SecPatchChk and ISA proxy servers

[David Ritchie]

I am trying to configure the Security Patch Check to automaticly pull the latest security
patch catalog down. Unfortunately, I am running
against a Microsoft ISA proxy server as my
gateway, and it is returning a 407 error, asking for authentication.

I did have the ftp_proxy variable set to
http://10.10.2.200:80 and it tried to connect,
but it fails due to the need for authentication.

I did some poking around on Google, but did not see anything that jumped
out at me regarding how to pass a userid and password to the proxy server. Anyone else have an idea how this can be done?

[G. Vrijhoeven]

Hi,

Did you try:

http://username:password@host.name/blah

Regards,

Gideon

[RAC_1 · Accepted solution]

Check this. I used it once on linux and it was working then.

http://www.geocities.com/rozmanov/ntlm/

Anil

[RAC_1]

Also have you heard about curl??
That is command line based tool to access internet.

Check it on porting centre.

Anil

[RAC_1]

And this thread.

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=244515

Anil

[G. Vrijhoeven]

Sorrie,

Forget my 1st reply. ( and this one too ) please.

[David Ritchie]

Let me clarify a bit more... the failure is coming from the proxy (ISA requires a userID and password) - so it has nothing to do with the web site itself.

-- Dave

[Chris Watson]

Two options. Check the authentication methods available on the ISA configuration. From memory to need to have "ask for a username/password" and maybe to have "use ntlm" only ticked at the moment.

Another option is for create a rule allowing the source through without any authentication. From memory, you need to create a client set.

[David Ritchie]

and another point of clarification - I would like to be able to use the -r functionality
without doing a seperate step of copying the file into place... but that may not be easily changed. Making changes to the ISA proxy server is a bit more problematic, politically, so I would prefer not making changes to the proxy server.

[David Ritchie]

Thanks for the pointers... found that it was easier to just manually pull the file onto the machine from out FTP server than to try actually getting the windows team to change the configuration of the ISA server...