Windows Credentials Proxy Authentication

Help Studio
, ,
1

Hi ,
Can someone explain me this :

"Windows Credentials Proxy Authentication

Starting with v2021.4.4, the Robot can work with proxy configurations that use Authentication via Windows Credentials.
To enable this functionality, add the UiPath_PROXY_USE_DEFAULT_CREDENTIALS system environment variable on the machine with the value set to true."

Do you have any idea where these settings were kept, I did not set or configure the files to see the value we set on my VM

Regards

2

Setting up the credentials for the Proxy Server:

In Windows 10 menu, go to Settings (WinKey+I) and search for “Credential Manager”. Under Windows Credentials, add a new entry for Windows Credentials. Enter the Proxy Server address (without the port number), your domain user name, and the password.

Once these details are active, you should be able to make use of the proxy server under your custom-entered user credentials.

Just remember to deactivate the “Use a Proxy Server” setting (first step) when browsing from outside the network where the proxy is required.

3

Setting up the Proxy Settings:

In the Windows 10 menu, I went to settings (WinKey+I) and searched for “Configure Proxy Settings”. Select Internet Settings > Local LAN Settings >Proxy Server Settings.

Select the option to make use of a proxy server, and enter the Server Address and Port

4

I’m a little confused. What if we are not using Windows Credentials, but our proxy just uses our logged in Windows user?

I was recently switched over to user mode in Studio, and started getting the “407 authentication required” error. I added the UiPath_USE_DEFAULT_CREDENTIALS environment variable which made the error go away, but it seems like I’m still unable to load packages from the official feed.

Going by this document…

https://docs.uipath.com/robot/standalone/2023.4/user-guide/redirecting-robots-through-a-proxy-server

Again, we are not using Windows Credentials (ie Credential Manager) just normal Windows authentication. Does that mean I do not need the environment variable? Do I still need to do the UiPath.config portion?

Shouldn’t UiPath just be able to function normally through our proxy without any specific configuration? Everything else does, as the proxy is configured at the Windows level.

5

UiPath.config is for Service Mode robots only.

For 407 error, check this documentation https://docs.uipath.com/studio/standalone/2023.4/user-guide/managing-activities-packages#connecting-to-feeds-through-a-proxy-server

6

Thank you for the information. I’m not sure I’m even on the right track. For background…

For whatever reason my Studio was originally installed in service mode and everything worked fine for a long time. Last week, in preparation for moving to modern folders in Orchestrator I was switched to user mode and started having problems with the feeds. I realized the 407 error was only occurring for the marketplace feed - but that’s because in our environment we do not allow non-official packages.

However, I am still having issues with some of the feeds. Here are the feeds and the errors I’m getting:

https://api.nuget.org/v3/index.json - what is this feed and do I need to be using it? The error:
image

https://pkgs.dev.azure.com/uipath/Public.Feeds/_packaging/UiPath-Official/nuget/v3/index.json - is this the new official feed? The error:
image

https://packages.uipath.com/activities/api/v3/index.json - what is this feed? It appears to just point back to the myget.org feeds. The error:
image

We are currently waiting on these URLs to be added to our whitelist. Currently we only have https://www.myget.org/F/workflow whitelisted, but it appears newer packages don’t exist here, they only exist in the pkgs.dev.azure.com feed (for example, I can’t find the Windows compatibility versions of UiPath.PDF.Activities in the official feed https://api.nuget.org/v3/index.json)

Last question, on these feed URLs should the index.json be included in the feed source URL? When I remove it from the azure feed and just use https://pkgs.dev.azure.com/uipath/Public.Feeds/_packaging/UiPath-Official/nuget/v3 then I start getting the 407 error again.

If I remove the index.json and just use https://api.nuget.org/v3 I get “404 the specified resource does not exist”

7

Check here for NuGet proxy settings skolima: NuGet proxy settings and for nuget.config setup nuget.config File Reference | Microsoft Learn

The correct sources are:

    <add key="Local" value="./Packages" />
    <add key="MyGetOrg" value="https://www.myget.org/F/workflow/" />
    <add key="Marketplace" value="https://gallery.uipath.com/api/v2" />
    <add key="MarketplaceV3" value="https://gallery.uipath.com/api/v3/index.json" />
    <add key="UiPath Packages" value="https://packages.uipath.com/activities" />
    <add key="nuget.org" value="https://api.nuget.org/v3/index.json" />
    <add key="UiPathVisualstudio" value="https://uipath.pkgs.visualstudio.com/Public.Feeds/_packaging/UiPath-Official/nuget/v3/index.json" />
    <add key="UiPathOfficial" value="https://pkgs.dev.azure.com/uipath/Public.Feeds/_packaging/UiPath-Official/nuget/v3/index.json" />

