{"id":1362,"date":"2016-01-28T17:06:35","date_gmt":"2016-01-28T11:36:35","guid":{"rendered":"https:\/\/tuxtrix.com\/?p=1362"},"modified":"2017-10-23T11:25:42","modified_gmt":"2017-10-23T05:55:42","slug":"make-ubuntu-work-behind-enterprise-proxy","status":"publish","type":"post","link":"https:\/\/tuxtrix.com\/make-ubuntu-work-behind-enterprise-proxy\/","title":{"rendered":"Make Ubuntu work behind an enterprise proxy"},"content":{"rendered":"

Large enterprises are notorious for their firewalls and proxies and what they allow their employees to access over the internet. Even developers have a hard time figuring out how to deal with the situation and spend hours together trying to fix the proxy issue.<\/p>\n

Of course there are multiple ways to get Ubuntu working behind an enterprise proxy . But to reduce the amount of time \u00a0you spend to carry out the operation, a very old yet effective solution is the best way forward.<\/p>\n

You may have guessed it already, install a local proxy. \u00a0Ubuntu repos come with a very effective tool\/program\/software\/app whatever you may choose to call it. It’s called CNTLM and below are the steps to get it working. This setup has been tested on Ubuntu 14.04.4 LTS.<\/p>\n

Why CNTLM?<\/strong><\/h2>\n

Enterprise proxies which are mostly still dependent on Microsoft based technologies like Active Directory require authentication for many activities like downloading from git repos, Android repos, Ubuntu repos and sometimes also for accessing internet. This authentication is usually tied to your AD login. Using commands like Accquire::http_proxy and export require you to explicitly define your password in plain text files. This leaves your password exposed .<\/p>\n

CNTML comes with a config file which enables encrypting that password and defining a hash<\/p>\n

Pre-requisite:<\/strong> Remove all proxy information from every place that you may have added. eg \/etc\/apt, \/etc\/environment, .bashrc , etc<\/p>\n

Steps to Install<\/strong><\/h2>\n

Available in\u00a0repository<\/strong><\/h3>\n

sudo apt-get install cntlm<\/code><\/p>\n

Configure CNTLM<\/strong><\/h3>\n

Once installed edit the configuration file:<\/p>\n

sudo vim \/etc\/cntlm.conf<\/code><\/p>\n

Set username, domain, remote proxy, and address with port which local proxy will listen to.
\n
\nUsername\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 testuser
\nDomain \u00a0 \u00a0 \u00a0 \u00a0\u00a0yourorgdomain
\nProxy \u00a0 \u00a0 \u00a0 \u00a0 \u00a0your.org.proxy.ip\/dns:8080
\nListen\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 3128
\n<\/code>
\nGenerate password hash<\/strong><\/p>\n

sudo cntlm -H your.org.proxy.ip\/dns:8080<\/code><\/p>\n

You will see something like this:
\n
\nPassword:
\nPassLM\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 7F4BB72132BAA2A01FA94BD623A70D3B
\nPassNT\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 2C27BB146F74625D159413FC1F30745F
\nPassNTLMv2\u00a0\u00a0\u00a0\u00a0\u00a0 D3972609581D8260868ED588303F0FF0\u00a0\u00a0\u00a0 # Only for user 'testuser', domain \u2018\u00a0yourorgdomain\u2019
\n<\/code>
\nCopy these lines to \/etc\/cntlm.conf<\/code><\/p>\n

Configure Ubuntu to use the CNTLM proxy<\/strong><\/h3>\n

Add these lines to configure system to use the local proxy as shown in the screenshot below. You can reach this place via System Settings ->Network<\/strong> either via dash or the power menu on the top panel.<\/p>\n

\"CNTLM\"<\/a><\/p>\n

Note:<\/strong> If you use KDE(Kubuntu), you will find similar settings in the KDE control panel<\/p>\n

