Frequently Asked Questions
about the Library Proxy Server
Setup instructions | Troubleshooting | Report a problem
Proxy server basics
Setting up your web browser
Using the proxy server
CalNet-related issues
Other problems
Proxy server basics
What is the proxy server?
The proxy server allows us to provide off-campus access to article databases and other licensed electronic resources to authorized UC Berkeley users, while ensuring we
don't provide them to unauthorized users, as required by the terms of our license agreements.
To do this, the proxy server acts as an intermediary between your computer and the Library's licensed electronic resources by virtually providing your machine with a
UC Berkeley IP address, as if you were on campus. It is active only when you are accessing these resources.
What changed in the new (as of April 2012) proxy?
- The new proxy uses a single URL, rather than different ones for CalNet and PIN login (both login methods are still available, and existing users don't need to change their settings).
- When using the Patron/PIN login method, you will now need to enter the email address associated with your library account. If you're not sure which address this is, or if you get an "invalid login" message, log into My OskiCat and use the address displayed there.
- Your browser must be configured to accept all cookies while using proxied resources.
Why did it have to change?
Attackers had been guessing some weak OskiCat PINs and using them to download resources in bulk. The resource vendors recognized this as unauthorized
access and would block all UC Berkeley access until the situation was resolved.
The new proxy offers better security, and should help to guarantee uninterrupted access to resources.
Why do I have to configure my browser to accept cookies?
Sending cookies to your browser is how the proxy identifies you as an authenticated user who should have access to licensed resources.
Does it have to accept even third-party cookies?
Yes. For the duration of your proxy session, your browser will need to accept all cookies, in order to ensure normal operation and prevent unauthorized access to licensed resources.
If you have configured your browser to block
third-party cookies, you may see an error message from the proxy indicating you need to enable cookies, or you may experience unexpected failures because requests for
javascript, stylesheets, or images were disallowed.
If you're concerned about the privacy implications of allowing all cookies, please consider the following approaches:
- Configure your browser to delete cookies on exit, and exit at the end of each web browsing session. You can also delete cookies manually whenever you like. Here are instructions for Firefox, Google Chrome, Internet Explorer, Safari, and Safari for iPad.
- Use a different browser when you access licensed resources. Configure it to use the proxy, and to accept all cookies.
- In a browser that supports profiles, like Firefox, configure one profile for proxy use with all cookies allowed, and one for other use.
- Instead of the proxy server, use the VPN (Virtual Private Network) system.
Who is eligible to use the proxy server?
Eligibility is governed by our license agreements with the vendors of electronic resources. These typically stipulate
that the Library can permit off-campus access to authorized users only.
"Authorized users" are:
- Current UC Berkeley students, faculty, and staff
- Continuing UC Berkeley students who, although unregistered, are in good standing and working towards a degree
- UC Berkeley emeritus professors and retired academic staff
- UCOP (University of California Office of the President) staff with valid UC Berkeley library cards
- UC Extension students with valid UC Berkeley library cards (must be a California resident and apply for the card in person)
- UC Extension faculty with valid UC Berkeley library cards (for details, contact the Privileges Desk)
- Visiting scholars and post-doctoral fellows who are registered with the
Visiting Scholars and Postdoc Affairs office.
Off-campus access via the proxy server is not available
to alumni, to former employees, to retired non-academic staff,
to persons unofficially or only loosely affiliated with UC Berkeley,
to associates of other University of California campuses,
to those who have purchased a UC Berkeley Library Card,
or to the public at large. If you have questions concerning your eligibility for Library services, please contact the Privileges Desk in Doe Library (510-642-3403).
However, anyone may come into the Library and use these resources through the "Research Access" option on
our public computers.
Which resources can I use through the proxy server?
The proxy server provides off-campus access to electronic resources licensed by the UC Berkeley Library. These include article databases, e-journals, e-books,
encyclopedias, dictionaries, numeric data, and other premium online resources available through our website and catalogs.
You can locate many of these through the Electronic Resources Finder, or through links in
the library catalogs (look for "Electronic Locations" or "Available online").
Some resources are not available through the proxy server, generally because they operate through specific software on your computer rather than through the web. These
include ARTstor (Macintosh only), Luna Insight, the java client in UC Image Service, and the Connect function in EndNote.
UC Berkeley users can access these resources from off campus through our
VPN (Virtual Private Network) system.
