Technote 027

LANrev patch management behind proxy servers requiring authentication

Problem:

How do I configure my network for LANrev patch management to work with agents behind a proxy server requiring authentication?

Solution:

LANrev's automated patch management can increase an agent's CPU usage to above 90% if it's behind a HTTP proxy server that requires authentication. Normally OS X's softwareupdate utility prompts the local user for proxy credentials but the LANrev agent is currently unable to tell softwareupdate to do this. An interaction of the above problem with a softwareupdate bug leads to the excessive CPU usage. The following symptoms occur in LANrev when agents are behind a HTTP proxy requiring authentication.

1. You cannot retrieve a list of missing OS patches for agents.
2. Missing OS patches do not automatically show up in Unconfirmed Patches, even when LANrev is set up correctly.

The excessive CPU usage has already been addressed in LANrev 4.6 so that it no longer happens even if your agents are behind a proxy server that requires authentication. To resolve this problem so you can use LANrev patch management again, add the following servers to the bypass list in your proxy server's PAC file or on client Macs themselves.

         swquery.apple.com
         swcdn.apple.com
         swscan.apple.com

Date: 20 Nov 2007
Revised: n/a
Components: Admin and Agent
Versions: 2.0 and higher

Related Links

Technote 027

LANrev patch management behind proxy servers requiring authentication

Problem:

Solution: