# Bc\_desktop stopped working in MacOS Safari, POSSIBLY across OOD 1.7 upgrade

**URL:** <https://discourse.openondemand.org/t/bc-desktop-stopped-working-in-macos-safari-possibly-across-ood-1-7-upgrade/904>\
**Category:** Get Help\
**Created:** [May 11, 2020, 1:52pm UTC](https://discourse.openondemand.org/t/bc-desktop-stopped-working-in-macos-safari-possibly-across-ood-1-7-upgrade/904 "2020-05-11T13:52:49Z")\
**Posts on this page:** 13\
**Page:** 1

<div class="post-metadata">

**Author:** ![azric](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/azric/32/63_2.png) [@azric](https://discourse.openondemand.org/u/azric)\
**Post date:** [May 11, 2020, 1:52pm UTC](https://discourse.openondemand.org/t/bc-desktop-stopped-working-in-macos-safari-possibly-across-ood-1-7-upgrade/904/1 "2020-05-11T13:52:49Z")

</div>

We’ve had bc\_desktop working on our CentOS7 and CentOS6 clusters for some time from our CentOS 7 based on demand server. Since the upgrade to OOD 1.7, bc\_desktop connects just tis there with cycling dots across the screen on the noVNC browser tab in Safari 13.1; It works quite well in Firefox 76.0.1 and Chrome 81.0.

Since updates to CentOS, OOD, MacOS and Safari all happened at about the same time, I can’t put a finger on what broke when. Oddly, Cluster Shell access, Jupiter Desktop, and Rstudio Desktops continue to work from Safari.

I’ve reduced this on a fresh Catalina Install on new hardware, as well as on my trusty old upgraded to Catalina 2015 MacBook Pro.

Has anyone else run into safari related connectivity problems?  
Ric

---

<div class="post-metadata">

**Author:** ![baverhey](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/baverhey/32/605_2.png) [@baverhey](https://discourse.openondemand.org/u/baverhey)\
**Post date:** [May 12, 2020, 2:18pm UTC](https://discourse.openondemand.org/t/bc-desktop-stopped-working-in-macos-safari-possibly-across-ood-1-7-upgrade/904/2 "2020-05-12T14:18:43Z")

</div>

We have  
_undefined method `desktop’ for #BatchConnect::SessionContext:0x0000000003cab9a0_

at the moment  
nevermind found it here

> [@Interactive Desktop - undefined method error - SOLVED](https://discourse.openondemand.org/t/interactive-desktop-undefined-method-error-solved/327):
>
> Hello, We have one cluster using PBSpro working with Interactive Desktops, but when I try to setup another system using PBSpro I get an undefined method error and the logs do not give much to go on. Here is the error I receive when I try to submit a new desktop session: undefined method `desktop’ for #\<BatchConnect::SessionContext:0x000000000438a820\> The main difference between the two clusters is that the one that works is a head node with attached compute nodes and the other is the head no…

you need full form and hide with null in atttributes

---

<div class="post-metadata">

**Author:** ![azric](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/azric/32/63_2.png) [@azric](https://discourse.openondemand.org/u/azric)\
**Post date:** [May 19, 2020, 7:16pm UTC](https://discourse.openondemand.org/t/bc-desktop-stopped-working-in-macos-safari-possibly-across-ood-1-7-upgrade/904/3 "2020-05-19T19:16:32Z")

</div>

It appears Apple has made safari near draconian with cross site stuff; the noVNC tab that opens shows errors redirecting to our in-domain SSO app, viz:

[Error] Cross-origin redirection to [https://shibboleth.arizona.edu/idp/profile/SAML2/Redirect/SSO;jsessionid=ondbvq9lo3pb15u8enxls91cz?execution=e1s1](https://shibboleth.arizona.edu/idp/profile/SAML2/Redirect/SSO;jsessionid=ondbvq9lo3pb15u8enxls91cz?execution=e1s1) denied by Cross-Origin Resource Sharing policy: Origin [https://ooddev.hpc.arizona.edu](https://ooddev.hpc.arizona.edu) is not allowed by Access-Control-Allow-Origin.