Ways to set the proxy authentification:

From cmd.exe as Administrator to set them in the Environment variables:

setx http_proxy=http://user:password@proxyIP:proxyPort
setx https_proxy=http://user:password@proxyIP:proxyPort
SET HTTP_PROXY=http://user:password@proxyIP:proxyPort
SET HTTPS_PROXY=http://user:password@proxyIP:proxyPort

When specific hostnames should not go through proxy:

SET NO_PROXY=*.what;*.the;*.hell;*.i.should;*.not.have;*.todo;*.this
SET no_proxy=*.what;*.the;*.hell;*.i.should;*.not.have;*.todo;*.this

From nuget.exe:

nuget.exe config -set http_proxy=http://my.proxy.address:port
nuget.exe config -set http_proxy.user=mydomain\myUserName
nuget.exe config -set http_proxy.password=mySuperSecretPassword

nuget.exe config -set https_proxy=http://my.proxy.address:port
nuget.exe config -set https_proxy.user=mydomain\myUserName
nuget.exe config -set https_proxy.password=mySuperSecretPassword

When a specific hostname or more should not go through proxy:

nuget.exe config -set no_proxy=hostname1,hostname2

Restart Studio.

8

Thank you for the detailed info, it’s very helpful.

What is this feed? Is it an official feed? We can only use official feeds for compliance reasons.

9

For https://api.nuget.org/v3/index.json check Overview of the NuGet Server API | Microsoft Learn

The official online UiPath feed, where you can find the activity packages that are officially supported by us. This feed has the following source: https://pkgs.dev.azure.com/uipath/Public.Feeds/_packaging/UiPath-Official/nuget/v3/index.json .

1 Like
10

We have whitelisted pkgs.dev.azure.com but I still get “unable to load the service index” when trying to use this feed in Manage Packages.

https://pkgs.dev.azure.com/uipath/Public.Feeds/_packaging/UiPath-Official/nuget/v3/index.json

When looking in index.json I see:

{"@vocab":"http://schema.nuget.org/services#","comment":"http://www.w3.org/2000/01/rdf-schema#comment","label":"http://www.w3.org/2000/01/rdf-schema#label"},

Do we also have to whitelist schema.nuget.org? I am able to browse to www.w3.org/2000/01/rdf-schema#comment but I cannot browse to http://schema.nuget.org/services#

Does it matter that we are on UiPath Studio 2021.10.5? Do we need to be on a later version to use the pkgs.dev.azure.com feed?

11

Can you try this approach?

· Go to Control Panel → Programs → Apps and Features → Uninstall the UiPath Platform Installer (if exists) and UiPath Studio

After the UiPath Studio/Robot uninstallation, delete the below folders if exists:

· The settings in the folders %PROGRAMDATA%\UiPath, %LOCALAPPDATA%\UiPath, and %APPDATA%\UiPath
· The packages folder %USERPROFILE%.nuget\packages
· The NuGet cache folder %LOCALAPPDATA%\NuGet\v3-cache
· The Assistant processes folder in the Windows Start menu %APPDATA%\Microsoft\Windows\Start Menu\Programs\UiPath Assistant Automations and %APPDATA%\Microsoft\Windows\Start Menu\Programs\UiPath Assistant Processes
· The content from the %temp% folder
Install again the UiPath Studio/Robot using this installer https://download.uipath.com/versions/23.4.4/UiPathStudio.msi

12

We are having the same issue on all computers/servers. We were pointed to this document by someone else at UiPath. This is important information, it isn’t just the feed URL that needs to be whitelisted. We are working on whitelisting the additional URLs, and I will report back here when we know if it worked or not.

https://docs.uipath.com/robot/standalone/2023.4/user-guide/services-the-robot-connects-to

13

The additional URLs (the redirected ones) which are not whitelisted, will appear as the connection was refused on port 443 in the error logs (in Event Viewer logs for example, or in other network monitoring tools). You will need to provide access to those.

14

We whitelisted everything according to your documentation. I’m still getting “cannot load service index” for the official pkgs.dev.azure.com feed.

In the index.json that is returned by that feed, there is:

{"@vocab":"http://schema.nuget.org/services#","comment":"http://www.w3.org/2000/01/rdf-schema#comment","label":"http://www.w3.org/2000/01/rdf-schema#label"}

When I try to browse to schema.nuget.org I get “host is not resolvable.” Even on my cell phone which has nothing to do with our corporate network, I get the same error. There is no such domain as schema.nuget.org so is the index.json wrong?