Older clients no longer allowed?

Questions and Answers : Windows : Older clients no longer allowed?
Message board moderation

To post messages, you must log in.

AuthorMessage
OzzFan Crowdfunding Project Donor*Special Project $75 donorSpecial Project $250 donor
Volunteer tester
Avatar

Send message
Joined: 9 Apr 02
Posts: 15688
Credit: 84,761,841
RAC: 28
United States
Message 2031995 - Posted: 11 Feb 2020, 23:47:53 UTC

I have a 2003 domain controller that was crunching along successfully and last contacted the servers on January 14. Since then the Messages tab keeps saying that it cannot access the project servers and the project must be down. I'm certain this device has network access.

This happened on two other systems and I was able to fix by upgrading BOINC, however, since this is a domain controller I can't install anything newer than 5.10.45. I could force it to upgrade but I'd rather try to understand why it can't connect. I'd copy the Messages here but it's the typical :

Project communication failed: attempting to access reference site
Access to reference site succeeded - project servers may be temporarily down

Any ideas?
ID: 2031995 · Report as offensive
Profile Keith Myers Special Project $250 donor
Volunteer tester
Avatar

Send message
Joined: 29 Apr 01
Posts: 12866
Credit: 1,160,866,277
RAC: 1,873
United States
Message 2031999 - Posted: 11 Feb 2020, 23:58:56 UTC - in response to Message 2031995.  

Your client doesn't have the correct security protocols in use by the project now. Solution is to get a newer client. Since you can't do that I guess you are done with that host on Seti.

Unless you can figure out how to get the current ca-cert SSL authentication package you are done. For the error messages telling you the problem, turn on http_debug and look at the log file after the client attempts to contact the project.
Seti@Home classic workunits:20,676 CPU time:74,226 hours

A proud member of the OFA (Old Farts Association)
ID: 2031999 · Report as offensive
Profile Mr. Kevvy Crowdfunding Project Donor*Special Project $250 donor
Volunteer moderator
Volunteer tester
Avatar

Send message
Joined: 15 May 99
Posts: 3280
Credit: 1,114,826,392
RAC: 3,319
Canada
Message 2032000 - Posted: 12 Feb 2020, 0:02:43 UTC - in response to Message 2031995.  

Please see this thread. Apparently you may be able to copy ca-bundle.crt from a working BOINC to this one to replace the outdated one.
ID: 2032000 · Report as offensive
OzzFan Crowdfunding Project Donor*Special Project $75 donorSpecial Project $250 donor
Volunteer tester
Avatar

Send message
Joined: 9 Apr 02
Posts: 15688
Credit: 84,761,841
RAC: 28
United States
Message 2032016 - Posted: 12 Feb 2020, 1:48:59 UTC

I don't think it's the age of the OS. I have a Windows 2000 Professional client crunching successfully, though it can't install anything newer than 7.2.x, and that's old than Win2k3. Proposing an educated guess, I'd say the old certificate file was SHA1 and they finally got around to updating it to SHA256, as is currently the standard.

I successfully copied the .crt file from a working computer to the domain controller, but it is currently on back-off for 23 hours. I'll have to check back. At least it isn't saying that it can't access the project servers.

Thanks for the help!
ID: 2032016 · Report as offensive
Profile Jord
Volunteer tester
Avatar

Send message
Joined: 9 Jun 99
Posts: 15183
Credit: 4,362,181
RAC: 3
Netherlands
Message 2032028 - Posted: 12 Feb 2020, 2:48:46 UTC - in response to Message 2032016.  

Charlie, present day BOINC can be installed on a domain controller as long as you install it as a user installation. That problem where the installer would balk because it couldn't make the BOINC limited user accounts is afaik only still present for service installs. The non-service install no longer makes those accounts.

So try 7.14
ID: 2032028 · Report as offensive
OzzFan Crowdfunding Project Donor*Special Project $75 donorSpecial Project $250 donor
Volunteer tester
Avatar

Send message
Joined: 9 Apr 02
Posts: 15688
Credit: 84,761,841
RAC: 28
United States
Message 2032031 - Posted: 12 Feb 2020, 3:00:32 UTC - in response to Message 2032028.  

I remember you telling me that, but I prefer the service install on systems that don't have a GPU to use. Like I said, I could upgrade selecting the user install as you suggested, then manually create a BOINC service but I was just curious as to why it suddenly stopped working so far back and continued to not work.
ID: 2032031 · Report as offensive
OzzFan Crowdfunding Project Donor*Special Project $75 donorSpecial Project $250 donor
Volunteer tester
Avatar

Send message
Joined: 9 Apr 02
Posts: 15688
Credit: 84,761,841
RAC: 28
United States
Message 2032162 - Posted: 13 Feb 2020, 3:01:00 UTC

So the back off period ended and the domain controller went right back to saying it can't connect to the project servers. I even stopped and restarted the BOINC service for good measure. I also checked the .crt file and it looks like it's still SHA1 but has an expiration of 2028. Not even a restart helped.

I also attempted to upgrade to 7.14.2 using the installer but right after clicking Next it would just say that it was interrupted and I had to click Finish.

In the end I extracted the .msi out of the installer using the /a switch, installed manually using msiexec /I boinc.msi, selected the user option, then manually created the system service and it all seems to be working now.
ID: 2032162 · Report as offensive

Questions and Answers : Windows : Older clients no longer allowed?


 
©2021 University of California
 
SETI@home and Astropulse are funded by grants from the National Science Foundation, NASA, and donations from SETI@home volunteers. AstroPulse is funded in part by the NSF through grant AST-0307956.