[Error] Cross-origin redirection to [https://shibboleth.arizona.edu/idp/profile/SAML2/Redirect/SSO;jsessionid=ondbvq9lo3pb15u8enxls91cz?execution=e1s1](https://shibboleth.arizona.edu/idp/profile/SAML2/Redirect/SSO;jsessionid=ondbvq9lo3pb15u8enxls91cz?execution=e1s1) denied by Cross-Origin Resource Sharing policy: Origin [https://ooddev.hpc.arizona.edu](https://ooddev.hpc.arizona.edu) is not allowed by Access-Control-Allow-Origin.

[Error] Failed to load resource: Cross-origin redirection to [https://shibboleth.arizona.edu/idp/profile/SAML2/Redirect/SSO;jsessionid=ondbvq9lo3pb15u8enxls91cz?execution=e1s1](https://shibboleth.arizona.edu/idp/profile/SAML2/Redirect/SSO;jsessionid=ondbvq9lo3pb15u8enxls91cz?execution=e1s1) denied by Cross-Origin Resource Sharing policy: Origin [https://ooddev.hpc.arizona.edu](https://ooddev.hpc.arizona.edu) is not allowed by Access-Control-Allow-Origin. (SSO, line 0)

[Error] TypeError: Cross-origin script load denied by Cross-Origin Resource Sharing policy. promiseReactionJob

Any suggestions on config changes to placate safari?

---

<div class="post-metadata">

**Author:** ![mario](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/mario/32/662_2.png) [@mario](https://discourse.openondemand.org/u/mario)\
**Post date:** [May 20, 2020, 3:17pm UTC](https://discourse.openondemand.org/t/bc-desktop-stopped-working-in-macos-safari-possibly-across-ood-1-7-upgrade/904/4 "2020-05-20T15:17:36Z")

</div>

@azric

What is the value of `Access-Control-Allow-Origin` on `shibboleth.arizona.edu`?

---

<div class="post-metadata">

**Author:** ![azric](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/azric/32/63_2.png) [@azric](https://discourse.openondemand.org/u/azric)\
**Post date:** [May 20, 2020, 4:16pm UTC](https://discourse.openondemand.org/t/bc-desktop-stopped-working-in-macos-safari-possibly-across-ood-1-7-upgrade/904/5 "2020-05-20T16:16:52Z")

</div>

Presuming

$ curl -v [https://shibboleth.arizona.edu](https://shibboleth.arizona.edu) 2\>&1 | grep -i origin

is a valid test, nothing containing the “origin” word was found.

Ric

---

<div class="post-metadata">

**Author:** ![mario](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/mario/32/662_2.png) [@mario](https://discourse.openondemand.org/u/mario)\
**Post date:** [May 20, 2020, 4:40pm UTC](https://discourse.openondemand.org/t/bc-desktop-stopped-working-in-macos-safari-possibly-across-ood-1-7-upgrade/904/6 "2020-05-20T16:40:00Z")

</div>

To reiterate the issue, `ooddev` is redirecting to shibboleth for authentication but a CORS error is being thrown?

---

<div class="post-metadata">

**Author:** ![azric](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/azric/32/63_2.png) [@azric](https://discourse.openondemand.org/u/azric)\
**Post date:** [May 20, 2020, 6:50pm UTC](https://discourse.openondemand.org/t/bc-desktop-stopped-working-in-macos-safari-possibly-across-ood-1-7-upgrade/904/7 "2020-05-20T18:50:44Z")

</div>

OOD gets to shib just fine initially; it has too in order to present the home page. You can submit jobs, etc. Only remote desktop fails when it apparently tries to vet you in the noVNC tab. Opening Safari Web Inspector window in the noVNC tab which is cycling “….” and looking at “Console” shows the error messages.

