06-26-2009, 11:39 PM
|
 |
Proprietor
|
|
Join Date: Nov 2008
Posts: 2,036
|
|
KB14674 - Browsing HTTPS web sites fails when using a proxy server that requires auth
KB14674 - Browsing HTTPS web sites fails when using a proxy server that requires authentication
Environment
- BlackBerry® Enterprise Server version 4.1
- SDR140052
Overview
When attempting to access a Hypertext Transfer Protocol over Secure Sockets Layer (HTTPS) web site using a proxy server that requires authentication, the BlackBerry smartphone fails to access the HTTPS web site.
Cause
The BlackBerry Enterprise Server is configured to use authentication from the BlackBerry smartphone. The BlackBerry Enterprise Server requests the HTTPS web site from the proxy server. When the proxy server returns the HTTP 407 error message indicating that authentication is required, the BlackBerry Enterprise Server does not relay this request to the BlackBerry smartphone. Instead, it requests the web site from the proxy server two more times without authentication credentials. After the third failed attempt, the BlackBerry Enterprise Server attempts to browse the HTTPS web site without using the proxy server. If the firewall is configured to only allow requests from the proxy server, this attempt fails. Otherwise, the BlackBerry smartphone accesses the HTTPS web site without using the proxy server.
Resolution
This is a previously reported issue that has been escalated internally to our development team. No resolution time frame is currently available.
Workaround
To configure the BlackBerry Enterprise Server to provide login credentials directly to the proxy server, complete the following steps:
Important: Restarting certain BlackBerry Enterprise Server services will delay email message delivery to BlackBerry smartphones. For more information, see KB04789.
- On the BlackBerry Enterprise Server, open BlackBerry Manager.
- In the Explorer View pane, select the appropriate BlackBerry MDS Connection Service, shown as server_name>_MDS-CS_connection_service_number>.
- In the right-side pane, click Edit Properties to launch the BlackBerry MDS Connection Service window.
- In the BlackBerry MDS Connection Service window, click Proxy.
- Double-click Proxy Mappings to display the Proxy Mappings dialog box.
- Click the proxy mapping for HTTPS Traffic shown as https://.* in a default configuration and then click Properties.
- Type the appropriate information in the User Name, Password and Password (Confirmation) fields as necessary.
- Click Apply, and then OK. Click OK until you are at the main screen.
- Restart the BlackBerry MDS Connection Service for the changes to take effect.
Note: Following these changes, it is not possible to track websites frequented by individual users on the proxy server because all HTTPS traffic passes through the proxy server using the same user login. To track the websites frequented by individual users, refer to the BlackBerry Enterprise Server logs.
__________________
http://blog.port3101.org/hdawg/
The views expressed by me on Port3101 and its affiliated sites are my own and do not necessarily reflect the views of my employer.
|
Linear Mode