Restart CNTLM<\/strong><\/p>\n

Restart the service to load the new settings.<\/p>\n

sudo invoke-rc.d cntlm restart<\/code><\/p>\n

Logs<\/strong><\/p>\n

You can check the logs at \/var\/log\/syslog <\/code><\/p>\n

Setting Git\/Android repos?<\/strong><\/h2>\n

git config --global http.proxy http:\/\/127.0.0.1:3128<\/code><\/p>\n","protected":false},"excerpt":{"rendered":"

Large enterprises are notorious for their firewalls and proxies and what they allow their employees to access over the internet. Even developers have a hard time figuring out how to deal with the situation and spend hours together trying to fix the proxy issue. Of course there are multiple ways to get Ubuntu working behind […]<\/p>\n","protected":false},"author":2,"featured_media":1366,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_uag_custom_page_level_css":"","site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""}},"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false}}},"categories":[561,516,522],"tags":[551,554,552,553],"jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"https:\/\/tuxtrix.com\/wp-content\/uploads\/2016\/01\/1000px-Preferences-system-network-proxy.svg_.png","uagb_featured_image_src":{"full":["https:\/\/tuxtrix.com\/wp-content\/uploads\/2016\/01\/1000px-Preferences-system-network-proxy.svg_.png",1000,1000,false],"thumbnail":["https:\/\/tuxtrix.com\/wp-content\/uploads\/2016\/01\/1000px-Preferences-system-network-proxy.svg_-150x150.png",150,150,true],"medium":["https:\/\/tuxtrix.com\/wp-content\/uploads\/2016\/01\/1000px-Preferences-system-network-proxy.svg_-300x300.png",300,300,true],"medium_large":["https:\/\/tuxtrix.com\/wp-content\/uploads\/2016\/01\/1000px-Preferences-system-network-proxy.svg_.png",768,768,false],"large":["https:\/\/tuxtrix.com\/wp-content\/uploads\/2016\/01\/1000px-Preferences-system-network-proxy.svg_.png",1000,1000,false],"1536x1536":["https:\/\/tuxtrix.com\/wp-content\/uploads\/2016\/01\/1000px-Preferences-system-network-proxy.svg_.png",1000,1000,false],"2048x2048":["https:\/\/tuxtrix.com\/wp-content\/uploads\/2016\/01\/1000px-Preferences-system-network-proxy.svg_.png",1000,1000,false],"popular_posts_img":["https:\/\/tuxtrix.com\/wp-content\/uploads\/2016\/01\/1000px-Preferences-system-network-proxy.svg_-600x360.png",600,360,true]},"uagb_author_info":{"display_name":"Sayantan Das","author_link":"https:\/\/tuxtrix.com\/author\/sayantan\/"},"uagb_comment_info":0,"uagb_excerpt":"Large enterprises are notorious for their firewalls and proxies and what they allow their employees to access over the internet. Even developers have a hard time figuring out how to deal with the situation and spend hours together trying to fix the proxy issue. Of course there are multiple ways to get Ubuntu working behind…","_links":{"self":[{"href":"https:\/\/tuxtrix.com\/wp-json\/wp\/v2\/posts\/1362"}],"collection":[{"href":"https:\/\/tuxtrix.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tuxtrix.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tuxtrix.com\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/tuxtrix.com\/wp-json\/wp\/v2\/comments?post=1362"}],"version-history":[{"count":6,"href":"https:\/\/tuxtrix.com\/wp-json\/wp\/v2\/posts\/1362\/revisions"}],"predecessor-version":[{"id":1371,"href":"https:\/\/tuxtrix.com\/wp-json\/wp\/v2\/posts\/1362\/revisions\/1371"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/tuxtrix.com\/wp-json\/wp\/v2\/media\/1366"}],"wp:attachment":[{"href":"https:\/\/tuxtrix.com\/wp-json\/wp\/v2\/media?parent=1362"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tuxtrix.com\/wp-json\/wp\/v2\/categories?post=1362"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tuxtrix.com\/wp-json\/wp\/v2\/tags?post=1362"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}