Proxy authentication specifying domain

[radrob77]

Hi,

I have been using WSUSOFFLINE for quite some time and love it.

Recently, our organisation has moved across to SPA (Secure Proxy Authentication) and in turn now have to specify the domain in our usernames whilst authenticating to the proxy server. Our proxy username now needs to be appended by the domain in the following format: username@domain

Since moving across to SPA (and having to specify the domain with the @ symbol, now WSUSOFFLINE thinks the domain is the proxy server settings.

This is what the UpdateGenerator.exe proxy settings suggest:

Code: Select all

http://username:@server:port

However, as our new SPA settings requires to specify the domain our string looks like this now:

Code: Select all

http://username@domain:@server:port

The errors state unable to resolve the server. Essentially, it thinks our domain is the proxy server.
Are you able to advise if there is a work around to this situation please.

[harry]

Please try with escaped @ (\@):

Code: Select all

http://username\@domain:@server:port

[source]

[nigelh]

Hi,
I have tried the workaround using the escaped @, but get a parsing error.

This is the error message (user name and password obscured, the lengths are correct):

Error parsing proxy URL http://xxxxx.yyyyyyyy\@detnsw:*******@proxy.det.nsw.edu.au:8080: Bad port number.

The port number is correct. I am using version 10.9.2 Thanks for any advice, the product is very useful!

[WSUSUpdateAdmin]

Hi.

Please try the "NetBIOS\sAMAccountName" syntax: http://domain\username:password@server:port

RTW

[nigelh]

Thanks. I tried that but no go.

Figuring that the "\" required escaping I tried domain\\PreWin2000username

This does not work for the initial check for UpdateGenerator updates, but works once the process gets to the actual Windows Update download. This is the output:

Code: Select all

Starting WSUS Offline Update download (v. 10.9.2) for w61-x64 glb...
Checking for sufficient file system rights...
Cleaning up existing directories...
Preserving custom language and architecture additions and removals...
Updating static and exclude definitions for download and update...
--2017-05-09 08:29:45--  http://download.wsusoffline.net/StaticDownloadLinks-o2k10-glb.txt
Resolving proxy.det.nsw.edu.au... 153.107.192.75, 153.107.193.75
Connecting to proxy.det.nsw.edu.au|153.107.192.75|:8080... connected.
Proxy request sent, awaiting response... 407 Proxy Authentication Required
2017-05-09 08:29:45 ERROR 407: Proxy Authentication Required.

--2017-05-09 08:29:45--  http://download.wsusoffline.net/StaticDownloadLinks-o2k10-x64-glb.txt
Connecting to proxy.det.nsw.edu.au|153.107.192.75|:8080... connected.
Proxy request sent, awaiting response... 407 Proxy Authentication Required
2017-05-09 08:29:45 ERROR 407: Proxy Authentication Required.

--2017-05-09 08:29:45--  http://download.wsusoffline.net/StaticDownloadLinks-win-glb.txt
Connecting to proxy.det.nsw.edu.au|153.107.192.75|:8080... connected.
Proxy request sent, awaiting response... 407 Proxy Authentication Required
2017-05-09 08:29:45 ERROR 407: Proxy Authentication Required.

No URLs found in ../exclude/ExcludeDownloadFiles-modified.txt.
--2017-05-09 08:29:45--  http://download.wsusoffline.net/StaticUpdateIds-w60-x64.txt
Resolving proxy.det.nsw.edu.au... 153.107.192.75, 153.107.193.75
Connecting to proxy.det.nsw.edu.au|153.107.192.75|:8080... connected.
Proxy request sent, awaiting response... 407 Proxy Authentication Required
2017-05-09 08:29:45 ERROR 407: Proxy Authentication Required.

--2017-05-09 08:29:45--  http://download.wsusoffline.net/StaticUpdateIds-w60-x86.txt
Connecting to proxy.det.nsw.edu.au|153.107.192.75|:8080... connected.
Proxy request sent, awaiting response... 407 Proxy Authentication Required
2017-05-09 08:29:45 ERROR 407: Proxy Authentication Required.

--2017-05-09 08:29:45--  http://download.wsusoffline.net/StaticUpdateIds-w61-seconly.txt
Connecting to proxy.det.nsw.edu.au|153.107.192.75|:8080... connected.
Proxy request sent, awaiting response... 407 Proxy Authentication Required
2017-05-09 08:29:45 ERROR 407: Proxy Authentication Required.

--2017-05-09 08:29:45--  http://download.wsusoffline.net/StaticUpdateIds-w62-seconly.txt
Connecting to proxy.det.nsw.edu.au|153.107.192.75|:8080... connected.
Proxy request sent, awaiting response... 407 Proxy Authentication Required
2017-05-09 08:29:45 ERROR 407: Proxy Authentication Required.

--2017-05-09 08:29:45--  http://download.wsusoffline.net/StaticUpdateIds-w63-seconly.txt
Connecting to proxy.det.nsw.edu.au|153.107.192.75|:8080... connected.
Proxy request sent, awaiting response... 407 Proxy Authentication Required
2017-05-09 08:29:45 ERROR 407: Proxy Authentication Required.

--2017-05-09 08:29:45--  http://download.wsusoffline.net/StaticUpdateIds-wupre-w60.txt
Connecting to proxy.det.nsw.edu.au|153.107.192.75|:8080... connected.
Proxy request sent, awaiting response... 407 Proxy Authentication Required
2017-05-09 08:29:45 ERROR 407: Proxy Authentication Required.

