Hi!

I just upgraded my boinc client to ver. 5.10.20 and found out that the internet access is broken again.

This is at work and using a proxy ( MS ISA ) with Basic, NTLM and Negotiable modes enabled.

Version 5.8.15 worked fine with this proxy.
Early versions didnt worked.

Versions 5.10.13 and 5.10.20 dont work again.

I have search the forum for related questions but what I found is old, unrelated or still waiting a reply.

I manage to get Boinc working using Proxomitron, pointing Boinc to proxomitron on localhost, adding Basic authentication to every request on proxomitron and pointing proxomitron to the ISA proxy.
But this is dificult to manage because proxy passwords change every month and I have to calculate the base64 code of the user and password to feed to proxomitron.
Its like hacking my self :)

Version 5.8.15 was ok. Please bring it back :)

Sorry for my bad english,

Paulo

This of course has to be fixed, but in the meantime, you can get 5.8.16: http://boinc.berkeley.edu/dl/boinc_5.8.16_windows_intelx86.exe

Isn't that due to the libCurl version that was used in 5.10.20?
If 5.8.15/16 work, then 5.10.21 should work as well, as it has the older libCurl version.

---

This of course has to be fixed, but in the meantime, you can get 5.8.16: http://boinc.berkeley.edu/dl/boinc_5.8.16_windows_intelx86.exe

Thankyou for your quick reply.

In did version 5.8.16 work fine.
Just take me some time to find out that I have to uninstall the lateste version before instaling a previous one.

[Ageless]
I readed your reply but I see .21 is not final and I dont wont to run un unstable version.

Thanks guys,

Paulo

Hi Guys!

I/We use MS ISA proxy with autetntication.
In fact the last BOINC which can work correctly is 4.45 all new others can not.
5.8.15 and 5.8.16 can download everything but can not upload nothing.
5.10.x can not download nothing :(

Regards:
Pal

Hi Guys!

I/We use MS ISA proxy with autetntication.
In fact the last BOINC which can work correctly is 4.45 all new others can not.
5.8.15 and 5.8.16 can download everything but can not upload nothing.
5.10.x can not download nothing :(

Regards:
Pal

In your case, please register at BOINC Trac and make a new ticket. Put in as much information as you can, including logs and error messages.

---

Hi Guys!

I/We use MS ISA proxy with autetntication.
In fact the last BOINC which can work correctly is 4.45 all new others can not.
5.8.15 and 5.8.16 can download everything but can not upload nothing.
5.10.x can not download nothing :(

Regards:
Pal

Hi.

5.8.16 works for me with MS ISA.
I didnt check exactly wich authentication it is using ( it dont tell and I didnt spy on it to find out ) and it could depend on the allowed methods. As I wroted above, I could be using Basic, NTLM and Negotiable.

Checking my boinc logs it gets a lot of errors especialy if it tries to comunicate to severel projects in sequence. But, after it calms down, it ends up downloading and uploading all the necessary files.

Hope I could help someting,

Paulo

Isn't that due to the libCurl version that was used in 5.10.20?
If 5.8.15/16 work, then 5.10.21 should work as well, as it has the older libCurl version.

IIRC 5.8.16 was one of the latest (somehow stable) versions, which worked for me behind (MS ISA) NTLM proxy.

Current 5.10.23 (with libcurl 7.17.0 according to Rom) does not, and neither did the previous ones.

Peter

IIRC 5.8.16 was one of the latest (somehow stable) versions, which worked for me behind (MS ISA) NTLM proxy.

Current 5.10.23 (with libcurl 7.17.0 according to Rom) does not...

Current 5.10.30 (with libcurl 7.17.1 according to Rom) also does not worke for me behind (MS ISA) NTLM proxy.

Peter

IIRC 5.8.16 was one of the latest (somehow stable) versions, which worked for me behind (MS ISA) NTLM proxy.

Current 5.10.23 (with libcurl 7.17.0 according to Rom) does not...

Current 5.10.30 (with libcurl 7.17.1 according to Rom) also does not worke for me behind (MS ISA) NTLM proxy.

Peter

Same here.

It manages to do an 'update project' but it fails a second one.

Back to proxomitron...

Pepo wrote:

Current 5.10.30 (with libcurl 7.17.1 according to Rom) also does not worke for me behind (MS ISA) NTLM proxy.

Hmm.. In my net, 5.10.28 works just fine behind ISA (NTLM).
But yet another thing - it doesn't work from the host which can't access ISA directly via the next chain:
Host1 -> [TCP Redirector]Host2 -> [ISA(NTLM)] -> Internet
As a redirector, I used Opt-In Tunnel (http://www.optinsoft.com). It has connected to the project (S@H) and registered the host normally but failed to download any task after that. (usual web via browser work fine in Host1 as well).

Does it help if you try experimenting with different redirectors?

---

Does it help if you try experimenting with different redirectors?

I'll try tomorrow, when will have an access to those servers. Could you advise some another tiny product[s], which has a TCP boucing functionality ONLY, and IP filtering ability? (It's not desireble to install some full-weight proxy with a lot of protocols supported to the Host2.)
May be HTTP 1.0 will help in my situation, though..

