World Community Grid - View Thread

World Community Grid Forums

Category: Support

Forum: BOINC Agent Support

Thread: Websense

Quick Go »

No member browsing this thread

Thread Status: Active
Total posts in this thread: 19

[ ]

Author

This topic has been viewed 2172 times and has 18 replies

Sekerob
Ace Cruncher
Joined: Jul 24, 2005
Post Count: 20043
Status: Offline


Re: Websense

"Many times you saw I was wrong"... @Maybe you are right this time@... well let me put it this way: Feel free to put in your name as CA candidate, and then start putting the research in to find possible and more plausible answers than the one you came up with now: The device profiles have 0.0 to do with this problem! What you saw on your machine with maybe the same last error message has nothing at all to do with the known: Websense is the issue. KR knows and brinktastee gave an ''informed'' clue.

Thank you.

Off topic, but need after read this kind of inapropriated, absurd and crazy coments:

I really hope that WCG Adm edit this bad post quoted above, maybe others.

Is obvious for me that a person that don't have capacity to support critics about your opinion or support any contrary opinion based on facts clearly explaned, don't have conditions to continue doing a constructive work here, at least not for me. Need get much more education before do it.

I would like to observe that I don't have any bad intention here, once my experience was with websense too, and I never will have intention to candidate myself or became anything in WCG, despite the absurds that this guy posted (maybe due his insecurity about I don't know what). Isn't the first time that this guy attack me on his coments in posts, and I really expect that WCG Adm take actions about it and to edit his coments, and my ones too if considered inapropriated.

Thank you in advance.

To borrow a line: Um forte abraco e boa sorte!

PS, Websense is in thousands of companies... in mine it's a simple on-line raising of a support ticket, describe the resource that needs to be accessed and justification. 48 hours tops it took as per the SLA.

----------------------------------------

WCG

Global & Research > Make Proposal Help: Start Here!
Please help to make the Forums an enjoyable experience for All!

[Dec 17, 2010 6:56:50 AM]

Former Member
Cruncher
Joined: May 22, 2018
Post Count: 0
Status: Offline


Re: Websense

Thank you in advance.

giba, you can't get any more condescending than this. Totally uncalled for.

I agree with brink in that Websense may just need a rule to let the (multiple!) WCG websites through its filter. First time I ever saw Websense it took me about 5 minutes to setup a rule. It is definately not rocket science.

[Dec 17, 2010 1:37:39 PM]

kamaradski
Cruncher
Joined: Dec 16, 2010
Post Count: 12
Status: Offline
Project Badges:

1 year badge for Human Proteome Folding - Phase 2

45 day badge for Help Fight Childhood Cancer

45 day badge for Help Cure Muscular Dystrophy - Phase 2

90 day badge for The Clean Energy Project - Phase 2

14 day badge for Computing for Clean Water

90 day badge for Drug Search for Leishmaniasis

90 day badge for GO Fight Against Malaria

1 year badge for Microbiome Immunity Project

1 year badge for Africa Rainfall Project

5 year badge for OpenPandemics - COVID-19


Re: Websense

ok guy's i was not in work today, and will revert on Monday to see if any of the above was helpfull in solving this issue.

few items i can already comment on:
- VPN is out of the issue, as my admin will not allow due to infosec policy's
- I'm 100% sure no proxy's are in place, and also not possible due to the enforced infrastructure.
- My local sysadmin is very helpful, however all network and infrastructure settings are admined from India, and WCG will not be tolerated soon on that level :(

So whatever we come up with will have to be a selfsufficient workaround with no network settings impact. Officially i should not even have admin-rights on the local pc....

So anyone here that works on a high level decissionmaking position within my company SGS, please feel free and start promoting the use of WCG within the compagny structure.

