topic Re: SecPatchChk and ISA proxy servers in Operating System - HP-UX

SecPatchChk and ISA proxy servers

David Ritchie — Fri, 07 May 2004 11:23:46 GMT

I am trying to configure the Security Patch Check to automaticly pull the latest security
patch catalog down. Unfortunately, I am running
against a Microsoft ISA proxy server as my
gateway, and it is returning a 407 error, asking for authentication.

I did have the ftp_proxy variable set to
http://10.10.2.200:80 and it tried to connect,
but it fails due to the need for authentication.

I did some poking around on Google, but did not see anything that jumped
out at me regarding how to pass a userid and password to the proxy server. Anyone else have an idea how this can be done?

Re: SecPatchChk and ISA proxy servers

G. Vrijhoeven — Fri, 07 May 2004 12:59:29 GMT

Hi,

Did you try:

http://username:password@host.name/blah

Regards,

Gideon

Re: SecPatchChk and ISA proxy servers

RAC_1 — Fri, 07 May 2004 13:05:03 GMT

Check this. I used it once on linux and it was working then.

http://www.geocities.com/rozmanov/ntlm/

Anil

Re: SecPatchChk and ISA proxy servers

RAC_1 — Fri, 07 May 2004 13:06:21 GMT

Also have you heard about curl??
That is command line based tool to access internet.

Check it on porting centre.

Anil

Re: SecPatchChk and ISA proxy servers

RAC_1 — Fri, 07 May 2004 13:08:15 GMT

And this thread.

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=244515

Anil

Re: SecPatchChk and ISA proxy servers

G. Vrijhoeven — Fri, 07 May 2004 13:11:20 GMT

Sorrie,

Forget my 1st reply. ( and this one too ) please.

Re: SecPatchChk and ISA proxy servers

David Ritchie — Fri, 07 May 2004 16:42:38 GMT

Let me clarify a bit more... the failure is coming from the proxy (ISA requires a userID and password) - so it has nothing to do with the web site itself.

-- Dave

Re: SecPatchChk and ISA proxy servers

Chris Watson — Mon, 10 May 2004 03:28:08 GMT

Two options. Check the authentication methods available on the ISA configuration. From memory to need to have "ask for a username/password" and maybe to have "use ntlm" only ticked at the moment.

Another option is for create a rule allowing the source through without any authentication. From memory, you need to create a client set.

Re: SecPatchChk and ISA proxy servers

David Ritchie — Mon, 10 May 2004 10:20:45 GMT

and another point of clarification - I would like to be able to use the -r functionality
without doing a seperate step of copying the file into place... but that may not be easily changed. Making changes to the ISA proxy server is a bit more problematic, politically, so I would prefer not making changes to the proxy server.

Re: SecPatchChk and ISA proxy servers

David Ritchie — Fri, 23 Sep 2005 10:01:30 GMT

Thanks for the pointers... found that it was easier to just manually pull the file onto the machine from out FTP server than to try actually getting the windows team to change the configuration of the ISA server...