download/C/3/D/C3DCF34C-6239-4301-9251-AA6BC675F7A7/NDP462-KB3151800-x86-x64-AllOS-DEU.exe
Connecting to proxy.det.nsw.edu.au|153.107.193.75|:8080... connected.
Proxy request sent, awaiting response... 200 OK
Length: 5589840 (5.3M) [application/octet-stream]
Server file no newer than local file `../client/dotnet/NDP462-KB3151800-x86-x64-AllOS-DEU.exe' -- not retrieving.


Extracting Microsoft's update catalog file package.xml...
Found valid list of superseded updates.
Verifying integrity of existing updates for dotnet x64-glb...


P.S. by PreWin2000Username I mean samAccountName.
Last edited by nigelh on 09.05.2017, 03:05, edited 1 time in total.
nigelh
 
Posts: 3
Joined: 08.05.2017, 02:56

Re: Proxy authentication specifying domain

Postby nigelh » 09.05.2017, 02:37

I have checked with our IT department - the Windows Updates URL is on our organisation's proxy whitelist, and no authentication is required, which would explain why it succeeds. The wsusoffline update check fails as its URL requires proxy authentication.

So the authentication is still failing even with the escaped backslash.
nigelh
 
Posts: 3
Joined: 08.05.2017, 02:56

Re: Proxy authentication specifying domain

Postby hbuhrmester » 09.05.2017, 10:28

Try percent encoding of the first "at" sign like:

Code: Select all
http://username%40domain:password@proxy-server:port


https://en.wikipedia.org/wiki/Percent-encoding
https://en.wikipedia.org/wiki/Internati ... Identifier
hbuhrmester
 
Posts: 326
Joined: 11.10.2013, 21:59

Re: Proxy authentication specifying domain

Postby antonio542 » 29.11.2018, 13:30

To download the updates, I do this: I have copied the WsusOffline´s folder on the TMGServer and I have configured the proxy on this way: http://localhost:8080 , Just this :)
antonio542
 
Posts: 1
Joined: 29.11.2018, 13:23


Return to Download

Who is online

Users browsing this forum: No registered users and 15 guests