Sometimes i wish i stayed at IBM, where i had 250 computers on the grid :)

KR
kamaradski

[Dec 17, 2010 5:52:33 PM]

kamaradski
Cruncher
Joined: Dec 16, 2010
Post Count: 12
Status: Offline
Project Badges:


Re: Websense

Hi all,

Troubleshoot continues today. Since of all previous messing around i decided to start off with a clean install. v6.10.58 under Win-XP

f the message in yours clients mentioned that the internet access are OK, maybe will be interesting just take a look and review again yours device profiles configurations in WCG website

I suspect this is due to the control website is ibm.com, and this is allowed in websense no problem.

will be press the clear button in the BOINC clients

Better to be save then sorry, so this has been actioned too.

<log_flags>
<file_xfer_debug>1</file_xfer_debug>
<http_debug>1</http_debug>
<http_xfer_debug>1</http_xfer_debug>
<proxy_debug>1</proxy_debug>
</log_flags>

Done see below log



12/20/2010 11:37:46 AM		Re-reading cc_config.xml
12/20/2010 11:37:46 AM		Re-read config file
12/20/2010 11:37:46 AM		log flags: file_xfer, sched_ops, task, file_xfer_debug, http_debug, http_xfer_debug
12/20/2010 11:37:46 AM		log flags: proxy_debug
12/20/2010 11:38:31 AM		Fetching configuration file from https://www.worldcommunitygrid.org/get_project_config.php
12/20/2010 11:38:31 AM		[http_debug] HTTP_OP::init_get(): https://www.worldcommunitygrid.org/get_project_config.php
12/20/2010 11:38:31 AM		[http_debug] HTTP_OP::libcurl_exec(): ca-bundle set
12/20/2010 11:38:31 AM		[proxy_debug] HTTP_OP::no_proxy_for_url(): https://www.worldcommunitygrid.org/get_project_config.php
12/20/2010 11:38:31 AM		[proxy_debug] returning false
12/20/2010 11:38:31 AM		[http_debug] [ID#2] Info:  Connection #0 seems to be dead!
12/20/2010 11:38:31 AM		[http_debug] [ID#2] Info:  Expire cleared
12/20/2010 11:38:31 AM		[http_debug] [ID#2] Info:  Closing connection #0
12/20/2010 11:38:31 AM		[http_debug] [ID#2] Info:  timeout on name lookup is not supported
12/20/2010 11:38:31 AM		[http_debug] [ID#2] Info:  About to connect() to www.worldcommunitygrid.org port 443 (#0)
12/20/2010 11:38:31 AM		[http_debug] [ID#2] Info:    Trying 198.20.8.246... 
12/20/2010 11:38:32 AM		[http_debug] [ID#2] Info:  Connected to www.worldcommunitygrid.org (198.20.8.246) port 443 (#0)
12/20/2010 11:38:32 AM		[http_debug] [ID#2] Info:  successfully set certificate verify locations:
12/20/2010 11:38:32 AM		[http_debug] [ID#2] Info:    CAfile: C:\Program Files\BOINC\ca-bundle.crt
12/20/2010 11:38:32 AM		[http_debug] [ID#2] Info:    CApath: none
12/20/2010 11:38:32 AM		[http_debug] [ID#2] Info:  SSLv3, TLS handshake, Client hello (1):
12/20/2010 11:38:32 AM		[http_debug] [ID#2] Info:  SSLv3, TLS handshake, Server hello (2):
12/20/2010 11:38:32 AM		[http_debug] [ID#2] Info:  SSLv3, TLS handshake, CERT (11):
12/20/2010 11:38:32 AM		[http_debug] [ID#2] Info:  SSLv3, TLS handshake, Server finished (14):
12/20/2010 11:38:32 AM		[http_debug] [ID#2] Info:  SSLv3, TLS handshake, Client key exchange (16):
12/20/2010 11:38:32 AM		[http_debug] [ID#2] Info:  SSLv3, TLS change cipher, Client hello (1):
12/20/2010 11:38:32 AM		[http_debug] [ID#2] Info:  SSLv3, TLS handshake, Finished (20):
