Zotero 5 proxy configuration via pac file, failure to authenticate (regression?)

edited July 24, 2017
Report ID: 276379263

With the Zotero 4 standalone, I was able to use zotero with proxies configured automatically through a pac file.

This does not seem to be the case anymore with zotero 5.

At startup zotero 5 standalone does not ask to authenticate to the proxy even if the about:config reports the same proxy configuration that was working in Zotero 4 standalone.

Through firefox and the zotero 5 connector I cannot save pdf files from sites that need to be accessed through the proxy.
  • Could you provide a Debug ID (different from a Report ID) for Zotero startup using the "Enable after restart" option?
  • The Debug ID is D2132933971.
  • To clarify:

    1) I have zotero 5 standalone configured as I used to have zotero 4 standalone configured, namely with

    Network.proxy.type = 2 (Proxy auto-configuration PAC)
    Network.proxy.autoconfig_url pointing to my PAC file
    signon.autologin.proxy = true

    With this configuration, at startup zotero 4 standalone used to show me a dialog to authenticate with the proxy, zotero 5 does not.

    2) I am using the zotero connector from firefox. Firefox has the same proxy setup above.

    With firefox, that proxy setup allows me to download papers e.g. from ieeexplore just fine

    However, when I press the "save to zotero" button, saving the paper data fails, and the zotero debug log shows that there is a missing authentication with the proxy. Hence, basically, zotero 5 seems to fail to open the authentication dialog for the proxy.

    IMHO, this is a very serious issue, as most academic institutions use authenticated proxies to access paper repositories.
  • Incidentally: is it possible to (temporarily) downgrade to zotero 4 or installing zotero 5 changes the local database structures in a way that does not allow downgrades?
  • is it possible to (temporarily) downgrade to zotero 4
    https://www.zotero.org/support/kb/newer_db_version
  • It's loading the PAC file, but:
    (3)(+0000001): Proxy not required for http://www.ovid.com

    (3)(+0000001): Proxy not required for http://www.elsevier.com

    (3)(+0000001): Proxy not required for http://www.acm.org
    Do these sites show up in the PAC file and trigger proxy authentication in a new Firefox session?
  • the pac file activates the proxy for the following sites

    'http://ieeexplore.ieee.org/*',
    'http://www.springerlink.com/*',
    'http://www.sciencedirect.com/*',
    'http*://www.scopus.com/*',
    'http*://*.metapress.com/*',
    'http*://www.worldscientific*',
    'http*://*.webofknowledge.com/*',
    'http*://link.springer.com/*',
    'http*://*onlinelibrary.wiley.com/*',
    'http*://iopscience.iop.org/*',
    'http*://s3.amazonaws.com/zotero.org*',
    'http*://epubs.siam.org/*'

    all other sites go direct
  • @dstillman sciencedirect would be a better check for the proxy than elsevier.com, which is the corporate homepage
  • I have created a test modified pac file to add www.elsevier.com to it. As mentioned in the last command, this was not originally included since the Elsevier publications are generally accessed through sciencedirect.

    In any case, with this setup, zotero asked for the proxy login at startup, sort of. For some reasons not all the invocations end up in asking for the proxy login... I'll test further to try to identify what prevents the authentication to happen in some cases.
  • We'll adjust these for the next version — they haven't been touched in years — but the URLs used are configurable in the extensions.zotero.proxyAuthenticationURLs hidden pref, which you can access from the Config Editor in the Advanced → Files and Folders pane of the Zotero preferences.
  • (And a few URLs are picked at random at startup, which is why you're seeing varying behavior. Most PAC files I've seen have many more proxied hosts listed than yours, so this isn't usually an issue.)
  • Incidentally, and out of curiosity, why are those needed? Cannot zotero ask to authenticate to the proxy the first time it receives an error message about the need to do so, rather than doing this check in advance?
  • 5.0.8 is out now with (hopefully) somewhat improved authenticated proxy handling. Let us know if not. (If you adjusted that pref, you can try resetting it and seeing if it still works.)
Sign In or Register to comment.