Thread 'Blue Coat security software impacting BOINC on corporate machines'

Message boards : BOINC client : Blue Coat security software impacting BOINC on corporate machines
Message board moderation

To post messages, you must log in.

AuthorMessage
BillR

Send message
Joined: 14 Jul 08
Posts: 4
Canada
Message 18420 - Posted: 14 Jul 2008, 14:19:10 UTC

My company recently installed Blue Coat, a network security tool. This tool blocks people from surfing to "bad" sites using the corporate internet connection.

Unfortunatly, this impacts the BOINC software when it tries to upload or download information. The error shows up in the messages as a "transient upload error" with no other information.

This isn't because the project sites are on some "bad" list, but beause the BOINC software doesn't "authenticate" itself with the Blue Coat software. I've reported the problem to the support team, and hopefully a fix will be incorporated into a future version of BOINC.

In the mean time, my network people came up with a workaround. I've installed FireFox. Every time I launch it, it prompts me for my user id and password to use for authentication. Once this is supplied, the BOINC software running on my corporate machines can upload and download for the next 8 hours, after which I have to re-authenticate. It's a pain, but it works.

I added this thread because there was no mention of Blue Coat on this forum.

Bill
ID: 18420 · Report as offensive
ProfileJord
Volunteer tester
Help desk expert
Avatar

Send message
Joined: 29 Aug 05
Posts: 15599
Netherlands
Message 18421 - Posted: 14 Jul 2008, 14:36:14 UTC

It is a proxy server, isn't it?
Which BOINC version are you using and what proxy settings did you set under BOINC Manager->Advanced->Options?
ID: 18421 · Report as offensive
BillR

Send message
Joined: 14 Jul 08
Posts: 4
Canada
Message 18423 - Posted: 14 Jul 2008, 14:54:52 UTC - in response to Message 18421.  

It is a proxy server, isn't it?
Which BOINC version are you using and what proxy settings did you set under BOINC Manager->Advanced->Options?


I'm running the 5.10.45, and the proxy settings are "out of the box".

Bill
ID: 18423 · Report as offensive
ProfileJord
Volunteer tester
Help desk expert
Avatar

Send message
Joined: 29 Aug 05
Posts: 15599
Netherlands
Message 18424 - Posted: 14 Jul 2008, 15:11:50 UTC - in response to Message 18423.  

OK... You can force the authentication of the proxy server through the client configuration file cc_config.xml

To do so, you need to know what kind of authentication the proxy server uses, but options are basic, digest, gss-negotiate and ntlm

To force the authentication, make a cc_config.xml file in your BOINC directory. I use Notepad to make mine, make sure the extension is .xml and not .txt

Add in it:
<cc_config>
<options>
<force_auth>N</force_auth>
</options>
</cc_config>

Where N is either basic, digest, gss-negotiate or ntlm

Save the file. Now open BOINC manager->Advanced view->Advanced->Read config file
It won't show in the messages that it did read the file, but it will have.
Now try to communicate.
ID: 18424 · Report as offensive
BillR

Send message
Joined: 14 Jul 08
Posts: 4
Canada
Message 18427 - Posted: 14 Jul 2008, 16:00:58 UTC - in response to Message 18424.  

OK... You can force the authentication of the proxy server through the client configuration file cc_config.xml

To do so, you need to know what kind of authentication the proxy server uses, but options are basic, digest, gss-negotiate and ntlm

To force the authentication, make a cc_config.xml file in your BOINC directory. I use Notepad to make mine, make sure the extension is .xml and not .txt

Add in it:
<cc_config>
<options>
<force_auth>N</force_auth>
</options>
</cc_config>

Where N is either basic, digest, gss-negotiate or ntlm

Save the file. Now open BOINC manager->Advanced view->Advanced->Read config file
It won't show in the messages that it did read the file, but it will have.
Now try to communicate.



I just spoke with my network people who manage the Blue Coat server. They have not set it up to authenticate as you describe above, but are planning to do so later this week. I'll give this a try and report back.

Thanks for the help,
Bill
ID: 18427 · Report as offensive
BillR

Send message
Joined: 14 Jul 08
Posts: 4
Canada
Message 18713 - Posted: 21 Jul 2008, 15:11:20 UTC - in response to Message 18427.  

My network people gave me the address to an HTTP PROXY server to allow BOINC to authenticate with the Blue Coat software.

As described above, I went to "ADVANCED", "OPTIONS", and clicked on the "HTTP Proxy" tab. I filled in the proxy server information that was supplied by the network people, and then restarted the BOINC application.

It started uploading immediately.

I didn't have to create the "cc_config.xml" file.

Since my password is now stored in "client_stat.xml", I'll have to remember to go in and edit it every time I change my password.

Thanks for the help.

Bill
ID: 18713 · Report as offensive
ProfileJord
Volunteer tester
Help desk expert
Avatar

Send message
Joined: 29 Aug 05
Posts: 15599
Netherlands
Message 18716 - Posted: 21 Jul 2008, 18:25:17 UTC - in response to Message 18713.  

Great news and you're welcome. If you have any more questions or problems, you know where to find us. :-)

ID: 18716 · Report as offensive

Message boards : BOINC client : Blue Coat security software impacting BOINC on corporate machines

Copyright © 2025 University of California.
Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free Software Foundation.