Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Control » Can´t connect iTunes Update Server
  •  
FloFMS

Messages: 23
Karma: 0
Send a private message to this user
Hello @ll

I can´t connect to the iTunes Update Server when Proxy is aktiv on Mac OS X. In the Kerio Log File i can´t find what´s going wrong.
How can I Diag what´s happen with this error. With deactivated Proxy the Connection to iTunes Update Server works fin.

I installed the latest Kerio Control Appliance 8.5 build 3127 on VMware Server.

Regards Florian
  •  
mlee (Kerio)

Messages: 246
Karma: 16
Send a private message to this user
I can replicate this, I will get back to you when I have more info.

M. 19998

PTSD. BP. OCD. ASPD. BPD. Certified.
  •  
mlee (Kerio)

Messages: 246
Karma: 16
Send a private message to this user
Got some really good help and I got some info for you.

The first hint of the issue is that the user did not login:
{http_handler} [ 5727 ] User not found for IP 172.20.0.11 in request_read_header()

Normally, HTTP proxy should reply with HTTP status code 407 Unauthorized, but it failed in this situation. Digging deeper, it is because iTunes used FQDN (ending with dot) in request URI/Host header. Without last dot, 407 is returned by the proxy;

Then when a user is manually logged in using a web browser, request failed on DNS lookup:
{http_handler} [ 512 ] DNS lookup failed

Again, it is caused by FQDN in request URI.

And if the last dot from request URI/Host header is removed, HTTP proxy failed to connect with following message in the log:
{http_handler} S 513 PROXY https_connect_handler(): connect error 110

Up to this point, unfortunately we know that there is no immediate solution on this. (A bug report was created.) 15492

The workaround at this point is to not use non-transparent proxy I guess.

M.

Edit: Removed some wrong info.

[Updated on: Wed, 11 March 2015 00:44]


PTSD. BP. OCD. ASPD. BPD. Certified.
Previous Topic: Kerio Control Box
Next Topic: DHCP Status Info
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Sat Sep 23 16:37:36 CEST 2017

Total time taken to generate the page: 0.00364 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.