Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!

10.5: Parental Controls and authenticating proxies System 10.5
If your network is using an authenticating proxy for web access (you need to enter a "proxy password" to access the web), then you'll have trouble if you turn on Parental Controls, as the controls will prevent you from authenticating to the proxy.

The Parental Controls feature works by directing all web access for controlled users to an internal Apache web proxy (this proxy is dynamically started when a Parental Controls user logs in). Unfortunately, this proxy eats the HTTP 407 response authentication credentials, so you end up in a never-ending loop of the proxy demanding to know who you are, and the Parental Controls proxy refusing to let you tell.

Here's one possible solution. Open Terminal and run this command:
sudo chmod a-x /usr/sbin/httpd
Enter your admin password when prompted, then quit Terminal and restart your Mac. It's important to note that the above Terminal command prevents the Apache web server (httpd) from running at all. As such, this fix is only recommended if you need Parental Controls and don't need to host web sites on your Mac. It stops the Parental Controls proxy from running, but it also stops your computer from acting as a web server (because the same Apache httpd program is used to serve your web content).

System updates (i.e. 10.5.5 update) and Apple Security Updates reset parental controls, thus the commands must be re-entered.

[robg adds: I can't confirm this issue nor test the fix...]
    •    
  • Currently 2.73 / 5
  You rated: 2 / 5 (11 votes cast)
 
[15,733 views]  

10.5: Parental Controls and authenticating proxies | 8 comments | Create New Account
Click here to return to the '10.5: Parental Controls and authenticating proxies' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
10.5: Parental Controls and authenticating proxies
Authored by: JC123 on Oct 23, '08 05:51:37PM

I administer 75 Leopard imacs in a primary school environment, Don't require any web filtering from parental controls (proxies job). I needed parental controls to restrict what the pupils can run, delete, move, change, etc. But as we are behind a proxy had no internet access. I still have this problem logged with Apple support and have passed various logs too them to try to resolve the issue.
This was the only resolution I could find which worked and allowed me to control the system and have internet access for restricted accounts, albeit having to go round all machines after important updates and manually reset as I can't get ARD too pass my admin password in terminal remotely.
Incidentally Apple support advised me they were aware of this issue, and that they/he (the support guy) assumed it was fixed with 10.5.3 update, I was running 10.5.4 at the time.



[ Reply to This | # ]
10.5: Parental Controls and authenticating proxies
Authored by: ArtemisG3 on Oct 23, '08 06:19:37PM
I can't get ARD too pass my admin password in terminal remotely

When you "Send UNIX Command" in ARD, click the "User" radio button and type root

That should allow your command to run as root and without a password.

Thanks, for the hint. I am not having the specific problem you describe but some managed accounts are not able to log into some sites. I will see if this fixes that problem, and see if it also decreases page load times.



[ Reply to This | # ]
10.5: Parental Controls and authenticating proxies
Authored by: automandc on Oct 23, '08 07:32:01PM
I had a similar problem operating behind an NTLM protected firewall at work because some webkit applications (e.g., iTunes) did not support the use of a password protected proxy. I solved this problem with Authoxy, which is a great (free) tool that sets up a forwarding proxy on your local machine and takes care of the authentication with the outside proxy. I am not sure how this would interact with the parental controls proxy, but it is worth giving it a try. Authoxy is very easy to set up and use.

[ Reply to This | # ]
10.5: Parental Controls and authenticating proxies
Authored by: cibi3d on Oct 27, '08 07:38:47AM
10.5: Parental Controls and authenticating proxies
Authored by: Andrea on Oct 24, '08 01:10:27AM

I confirm that this hint works fine. I had a problem with parental control and iTunes Music Store and this hint fix this. Basically parental control prevents the access to the home page of the iTunes Music Store. With this hint in place controlled users can access iTunes Music Store without problems.



[ Reply to This | # ]
10.5: Parental Controls and authenticating proxies
Authored by: ArtemisG3 on Oct 24, '08 04:18:15AM

This hint enabled my daughter to be able to use Firefox to log into MySpace (ugh). Previously, only Safari would work. I imagine that this hint will also fix some issues with other websites.

It also speeds up the whole computer slightly (iMac G4/700) by reducing the CPU overhead.

Thanks



[ Reply to This | # ]
A Better Solution
Authored by: ArtemisG3 on Oct 26, '08 08:44:35AM

Disable just the proxy and not the webserver (apache, httpd).

sudo chmod a-x /System/Library/PrivateFrameworks/FamilyControls.framework/Versions/A/Resources/httpsproxyd

via Disable the Parental Controls Content Filter

[ Reply to This | # ]
A Better Solution
Authored by: Andrea on Oct 27, '08 01:28:03AM

Thanks, much better than blocking Apache completely.



[ Reply to This | # ]