GAM conntion thru proxy server

883 views
Skip to first unread message

Eric Cheng

unread,
Jan 10, 2011, 3:54:21 AM1/10/11
to Google Apps Manager
Can GAM support HTTP and SSL proxy connections to Google Apps with
different username and password? Our operator do not have internet
access at all. That's why we want GAM can support proxy connection by
different user.

Thank you.

Jay Lee

unread,
Jan 10, 2011, 9:29:51 AM1/10/11
to Google Apps Manager
GAM does not support Proxy's at this point and I don't have a proxy
server setup to test against.

Jay

Sandip Shah

unread,
Jan 10, 2011, 8:53:37 PM1/10/11
to Google Apps Manager
GAM uses GData python client.

Python client is supposed to connect to Google's servers via proxy.

Try setting the following 4 variables and see if you can connect via
the proxy:

http_proxy
https_proxy
proxy_username and
proxy_password

Let the group know if it works for you.

Sandip

Eric Cheng

unread,
Jan 11, 2011, 8:55:26 PM1/11/11
to Google Apps Manager
Thanks for your reply. However, I'm not very familiar with Google
API. May I know where should I set these varibales in order to make
proxy connection with GAM?

Sandip Shah

unread,
Jan 12, 2011, 1:09:36 AM1/12/11
to Google Apps Manager
Sorry my mistake. I should have clearly mentioned that these are
"environment variables".

Depending on whether you are on Windows or Linux/Unix, there are
different ways to set the env. variables. Google it please.

Sandip

Eric Cheng

unread,
Jan 12, 2011, 1:59:51 AM1/12/11
to Google Apps Manager
Noted with thanks. If that's are environment variables, I'll spend
some time to test it out.

Eric

Julieth Jaimes

unread,
Jan 25, 2018, 11:06:24 PM1/25/18
to GAM for G Suite
Hi Sandip 

I understand that you talk about environment variables, so the value is just one? and point to the folder where I have the installer? I don't have experience for this, could you help me please? 

Thanks!

SPJE ICT

unread,
Jul 17, 2018, 2:44:23 AM7/17/18
to GAM for G Suite
Hey Julieth,

I've managed to get GAM working through SSL intercept proxy, first I already have all google API URLs whitelisted (*.googleapis.com, et al).


One thing that kept happening is that HTTPLIB2 had a fit on some non google 
URL during SSL handshake. So I broke out Wireshark and found I had to 
whitelist raw.githubusercontent.com for SSL inspection bypass.

Keep in mind raw.githubusercontent.com been used to distribute malware
in the past, so this should be a consideration when whitelisting any URL.

Image to left here shows how you can identify similar errors (Unknown CA) 
and determine URLs to whitelist (first arrow) on your own.

Continue below to complete the last steps.





Then all that's left is to set environment variables (powershell example below, but I did it VIA normal GUI):

Set-Variable -Name HTTP_PROXY -Value http://yourproxy:andport
Set-Variable -Name HTTPS_PROXY -Value http://yourproxy:andport 

Eg.
Set-Variable -Name HTTP_PROXY -Value http://example.com:8080
Set-Variable -Name HTTPS_PROXY -Value http://example.com:8080

You can now using GAM through proxy and SSL intercept.

GAM doesn't officially support this setup AFAIK, but I've had no issues with it for the long time I've been using it this way.

Julieth Jaimes

unread,
Jul 19, 2018, 12:45:45 PM7/19/18
to GAM for G Suite
Hi!!

Thanks for you answer!! :D But now I have another situation. I can install Dito Gam in my machine allow ip's and port's but I don't know why Dito Gam needs this ports (5228 and 139) for the functioning. 

Somebody knows?!

Ross Scroggs

unread,
Jul 19, 2018, 12:54:53 PM7/19/18
to google-ap...@googlegroups.com
Julieth,

GAM connects to Google on port 443, where do you see it needing 5228 and 139?

Ross

--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To post to this group, send email to google-ap...@googlegroups.com.
Visit this group at https://groups.google.com/group/google-apps-manager.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/034ac850-bce7-4e50-a195-7b1b6dd4c75f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


--

Julieth Jaimes

unread,
Jul 19, 2018, 1:04:40 PM7/19/18
to GAM for G Suite
Hi Ross, 

I used TCP viewer (the aplication) for know the IP's and Port's
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.


--

Ross Scroggs

unread,
Jul 19, 2018, 1:14:31 PM7/19/18
to google-ap...@googlegroups.com
Julieth,

What platform are you running on? What gam command are you issuing?

Ross

Hi Ross, 

To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.


--

--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.

To post to this group, send email to google-ap...@googlegroups.com.
Visit this group at https://groups.google.com/group/google-apps-manager.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/ef732299-6457-4aa7-9d33-67e110ea7fb3%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.


--

Julieth Jaimes

unread,
Jul 26, 2018, 6:51:51 PM7/26/18
to GAM for G Suite
The platform that I used for know IP's and ports was TCP viewer and I don't use a command, it's in the instalation process. 
Hi Ross, 

To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.


--

--
You received this message because you are subscribed to the Google Groups "GAM for G Suite" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-manager+unsub...@googlegroups.com.


--

SPJE ICT

unread,
Jul 30, 2018, 7:29:12 PM7/30/18
to GAM for G Suite
Can you attach a screenshot?
Reply all
Reply to author
Forward
0 new messages