Index  | Recent Threads  | Unanswered Threads  | Who's Active  | Guidelines  | Search
 

Quick Go ยป
No member browsing this thread
Thread Status: Active
Total posts in this thread: 19
Posts: 19   Pages: 2   [ 1 2 | Next Page ]
[ Jump to Last Post ]
Post new Thread
Author
Previous Thread This topic has been viewed 1789 times and has 18 replies Next Thread
kamaradski
Cruncher
Joined: Dec 16, 2010
Post Count: 12
Status: Offline
Project Badges:
Reply to this Post  Reply with Quote 
Websense

Hi all,

I have a few available machines that are behind a websense firewall, i have permission to utilize these however i do not have the ability to lift the websense.

So far nothing helps:
- not a single proxy is working correct
- proxycfg.exe, no luck

Client doesnt want to connect to project. Any other way to do it ?

KR
kamaradski
[Dec 16, 2010 3:47:41 PM]   Link   Report threatening or abusive post: please login first  Go to top 
Sekerob
Ace Cruncher
Joined: Jul 24, 2005
Post Count: 20043
Status: Offline
Reply to this Post  Reply with Quote 
Re: Websense

Hi,

If you've not seen it prior, please visit this thread http://www.worldcommunitygrid.org/forums/wcg/...ead,24247_offset,0#213326 for past discussion on Websense.

Let us know if this has a fitting fix for you.

--//--
----------------------------------------
WCG Global & Research > Make Proposal Help: Start Here!
Please help to make the Forums an enjoyable experience for All!
----------------------------------------
[Edit 1 times, last edit by Sekerob at Dec 16, 2010 4:17:03 PM]
[Dec 16, 2010 4:01:19 PM]   Link   Report threatening or abusive post: please login first  Go to top 
kamaradski
Cruncher
Joined: Dec 16, 2010
Post Count: 12
Status: Offline
Project Badges:
Reply to this Post  Reply with Quote 
Re: Websense


You could quickly check this by going to one of the impacted machines and replacing all instances of
http://grid.worldcommunitygrid.org
with
https://grid.worldcommunitygrid.org
in the client_state.xml file. If the uploads proceed correctly then you know that is the issue.


Not working as i'm not even able to connect to the project yet, it's not listed in the XML file.

However i tested in the browser https://www.worldcommunitygrid.org is accesable thru the websense :) 1 step foreward !


brinktastee, we think we have a solution. Put this in your cc_config.xml file:

<cc_config>
<log_flags>
</log_flags>
<options>
<version_check_server>www.worldcommunitygrid.org</version_check_server>
<proxy_test_server>www.ibm.com</proxy_test_server>
<start_delay>120</start_delay>
<http_1_0>1</http_1_0>
</options>
</cc_config>


Now atleast i have the following message in BOINC:
" Internet access OK - project servers may be down.

I know the servers are not down, as i tested on my remote desktop at home, and they work great :)


I then had boinc "read config file" and I get these errors.

2/2/2009 12:11:39 PM||Unrecognized tag in cc_config.xml: <version_check_server>
2/2/2009 12:11:39 PM||Unrecognized tag in cc_config.xml: <proxy_test_server>
2/2/2009 12:11:39 PM||Unrecognized tag in cc_config.xml: <start_delay>


Check, i have that as wel, apperantly these can be ignored....

Ok next (desperate) step:

- Copy my complete working boinc setup from my home location OVER the installation that is behind websense.

- Change ALL HTTP:// referins in ALL XML files into HTTPS:// (for the WCG.

Now this helps a little, however it's not working yet. Please find below log-snippet:


12/16/2010 6:51:06 PM World Community Grid URL https://www.worldcommunitygrid.org/; Computer ID not assigned yet; resource share 100
12/16/2010 6:51:06 PM General prefs: from http://www.worldcommunitygrid.org/ (last modified 01-Jan-1970 02:00:01)
12/16/2010 6:51:06 PM Host location: none
12/16/2010 6:51:06 PM General prefs: using your defaults
12/16/2010 6:51:06 PM Reading preferences override file
12/16/2010 6:51:06 PM Preferences:
12/16/2010 6:51:06 PM max memory usage when active: 1019.12MB
12/16/2010 6:51:06 PM max memory usage when idle: 1528.68MB
12/16/2010 6:51:06 PM max disk usage: 10.00GB
12/16/2010 6:51:06 PM don't use GPU while active
12/16/2010 6:51:06 PM suspend work if non-BOINC CPU load exceeds 25 %
12/16/2010 6:51:06 PM (to change preferences, visit the web site of an attached project, or select Preferences in the Manager)
12/16/2010 6:51:06 PM Not using a proxy
12/16/2010 6:51:06 PM Suspending computation - initial delay
12/16/2010 6:51:38 PM Project communication failed: attempting access to reference site
12/16/2010 6:51:41 PM Internet access OK - project servers may be temporarily down.


