Author Topic: [FIXED] iTunes 9/9.1/9.1.1 - Store and Update server unavailable  (Read 5373 times)

muppetgeoff

  • Zen Apprentice
  • *
  • Posts: 38
  • Karma: +0/-0
    • View Profile
Hi,

iTunes 9.1 and 9.1.1 fails to connect to the Store AND the Update server, despite passing the iTunes Network tests.

This is caused by Dansguardian rejecting the store connection request as a malformed URL (it has an extra '.' on the END of the request URL).

There is a patch for Dandguardian to fix this (basically allowing URLs that end with a '.'), and Dansguardian 2.10.1.1 contains this fix.

eBox uses an old version of Dansguardian, and there is no way to bypass the filter for this one url (I tried everything from 'Always Allow' to direct connect).

We run eBox 1.4 with the current Dev version of the HTTP Proxy (we use per-object filer rules).

Help?

Many thanks,

Geoff

[Edited to be shorter]
« Last Edit: May 06, 2010, 12:39:41 am by muppetgeoff »

muppetgeoff

  • Zen Apprentice
  • *
  • Posts: 38
  • Karma: +0/-0
    • View Profile
Re: iTunes 9 Store and Update server unavailable
« Reply #1 on: April 20, 2010, 07:40:09 am »
Sorry to bump this.

Does nobody else have this problem?

Many thanks,

Geoff

toddnaomi7

  • Zen Apprentice
  • *
  • Posts: 10
  • Karma: +0/-0
    • View Profile
Re: iTunes 9 Store and Update server unavailable
« Reply #2 on: May 01, 2010, 09:40:23 pm »
I have the same problem.  What a relief to finally find the cause.  Now if someone can just find a reasonable solution.

muppetgeoff

  • Zen Apprentice
  • *
  • Posts: 38
  • Karma: +0/-0
    • View Profile
Re: iTunes 9 Store and Update server unavailable
« Reply #3 on: May 01, 2010, 10:27:04 pm »
Nice to know I'm not alone! :)

Apple released an update late last week - 9.1.1.

Unfortunately, it does not fix the problem we're having :(

It appears the 'Chop' patch in my original post seems to be the only solution.

Hopefully one of the developers will pitch in with some ideas?

*UPDATE* According to some information on the Apple forums, DansGUardian 2.10.1.1 includes the 'chop' fix, and seems to work. So what version of DG is eBox 1.4 using?

Kind regards,

Geoff
« Last Edit: May 01, 2010, 11:07:24 pm by muppetgeoff »

J. A. Calvo

  • Zentyal Staff
  • Zen Hero
  • *****
  • Posts: 1986
  • Karma: +67/-3
    • View Profile
    • http://blogs.zentyal.org/jacalvo
Re: iTunes 9 Store and Update server unavailable
« Reply #4 on: May 02, 2010, 11:36:36 am »
eBox 1.4 uses dansguardian 2.9.9.7-2
Zentyal Server Lead Developer

muppetgeoff

  • Zen Apprentice
  • *
  • Posts: 38
  • Karma: +0/-0
    • View Profile
Re: iTunes 9 Store and Update server unavailable
« Reply #5 on: May 02, 2010, 09:23:22 pm »
Thanks for the info.

Are there any customised patches? or 'stock' 2.9.9.7-2?

If I compiled 2.10.1.1 on the eBox and swapped in the resultant binary, would it work? I mean, would it run?

Are there any plans to move to 2.10.1.1? or is there a workaround for this issue?

muppetgeoff

  • Zen Apprentice
  • *
  • Posts: 38
  • Karma: +0/-0
    • View Profile
Re: iTunes 9 Store and Update server unavailable
« Reply #6 on: May 05, 2010, 05:32:23 am »
Sorry to harrass, but this is a big problem for me now - as the CEO just bought an iPad - and "he just *has* to have iTunes 9.1"

I know its not strictly an eBox issue, it kinda is, as the current version of DansGuardian does not have this issue'

Please, if a developer could tell me:

1) If I compile DG 2.10.1.1 from source, do I need to include any special patches that eBox needs?
2) Are there any plans to move to 2.10.1.1 in the Dev branch?
3) What options do I have?

Thank you for your help :)

Geoff

muppetgeoff

  • Zen Apprentice
  • *
  • Posts: 38
  • Karma: +0/-0
    • View Profile
Re: iTunes 9/9.1/9.1.1 - Store and Update server unavailable
« Reply #7 on: May 06, 2010, 12:39:25 am »
OK! I have a workaround :)

It was actually the result of another post where I needed to bypass Squid for some servers. Anyway... edit '/etc/ebox/hooks/firewall.postservice' and add the following line where the file indicates

Code: [Select]
    iptables -t nat -I PREROUTING -i ! eth0 -p tcp -m tcp --dport 80 -d ax.init.itunes.apple.com. -j ACCEPT
This will prevent the iTunes request from being redirected to the proxy. Voila :)

Hopefully, eBox moves to 2.10.1.1 in the future :)