Restoring custom language and architecture additions and removals...
Downloading/validating mkisofs tool...
--2017-05-09 08:29:45--  http://download.wsusoffline.net/mkisofs.exe
Resolving proxy.det.nsw.edu.au... 153.107.193.75, 153.107.192.75
Connecting to proxy.det.nsw.edu.au|153.107.193.75|:8080... connected.
Proxy request sent, awaiting response... 407 Proxy Authentication Required
2017-05-09 08:29:45 ERROR 407: Proxy Authentication Required.

Warning: Download of mkisofs tool failed.
Warning: Integrity database ..\client\md\hashes-wsus.txt not found.
Downloading/validating most recent Windows Update catalog file...
--2017-05-09 08:29:45--  http://download.windowsupdate.com/microsoftupdate/v6/wsusscan/wsusscn2.cab
Resolving proxy.det.nsw.edu.au... 153.107.193.75, 153.107.192.75
Connecting to proxy.det.nsw.edu.au|153.107.193.75|:8080... connected.
Proxy request sent, awaiting response... 200 OK
Length: 209404298 (200M) [application/vnd.ms-cab-compressed]
Server file no newer than local file `../client/wsus/wsusscn2.cab' -- not retrieving.

Verifying digital file signature of Windows Update catalog file...
Creating integrity database for Windows Update catalog file...
                                                          Warning: Integrity database ..\client\md\hashes-dotnet.txt not found.
Downloading/validating installation files for .NET Frameworks 3.5 SP1 and 4.x...
--2017-05-09 08:29:51--  http://download.microsoft.com/download/2/0/e/20e90413-712f-438c-988e-fdaa79a8ac3d/dotnetfx35.exe
Resolving proxy.det.nsw.edu.au... 153.107.193.75, 153.107.192.75
Connecting to proxy.det.nsw.edu.au|153.107.193.75|:8080... connected.
Proxy request sent, awaiting response... 200 OK
Length: 242743296 (231M) [application/octet-stream]
Server file no newer than local file `../client/dotnet/dotnetfx35.exe' -- not retrieving.

--2017-05-09 08:29:51--  http://download.microsoft.com/download/C/3/A/C3A5200B-D33C-47E9-9D70-2F7C65DAAD94/NDP46-KB3045557-x86-x64-AllOS-ENU.exe
Connecting to proxy.det.nsw.edu.au|153.107.193.75|:8080... connected.
Proxy request sent, awaiting response... 200 OK
Length: 65444688 (62M) [application/octet-stream]
Server file no newer than local file `../client/dotnet/NDP46-KB3045557-x86-x64-AllOS-ENU.exe' -- not retrieving.

--2017-05-09 08:29:51--  http://download.microsoft.com/download/5/4/C/54C214DA-370D-4CD8-8FA4-163603E02BA3/NDP46-KB3045557-x86-x64-AllOS-DEU.exe
Connecting to proxy.det.nsw.edu.au|153.107.193.75|:8080... connected.
Proxy request sent, awaiting response... 200 OK
Length: 6696464 (6.4M) [application/octet-stream]
Server file no newer than local file `../client/dotnet/NDP46-KB3045557-x86-x64-AllOS-DEU.exe' -- not retrieving.

--2017-05-09 08:29:51--  http://download.microsoft.com/download/F/9/4/F942F07D-F26F-4F30-B4E3-EBD54FABA377/NDP462-KB3151800-x86-x64-AllOS-ENU.exe
Connecting to proxy.det.nsw.edu.au|153.107.193.75|:8080... connected.
Proxy request sent, awaiting response... 200 OK
Length: 62008080 (59M) [application/octet-stream]
Server file no newer than local file `../client/dotnet/NDP462-KB3151800-x86-x64-AllOS-ENU.exe' -- not retrieving.

--2017-05-09 08:29:51--  http://download.microsoft.com/download/C/3/D/C3DCF34C-6239-4301-9251-AA6BC675F7A7/NDP462-KB3151800-x86-x64-AllOS-DEU.exe
Connecting to proxy.det.nsw.edu.au|153.107.193.75|:8080... connected.
Proxy request sent, awaiting response... 200 OK
Length: 5589840 (5.3M) [application/octet-stream]
Server file no newer than local file `../client/dotnet/NDP462-KB3151800-x86-x64-AllOS-DEU.exe' -- not retrieving.


Extracting Microsoft's update catalog file package.xml...
Found valid list of superseded updates.
Verifying integrity of existing updates for dotnet x64-glb...


P.S. by PreWin2000Username I mean samAccountName.

[nigelh]

I have checked with our IT department - the Windows Updates URL is on our organisation's proxy whitelist, and no authentication is required, which would explain why it succeeds. The wsusoffline update check fails as its URL requires proxy authentication.

So the authentication is still failing even with the escaped backslash.

[hbuhrmester]

Try percent encoding of the first "at" sign like:

Code: Select all

http://username%40domain:password@proxy-server:port

https://en.wikipedia.org/wiki/Percent-encoding
https://en.wikipedia.org/wiki/Internati ... Identifier

[antonio542]

To download the updates, I do this: I have copied the WsusOffline´s folder on the TMGServer and I have configured the proxy on this way: http://localhost:8080 , Just this