On 3/30/05 7:45 AM, "Stewart" <email@hidden> wrote:
> i do still think though it's a bit wrong for the proxy auth info to be
> stored at system level when it should really be the responsibility of
> individual applications in userspace. it's the one single difference i
> can think of in Windows networking that actually makes sense (to me
> anyway). The rest - well, ahem. I just like to show my wintel admin
> friends how to change entire network configs with the Location menu and
> watch their jaws drop. ;-)
Yes and no. The problem is that "proxy" is an overloaded and much abused
term. What it started out as, and what it has become are two entirely
different things. Originally, they were ways to just save bandwidth by
caching sites that users hit a lot, since this was when a location with over
a thousand users MIGHT have two whole t-1s for all their Internet access.
It's become some half-backed Websense/SurfControl - like system for locking
down internet access, and it causes a lot of issues as you are now seeing.
But think about that...how do you define individual applications? Do you
want EVERY single internet hit to require a login? That will make things
like self-updating help systems useless unless you write your own custom
wrapper around them. Do you expire the access? If now, what's the point? The
user simply never logs out, and you've effectively lost whatever benefit you
had. If you do expire them, then how do you deal with active connections?
Again, one way makes the authentication ineffective, the other way makes it
impossible to run long downloads at night when bandwidth use would be less.
Just as a suggestion, what might make your life a LOT easier is, instead of
running softwareupdate on every machine, just manually download the updates,
then use ARD, or SSH to distribute and install them internally. It'll
definitely save you a LOT of bandwidth, if that's a concern. If ARD was
scriptable, you could really automate the heck out of this from the admin
console.
--
John C. Welch Writer/Analyst
Bynkii.com Mac and other opinions
email@hidden
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Remote-desktop mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/remote-desktop/email@hidden
This email sent to email@hidden