Could you advise some another tiny product[s], which has a TCP boucing functionality ONLY, and IP filtering ability?

If you're in a windows environment, you could have a look at two products from AnalogX:
portmapper - handy lightweight port redirector and
proxy - simplest of proxy servers.

If you're in a windows environment, you could have a look at two products from AnalogX:
portmapper - handy lightweight port redirector and
proxy - simplest of proxy servers.

Perfect! Thanks a lot!

Could you advise some another tiny product[s], which has a TCP boucing functionality ONLY, and IP filtering ability?

If you're in a windows environment, you could have a look at two products from AnalogX:
portmapper - handy lightweight port redirector and
proxy - simplest of proxy servers.

Maybe also
http://ntlmaps.sourceforge.net/ - NTLM Authorization Proxy Server

Peter

Maybe also
http://ntlmaps.sourceforge.net/ - NTLM Authorization Proxy Server
Peter

Thank you.
I just did an experiment with portmapper, and all tasks (i.e. attaching to the project, science app download/installation, WU download and reporting) are working clear! In WU down/uploading, I've even complicated the schema to the next:
Host1 -> [TCP Redirector]Host2 -> [UserGate 4.2 proxy]Host3 -> [ISA(NTLM)] -> Internet
And it's still working without any problems. I'd even not been forced to change the protocol to HTTP 1.0.
So it seems that there was a certain redirector's problem, and ISA via NTLM auth doesn't make any dikes for BOINC 5.10.28.. In my circumstance at least.

NTMLAPS is working fine for me behind NTLM proxy. It is just that I'd like so much to see Boinc working from behind NTLM again.

The final Acid test if you will is signing up to www.worldcommunitygrid.org and see if you setup keeps working with the added https/ssl hurdle. Not only download, which seems to work oftentimes, but the upload of the Ready to Report part. Select a short DDDT science of WCG to get a result in 60'70 minutes.

I'll try this under the WCG fire test tomorrow when my HCC WU will finish. (Actually I should not forget to suspend it, otherwise it would finish and upload at home overnight.)

Peter

NTMLAPS is working fine for me behind NTLM proxy. It is just that I'd like so much to see Boinc working from behind NTLM again.

The final Acid test if you will is signing up to www.worldcommunitygrid.org and see if you setup keeps working with the added https/ssl hurdle. Not only download, which seems to work oftentimes, but the upload of the Ready to Report part. Select a short DDDT science of WCG to get a result in 60'70 minutes.

I'll try this under the WCG fire test tomorrow when my HCC WU will finish. (Actually I should not forget to suspend it, otherwise it would finish and upload at home overnight.)

I've successfully uploaded and reported the mentioned WU over ntlmaps through NTLM poxy.

Peter

NTMLAPS is working fine for me behind NTLM proxy. (It is just that I'd like so much to see Boinc working from behind NTLM again.)

Thanks Peter. Can you share the exact config as in the settings you did in BOINC, presuming it's version 5.10.28? Anything else in the actual proxy server that needed consideration?

I've installed ntlmaps-setup-0.9.9.6.exe, release version (for Win32) (from NTLM Authorization Proxy Server download page), then checked or modified just the following six obvious lines my C:\Program Files\ntlmaps\server.cfg:

# new proxy server port, to be used in my applications
# I don't know, whether it is randomly generated for me, or usual for NTLMAPS insallation,
# in my case I left it untouched as there was no conflict on my machine
LISTEN_PORT:5865

# FQDN of the proxy server
PARENT_PROXY:my.proxy.server.name.net

# proxy server's port
PARENT_PROXY_PORT:8080

# name of the authenticated user's Windows domain
NT_DOMAIN:MY_WIN_DOMAIN

# authenticated user's Windows login name
USER:mywinusername

# I've left this empty, NTLMAPS asks each time when started
# it can be also filled in, it will then not ask
PASSWORD:

These would be usually set in s/o's browser as:
proxy server and port = my.proxy.server.name.net:8080
Windows domain name and username = MY_WIN_DOMAIN\mywinusername

After start, NTLMAPS writes:

C:\Program Files\ntlmaps.exe -c server.cfg
NTLM authorization Proxy Server v0.9.9.6
Copyright (C) 2001-2005 by Dmitry Rozmanov, Darryl Dixon, and others.
------------------------
Your NT password to be used:*****
Now listening at Myhostname on port 5865

First tried with browser, whether it works, then set the following up in Boinc Manager:

Advanced / Options / HTTP Proxy tab,
[x] Connect via HTTP proxy server
Address: localhost
Port: 5865
User Name: MY_WIN_DOMAIN\mywinusername
Password: mYw iNd oWs pAs sWo rD.

The nice on the thing, it worked out of the box.

Peter

PS: While looking at the overall setup, it is probably not more necessary to fill in Boinc's User Name and Password, these are just leftovers from few days ago, prior to installing NTLMAPS. (I hope these will be necessary later, when libCurl will again support my NTLM proxy.)