12/20/2010 11:38:32 AM		[http_debug] [ID#2] Info:  SSLv3, TLS change cipher, Client hello (1):
12/20/2010 11:38:32 AM		[http_debug] [ID#2] Info:  SSLv3, TLS handshake, Finished (20):
12/20/2010 11:38:32 AM		[http_debug] [ID#2] Info:  SSL connection using AES256-SHA
12/20/2010 11:38:32 AM		[http_debug] [ID#2] Info:  Server certificate:
12/20/2010 11:38:32 AM		[http_debug] [ID#2] Info:  	 subject: C=US; ST=Georgia; L=Jasper; O=Sea Blue, Inc.; OU=Sea Blue, Inc.; CN=secure.worldcommunitygrid.org
12/20/2010 11:38:32 AM		[http_debug] [ID#2] Info:  	 start date: 2010-07-30 21:26:32 GMT
12/20/2010 11:38:32 AM		[http_debug] [ID#2] Info:  	 expire date: 2011-07-30 21:56:32 GMT
12/20/2010 11:38:32 AM		[http_debug] [ID#2] Info:  	 subjectAltName does not match www.worldcommunitygrid.org
12/20/2010 11:38:32 AM		[http_debug] [ID#2] Info:  Closing connection #0
12/20/2010 11:38:32 AM		[http_debug] [ID#2] Info:  SSLv3, TLS alert, Client hello (1):
12/20/2010 11:38:32 AM		[http_debug] HTTP error: SSL peer certificate or SSH remote key was not OK
12/20/2010 11:38:33 AM		Project communication failed: attempting access to reference site
12/20/2010 11:38:33 AM		[http_debug] HTTP_OP::init_get(): http://www.ibm.com/
12/20/2010 11:38:33 AM		[http_debug] HTTP_OP::libcurl_exec(): ca-bundle set
12/20/2010 11:38:33 AM		[proxy_debug] HTTP_OP::no_proxy_for_url(): http://www.ibm.com/
12/20/2010 11:38:33 AM		[proxy_debug] returning false
12/20/2010 11:38:33 AM		[http_debug] [ID#0] Info:  timeout on name lookup is not supported
12/20/2010 11:38:33 AM		[http_debug] [ID#0] Info:  About to connect() to www.ibm.com port 80 (#0)
12/20/2010 11:38:33 AM		[http_debug] [ID#0] Info:    Trying 129.42.58.216... 
12/20/2010 11:38:33 AM		[http_debug] [ID#0] Info:  Connected to www.ibm.com (129.42.58.216) port 80 (#0)
12/20/2010 11:38:33 AM		[http_debug] [ID#0] Sent header to server: GET / HTTP/1.1
12/20/2010 11:38:33 AM		[http_debug] [ID#0] Sent header to server: User-Agent: BOINC client (windows_intelx86 6.10.58)
12/20/2010 11:38:33 AM		[http_debug] [ID#0] Sent header to server: Host: www.ibm.com
12/20/2010 11:38:33 AM		[http_debug] [ID#0] Sent header to server: Accept: */*
12/20/2010 11:38:33 AM		[http_debug] [ID#0] Sent header to server: Accept-Encoding: deflate, gzip
12/20/2010 11:38:33 AM		[http_debug] [ID#0] Sent header to server: Content-Type: application/x-www-form-urlencoded
12/20/2010 11:38:33 AM		[http_debug] [ID#0] Sent header to server: 
12/20/2010 11:38:33 AM		[http_debug] [ID#0] Received header from server: HTTP/1.1 302 Found
12/20/2010 11:38:33 AM		[http_debug] [ID#0] Received header from server: Date: Mon, 20 Dec 2010 09:38:34 GMT
12/20/2010 11:38:33 AM		[http_debug] [ID#0] Received header from server: Server: IBM_HTTP_Server
12/20/2010 11:38:33 AM		[http_debug] [ID#0] Received header from server: Content-Type: text/html
12/20/2010 11:38:33 AM		[http_debug] [ID#0] Received header from server: Expires: Fri, 01 Jan 1990 00:00:00 GMT
12/20/2010 11:38:33 AM		[http_debug] [ID#0] Received header from server: Pragma: no-cache
12/20/2010 11:38:33 AM		[http_debug] [ID#0] Received header from server: Cache-Control: no-cache, must-revalidate
