Zentyal Forum, Linux Small Business Server

Zentyal Server => Installation and Upgrades => Topic started by: muppetgeoff on April 17, 2010, 03:10:09 am

Title: [FIXED] iTunes 9/9.1/9.1.1 - Store and Update server unavailable
Post by: muppetgeoff on April 17, 2010, 03:10:09 am
Hi,

iTunes 9.1 and 9.1.1 fails to connect to the Store AND the Update server, despite passing the iTunes Network tests.

This is caused by Dansguardian rejecting the store connection request as a malformed URL (it has an extra '.' on the END of the request URL).

There is a patch for Dandguardian to fix this (basically allowing URLs that end with a '.'), and Dansguardian 2.10.1.1 contains this fix.

eBox uses an old version of Dansguardian, and there is no way to bypass the filter for this one url (I tried everything from 'Always Allow' to direct connect).

We run eBox 1.4 with the current Dev version of the HTTP Proxy (we use per-object filer rules).

Help?

Many thanks,

Geoff

[Edited to be shorter]
Title: Re: iTunes 9 Store and Update server unavailable
Post by: muppetgeoff on April 20, 2010, 07:40:09 am
Sorry to bump this.

Does nobody else have this problem?

Many thanks,

Geoff
Title: Re: iTunes 9 Store and Update server unavailable
Post by: toddnaomi7 on May 01, 2010, 09:40:23 pm
I have the same problem.  What a relief to finally find the cause.  Now if someone can just find a reasonable solution.
Title: Re: iTunes 9 Store and Update server unavailable
Post by: muppetgeoff on May 01, 2010, 10:27:04 pm
Nice to know I'm not alone! :)

Apple released an update late last week - 9.1.1.

Unfortunately, it does not fix the problem we're having :(

It appears the 'Chop' patch in my original post seems to be the only solution.

Hopefully one of the developers will pitch in with some ideas?

*UPDATE* According to some information on the Apple forums, DansGUardian 2.10.1.1 includes the 'chop' fix, and seems to work. So what version of DG is eBox 1.4 using?

Kind regards,

Geoff
Title: Re: iTunes 9 Store and Update server unavailable
Post by: J. A. Calvo on May 02, 2010, 11:36:36 am
eBox 1.4 uses dansguardian 2.9.9.7-2
Title: Re: iTunes 9 Store and Update server unavailable
Post by: muppetgeoff on May 02, 2010, 09:23:22 pm
Thanks for the info.

Are there any customised patches? or 'stock' 2.9.9.7-2?

If I compiled 2.10.1.1 on the eBox and swapped in the resultant binary, would it work? I mean, would it run?

Are there any plans to move to 2.10.1.1? or is there a workaround for this issue?
Title: Re: iTunes 9 Store and Update server unavailable
Post by: muppetgeoff on May 05, 2010, 05:32:23 am
Sorry to harrass, but this is a big problem for me now - as the CEO just bought an iPad - and "he just *has* to have iTunes 9.1"

I know its not strictly an eBox issue, it kinda is, as the current version of DansGuardian does not have this issue'

Please, if a developer could tell me:

1) If I compile DG 2.10.1.1 from source, do I need to include any special patches that eBox needs?
2) Are there any plans to move to 2.10.1.1 in the Dev branch?
3) What options do I have?

Thank you for your help :)

Geoff
Title: Re: iTunes 9/9.1/9.1.1 - Store and Update server unavailable
Post by: muppetgeoff on May 06, 2010, 12:39:25 am
OK! I have a workaround :)

It was actually the result of another post where I needed to bypass Squid for some servers. Anyway... edit '/etc/ebox/hooks/firewall.postservice' and add the following line where the file indicates

Code: [Select]
    iptables -t nat -I PREROUTING -i ! eth0 -p tcp -m tcp --dport 80 -d ax.init.itunes.apple.com. -j ACCEPT
This will prevent the iTunes request from being redirected to the proxy. Voila :)

Hopefully, eBox moves to 2.10.1.1 in the future :)