Ric

![image001.png](https://us1.discourse-cdn.com/flex015/uploads/osc/original/1X/54c580f4e983c4f3324813299ea8bd276a059acb.png)

![image002.png](https://us1.discourse-cdn.com/flex015/uploads/osc/original/1X/c77c2ac9082691ea7b08cd12b20a0c072cbd1946.png)

---

<div class="post-metadata">

**Author:** ![mario](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/mario/32/662_2.png) [@mario](https://discourse.openondemand.org/u/mario)\
**Post date:** [May 21, 2020, 5:07pm UTC](https://discourse.openondemand.org/t/bc-desktop-stopped-working-in-macos-safari-possibly-across-ood-1-7-upgrade/904/8 "2020-05-21T17:07:43Z")

</div>

I was able to reproduce this error on our own systems. This appears to be a bug with Safari specifically with the way auth cookies are set. Safari doesn’t like `SameSite=None`.

I’m digging deeper into this, I will keep you updated

---

<div class="post-metadata">

**Author:** ![mario](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/mario/32/662_2.png) [@mario](https://discourse.openondemand.org/u/mario)\
**Post date:** [May 27, 2020, 9:28pm UTC](https://discourse.openondemand.org/t/bc-desktop-stopped-working-in-macos-safari-possibly-across-ood-1-7-upgrade/904/9 "2020-05-27T21:28:18Z")

</div>

@azric Worked with @jeff.ohrstrom to fix this. The fix will be in release `1.8` but it’s a simple change to `vnc.html` if you want to get this done before `1.8` is released.

Edit the file `ondemand/apps/dashboard/public/noVNC-1.1.0/vnc.html` and replace line 79:

```auto
<script type="module" crossorigin="anonymous" src="app/ui.js"></script>

```

with

```auto
<script type="module" crossorigin="use-credentials" src="app/ui.js"></script>

```

Also add `nomodule` to line 61 in `vnc.html`:

```auto
<script nomodule src="app/error-handler.js"></script>

```

> <https://github.com/OSC/ondemand/pull/516>

---

<div class="post-metadata">

**Author:** ![azric](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/azric/32/63_2.png) [@azric](https://discourse.openondemand.org/u/azric)\
**Post date:** [May 27, 2020, 10:32pm UTC](https://discourse.openondemand.org/t/bc-desktop-stopped-working-in-macos-safari-possibly-across-ood-1-7-upgrade/904/10 "2020-05-27T22:32:56Z")

</div>

Confirmed fixed at UArizona with this modification installed

Thanks Much,

Ric

![image001.png](https://us1.discourse-cdn.com/flex015/uploads/osc/original/1X/54c580f4e983c4f3324813299ea8bd276a059acb.png)

![image002.png](https://us1.discourse-cdn.com/flex015/uploads/osc/original/1X/c77c2ac9082691ea7b08cd12b20a0c072cbd1946.png)

---

<div class="post-metadata">

**Author:** ![npavlovikj](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/npavlovikj/32/890_2.png) [@npavlovikj](https://discourse.openondemand.org/u/npavlovikj)\
**Post date:** [May 28, 2020, 9:00pm UTC](https://discourse.openondemand.org/t/bc-desktop-stopped-working-in-macos-safari-possibly-across-ood-1-7-upgrade/904/11 "2020-05-28T21:00:36Z")

</div>

Thank you so much for providing a solution for this - I encountered the same error on Safari 13.1, and the proposed solution worked for me.

---

<div class="post-metadata">

**Author:** ![jeff.ohrstrom](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/jeff.ohrstrom/32/136_2.png) [@jeff.ohrstrom](https://discourse.openondemand.org/u/jeff.ohrstrom)\
**Post date:** [May 29, 2020, 1:54pm UTC](https://discourse.openondemand.org/t/bc-desktop-stopped-working-in-macos-safari-possibly-across-ood-1-7-upgrade/904/12 "2020-05-29T13:54:16Z")

</div>

The fix for this has been released in 1.7.14 so you should only need to update now. Thanks all!

---

<div class="post-metadata">

**Author:** ![westburg.2](https://avatars.discourse-cdn.com/v4/letter/w/0ea827/32.png) [@westburg.2](https://discourse.openondemand.org/u/westburg.2)\
**Post date:** [May 26, 2022, 3:43pm UTC](https://discourse.openondemand.org/t/bc-desktop-stopped-working-in-macos-safari-possibly-across-ood-1-7-upgrade/904/13 "2022-05-26T15:43:14Z")

</div>