12/20/2010 11:38:33 AM		[http_debug] [ID#0] Received header from server: Location: http://www.ibm.com/us/en/
12/20/2010 11:38:33 AM		[http_debug] [ID#0] Received header from server: Content-Length: 209
12/20/2010 11:38:33 AM		[http_debug] [ID#0] Received header from server: 
12/20/2010 11:38:33 AM		[http_debug] [ID#0] Info:  Ignoring the response-body
12/20/2010 11:38:33 AM		[http_debug] [ID#0] Info:  Expire cleared
12/20/2010 11:38:33 AM		[http_debug] [ID#0] Info:  Connection #0 to host www.ibm.com left intact
12/20/2010 11:38:33 AM		[http_debug] [ID#0] Info:  Issue another request to this URL: 'http://www.ibm.com/us/en/'
12/20/2010 11:38:33 AM		[http_debug] [ID#0] Info:  Re-using existing connection! (#0) with host www.ibm.com
12/20/2010 11:38:34 AM		[http_debug] [ID#0] Info:  Connected to www.ibm.com (129.42.58.216) port 80 (#0)
12/20/2010 11:38:34 AM		[http_debug] [ID#0] Sent header to server: GET /us/en/ HTTP/1.1
12/20/2010 11:38:34 AM		[http_debug] [ID#0] Sent header to server: User-Agent: BOINC client (windows_intelx86 6.10.58)
12/20/2010 11:38:34 AM		[http_debug] [ID#0] Sent header to server: Host: www.ibm.com
12/20/2010 11:38:34 AM		[http_debug] [ID#0] Sent header to server: Accept: */*
12/20/2010 11:38:34 AM		[http_debug] [ID#0] Sent header to server: Accept-Encoding: deflate, gzip
12/20/2010 11:38:34 AM		[http_debug] [ID#0] Sent header to server: Referer: http://www.ibm.com/
12/20/2010 11:38:34 AM		[http_debug] [ID#0] Sent header to server: Content-Type: application/x-www-form-urlencoded
12/20/2010 11:38:34 AM		[http_debug] [ID#0] Sent header to server: 
12/20/2010 11:38:35 AM		[http_debug] [ID#0] Received header from server: HTTP/1.1 200 OK
12/20/2010 11:38:35 AM		[http_debug] [ID#0] Received header from server: Date: Mon, 20 Dec 2010 09:38:34 GMT
12/20/2010 11:38:35 AM		[http_debug] [ID#0] Received header from server: Server: IBM_HTTP_Server
12/20/2010 11:38:35 AM		[http_debug] [ID#0] Received header from server: Vary: User-Agent,*
12/20/2010 11:38:35 AM		[http_debug] [ID#0] Received header from server: Cteonnt-Length: 36975
12/20/2010 11:38:35 AM		[http_debug] [ID#0] Received header from server: Cache-Control: no-cache
12/20/2010 11:38:35 AM		[http_debug] [ID#0] Received header from server: Content-Type: text/html;charset=UTF-8
12/20/2010 11:38:35 AM		[http_debug] [ID#0] Received header from server: Content-Language: en-US
12/20/2010 11:38:35 AM		[http_debug] [ID#0] Received header from server: Vary: User-Agent, Accept-Encoding
12/20/2010 11:38:35 AM		[http_debug] [ID#0] Received header from server: Content-Encoding: gzip
12/20/2010 11:38:35 AM		[http_debug] [ID#0] Received header from server: Content-Length:       7229
12/20/2010 11:38:35 AM		[http_debug] [ID#0] Received header from server: 
12/20/2010 11:38:35 AM		[http_xfer_debug] [ID#0] HTTP: wrote 15023 bytes
12/20/2010 11:38:35 AM		[http_xfer_debug] [ID#0] HTTP: wrote 21952 bytes
12/20/2010 11:38:35 AM		[http_debug] [ID#0] Info:  Expire cleared
12/20/2010 11:38:35 AM		[http_debug] [ID#0] Info:  Connection #0 to host www.ibm.com left intact
12/20/2010 11:38:36 AM		Internet access OK - project servers may be temporarily down.