Hope there is something else i can do to get this working, as 5 devices are standing idle all day here, waiting to be put to work :)

KR
Kamaradski
[Dec 16, 2010 4:55:59 PM]   Link   Report threatening or abusive post: please login first  Go to top 
kamaradski
Cruncher
Joined: Dec 16, 2010
Post Count: 12
Status: Offline
Project Badges:
Reply to this Post  Reply with Quote 
Re: Websense



12/16/2010 7:09:22 PM Fetching configuration file from https://www.worldcommunitygrid.org/get_project_config.php
12/16/2010 7:09:23 PM Project communication failed: attempting access to reference site
12/16/2010 7:09:26 PM Internet access OK - project servers may be temporarily down.


Trying to get the project from HTTPS, however something is not right.

Would there be a offline way to fetch project details ?

KR
kamaradski
----------------------------------------
[Edit 1 times, last edit by kamaradski at Dec 16, 2010 5:13:38 PM]
[Dec 16, 2010 5:13:09 PM]   Link   Report threatening or abusive post: please login first  Go to top 
GIBA
Ace Cruncher
Joined: Apr 25, 2005
Post Count: 5374
Status: Offline
Reply to this Post  Reply with Quote 
Re: Websense

Hi kamaradski,
welcome on board.

This last message posted by you just appear for me just when WCG servers are out... the most of times just for few time.

If the message in yours clients mentioned that the internet access are OK, maybe will be interesting just take a look and review again yours device profiles configurations in WCG website, to observe if there are any action to take there, and after it update the clients in all machines to be sure that all are in the same page.

Other action to take, and I suggest before anything, will be press the clear button in the BOINC clients (menu, advanced, preferences, the button will appear at right side above), and press the Ok button to finalize it and have sure that the clients are running under website device profiles settings.

Hope that it be solved asap. Good luck. good luck
----------------------------------------
Cheers ! GIB@ peace coffee
Join BRASIL - BRAZIL@GRID team and be very happy !
http://www.worldcommunitygrid.org/team/viewTeamInfo.do?teamId=DF99KT5DN1

----------------------------------------
[Edit 1 times, last edit by GIBA at Dec 16, 2010 7:23:04 PM]
[Dec 16, 2010 7:19:53 PM]   Link   Report threatening or abusive post: please login first  Go to top 
Sekerob
Ace Cruncher
Joined: Jul 24, 2005
Post Count: 20043
Status: Offline
Reply to this Post  Reply with Quote 
Re: Websense

GIBA,

Local Preferences or Device Profiles settings or conflicts have about 0.0 to do with this problem, really. It's something in KR's Firewall or Client "Options" ** where things as proxy/http/socks are defined. Certainly I'm out of my depth here and given brinktastee at the time did not get past the problem, it's I think only WCG techs that could help to diagnose.

KR,

Please visit the cc_config.xml manual and set some extra network logging flags, so there's more feedback at what step of the connection things fall over.

<file_xfer_debug>1</file_xfer_debug>
Show completion status of file transfers.
<http_debug>1</http_debug>
Debugging information about HTTP operations.
<http_xfer_debug>1</http_xfer_debug>
Debugging information about network communication.
<proxy_debug>1</proxy_debug>
Debugging information about HTTP proxy operations.

** In the 6.12 client this screen has moved from the Advanced menu to the Tools > Display and Network Options. Think to have read that the 6.12 alpha client (not far from first public release), has further proxy configuration automation build in. knreed (WCG tech) surely will be way more informed on this.

edit: Your log suggests there is no proxy @Not using a proxy@, but don't trust that message, since when I've seen this when using an anonymous proxy on my Linux box.

edit2: did a google search on BOINC+websense+https and got this http://www.google.com/search?as_q=BOINC%2Bweb...s_rights=&safe=images which includes a hmmm solution to bypass Websense through a secure connection.
----------------------------------------
WCG Global & Research > Make Proposal Help: Start Here!
Please help to make the Forums an enjoyable experience for All!
----------------------------------------
[Edit 2 times, last edit by Sekerob at Dec 16, 2010 8:12:46 PM]
[Dec 16, 2010 8:02:35 PM]   Link   Report threatening or abusive post: please login first  Go to top 
Former Member
Cruncher
Joined: May 22, 2018
Post Count: 0
Status: Offline
Reply to this Post  Reply with Quote 
Re: Websense

Hi all,

I have a few available machines that are behind a websense firewall, i have permission to utilize these however i do not have the ability to lift the websense.

So far nothing helps:
- not a single proxy is working correct
- proxycfg.exe, no luck

Client doesnt want to connect to project. Any other way to do it ?

KR
kamaradski

This sounds like a rule/category in Websence is still blocking boinc.
Talk to the administrator, he/she should be able to see boinc being blocked in the logs and why.
----------------------------------------
[Edit 1 times, last edit by Former Member at Dec 16, 2010 8:42:31 PM]
[Dec 16, 2010 8:40:59 PM]   Link   Report threatening or abusive post: please login first  Go to top 
GIBA
Ace Cruncher
Joined: Apr 25, 2005
Post Count: 5374
Status: Offline
Reply to this Post  Reply with Quote 
Re: Websense

GIBA,

Local Preferences or Device Profiles settings or conflicts have about 0.0 to do with this problem, really. It's something in KR's Firewall or Client "Options" ** where things as proxy/http/socks are defined. Certainly I'm out of my depth here and given brinktastee at the time did not get past the problem, it's I think only WCG techs that could help to diagnose.
...


Sekerob,
for sure you have lot of knowledge and experience in WCG and Boinc client but many times I saw that you are wrong.

I respect your opinions and maybe you could be right this time, but I disagree 100% with your coments in this case for many reasons, but to simplify all, just due saw the same issue happens this year in one machine, just after installed 6.10.58 Boinc client release.

The way to solved it was clear the Boinc clients that are under local preferences, and after it take a complete review and some changes in my device profiles. Make it sense or not for you, it works for me !

Is impossible by now confirm that my problem was the same of kamaradski description, but appear be similar.

So, under my point of view, perspective and experience my suggestion appear be fair and valid to him, and additionally will not provoke any incovenience in nothing related with the issue if the solution willm pass for another way.

Last, but not least, obviously I'm not a tech or an expert on WCG or Boinc client issues, I'm just a cruncher with experience enough to share humbly with others that have willingness to read about, and right or wrong in my opinions, for sure I will not try block or invalidate suggestions to solve it from others here, as unfortunately I continuously saw in many posts across the forums.
----------------------------------------
Cheers ! GIB@ peace coffee
Join BRASIL - BRAZIL@GRID team and be very happy !
http://www.worldcommunitygrid.org/team/viewTeamInfo.do?teamId=DF99KT5DN1

[Dec 16, 2010 9:11:36 PM]   Link   Report threatening or abusive post: please login first  Go to top 
Sekerob
Ace Cruncher
Joined: Jul 24, 2005
Post Count: 20043
Status: Offline
Reply to this Post  Reply with Quote 
Re: Websense

"Many times you saw I was wrong"... @Maybe you are right this time@... well let me put it this way: Feel free to put in your name as CA candidate, and then start putting the research in to find possible and more plausible answers than the one you came up with now: The device profiles have 0.0 to do with this problem! What you saw on your machine with maybe the same last error message has nothing at all to do with the known: Websense is the issue. KR knows and brinktastee gave an ''informed'' clue.

Thank you.
----------------------------------------
WCG Global & Research > Make Proposal Help: Start Here!
Please help to make the Forums an enjoyable experience for All!
[Dec 16, 2010 9:22:43 PM]   Link   Report threatening or abusive post: please login first  Go to top 
GIBA
Ace Cruncher
Joined: Apr 25, 2005
Post Count: 5374
Status: Offline
Reply to this Post  Reply with Quote 
Re: Websense

"Many times you saw I was wrong"... @Maybe you are right this time@... well let me put it this way: Feel free to put in your name as CA candidate, and then start putting the research in to find possible and more plausible answers than the one you came up with now: The device profiles have 0.0 to do with this problem! What you saw on your machine with maybe the same last error message has nothing at all to do with the known: Websense is the issue. KR knows and brinktastee gave an ''informed'' clue.

Thank you.


Off topic, but need after read this kind of inapropriated, absurd and crazy coments:

I really hope that WCG Adm edit this bad post quoted above, maybe others.

Is obvious for me that a person that don't have capacity to support critics about your opinion or support any contrary opinion based on facts clearly explaned, don't have conditions to continue doing a constructive work here, at least not for me. Need get much more education before do it.

I would like to observe that I don't have any bad intention here, once my experience was with websense too, and I never will have intention to candidate myself or became anything in WCG, despite the absurds that this guy posted (maybe due his insecurity about I don't know what). Isn't the first time that this guy attack me on his coments in posts, and I really expect that WCG Adm take actions about it and to edit his coments, and my ones too if considered inapropriated.

Thank you in advance.
----------------------------------------
Cheers ! GIB@ peace coffee
Join BRASIL - BRAZIL@GRID team and be very happy !
http://www.worldcommunitygrid.org/team/viewTeamInfo.do?teamId=DF99KT5DN1

[Dec 16, 2010 11:44:35 PM]   Link   Report threatening or abusive post: please login first  Go to top 
Posts: 19   Pages: 2   [ 1 2 | Next Page ]
[ Jump to Last Post ]
Post new Thread