[B][http_debug] [ID#2] Info: subjectAltName does not match www.worldcommunitygrid.org[/B]
Is the problem related to the certificate ? that would be strange and unlikely..

Any futher suggestions will be much appriciated.

KR
kamaradski

[Dec 20, 2010 9:46:32 AM]

kamaradski
Cruncher
Joined: Dec 16, 2010
Post Count: 12
Status: Offline
Project Badges:


Re: Websense

ps: Just tryed to connect ot Rosetta (no blocked on Websense) and here i experience no problem to attach the project and download WU's.

[Dec 20, 2010 10:52:28 AM]

kamaradski
Cruncher
Joined: Dec 16, 2010
Post Count: 12
Status: Offline
Project Badges:


Re: Websense

one step closer to cracking it :)

The SSL error i was getting was that the certificate is for https://www.worldcomunitygrid.com whil actually the client encountered: https://secure.worldcommunitygrid.org.

Changing the project URL to the secure-url allowed me to attach boinc to the project. \0/

Next issue is that the scheduler is not working yet.

12/21/2010 11:53:31 AM [http_debug] [ID#1] Info: Unknown SSL protocol error in connection to grid.worldcommunitygrid.org:443
12/21/2010 11:53:31 AM [http_debug] [ID#1] Info: Expire cleared
12/21/2010 11:53:31 AM [http_debug] [ID#1] Info: Closing connection #1
12/21/2010 11:53:31 AM [http_debug] HTTP error: SSL connect error

Any qlue anyone, or a alternative URL i can use ?

KR
kamaradski

[Dec 21, 2010 10:03:00 AM]

kamaradski
Cruncher
Joined: Dec 16, 2010
Post Count: 12
Status: Offline
Project Badges:


Re: Websense

In the client_state & master.xml changing the sched-URL to:
<scheduler_url>https://secure.worldcommunitygrid.org/boinc/wcg_cgi/fcgi</scheduler_url> is not working. In the client_state file it gets automatically changed back to grid.worldcommunitygrid.org :(

Lets see whats next. Slowly running out of options though.

[EDIT]
As in my post above we can see the client still tries to contact grid.worldcommunitygrid.org, i seached all XML files in the application directory. however nowhere grid.worldcommunitygrid.org is referenced...

Is it maybe hardcoded, and why is the client_state gets reset tp use the grid.wcg.org url even though the master.xml is changed to the secure.wcg.org one ?

Does anyone have any ideas at all, as i'm so close yet so far away ...

KR
kamaradski

----------------------------------------
[Edit 2 times, last edit by kamaradski at Dec 21, 2010 12:27:54 PM]

[Dec 21, 2010 12:06:53 PM]

kamaradski
Cruncher
Joined: Dec 16, 2010
Post Count: 12
Status: Offline
Project Badges:


Re: Websense

No one knows how to change the scheduler URL into secure https ?

KR
kamaradski

[Dec 23, 2010 10:26:37 AM]

kamaradski
Cruncher
Joined: Dec 16, 2010
Post Count: 12
Status: Offline
Project Badges:


Re: Websense

Last try, anyone able to help me change the scheduler URL?
It would be a shame if my work pc's are not able to join WCG ....

KR
kamaradski

[Dec 28, 2010 4:00:29 PM]

[ ]