Will the proxy server work with my Internet connection?
The proxy server will work with DSL, cable, ISDN, or dial-up modem connections from most third party Internet Service Providers (AT&T, Comcast, Earthlink, etc.).
If you connect to the Internet through a firewall, you may experience problems.
You do not need the proxy server if your computer is connected to the Internet through the UC Berkeley network in a campus building or residence hall, or via AirBears.
Will the proxy server slow down my connection?
The proxy server will only be used when you attempt to access a website that requires a UC Berkeley IP Address. Once you log in and gain permission to access the site,
the proxy server will not perform any actions that use your bandwidth. In other words, it should not affect your download times at all.
Can I use the proxy server from behind a firewall?
Firewalls come between your computer and the Internet in order to screen out potentially harmful traffic. Because of this, firewalls may cause problems for browsers
that run Automatic Proxy Configuration. This can happen whether the firewall is operated by your company or by your Internet Service Provider. "Personal firewall"
products may also cause problems, though some have been used successfully with the proxy server.
For more information, see our Troubleshooting page under firewalls.
Will other people who share my computer also be able to use the proxy server?
If your computer is accessible to other people in your household or off-campus work site, we recommend that you either delete your browser's cookies or log out by
clicking on this link.
This will protect your privacy and prevent others from using licensed resources under your login. When the browser is restarted, you will be required to log in again
before using the proxy server.
Will the proxy server monitor my regular Internet use?
No. Automatic Proxy Configuration causes your browser to request
only the Library's licensed electronic resources (as listed in a file that is loaded into your computer when the browser starts up) through the proxy server.
It lets the browser send all other requests directly over the Internet. Thus, your personal use of web pages, e-mail, chat, etc. are not recorded or observed by the
proxy server.
Setting up your web browser
Which web browser should I use?
A browser that supports an Automatic Proxy Configuration feature is required. We recommend that you use a modern browser for which security updates are provided, such
as Firefox 10+, Microsoft Internet Explorer 8+, Google Chrome 17+, or Safari 4+.
Where can I download a browser?
All the web browsers discussed here are freely available.
How do I set up my web browser?
For step-by-step instructions, choose your browser from this list.
How do I find out which version of the browser I have?
On Windows computers, click on Help in the browser's menu bar, then select About [name of browser].
On Macintosh computers, click on the browser's name in the top menu bar, then select About [name of browser].
If I have two browsers installed, do I have to configure both of them?
No, but you will need to set up each browser that you plan to use with the proxy server. Configuring one browser will not automatically configure the other one.
Do I have to set up my browser every time I surf the web?
No. Once you've set up your browser to use the proxy server, the setting will be saved until you change it.
How do I turn off the Automatic Proxy Configuration setting?
If you no longer need to use the proxy server, you can easily disable the the Automatic Proxy Configuration setting.
To do this, go to the setup instructions for your browser and follow the instructions for turning off the setting.
Once you do this, you will be unable to use the proxy server until you turn the setting back on.
What if I need to use another proxy server?
You would need to reconfigure your browser each time you want to switch proxy servers. There may be extensions available for your browser to facilitate this, such as FoxyProxy or Proxy Selector for Firefox.
Using the proxy server
How will I know when to use the proxy server?
Once you set up your web browser to run the Automatic Proxy Configuration, it will be engaged automatically when needed. You will not have to decide when the proxy
server is to be used.
When I try to access a website, I'm prompted for a username and password. What do I use?
To ensure that only authorized people use the proxy server, you will need to "authenticate"
yourself by logging in before you use a licensed resource.
The proxy login screen will present two options for login:
- CalNet method: This uses the CalNet ID, the campuswide identifier for UC Berkeley students, faculty, and staff. The login requires a personalized ID and
"passphrase" chosen by the user. For more information, visit the
CalNet website.
or
- PIN method: This uses the number from the person's Cal 1 Card, or Library card issued by our Privileges Desk. The login
also requires a Library PIN (Personal Identification Number), which can be set within OskiCat, the
UC Berkeley Library catalog, and the email address associated with your patron record.
If you have access to both kinds of login, choose whichever you prefer. Once you're authenticated by either method, the proxy's behavior is the same.
Your authentication will automatically expire after 4 hours without any use of the proxy.
If you see a screen with a vendor's logo and a prompt to log in or to subscribe to the database, this indicates that your proxy setup is not in effect. Double-check
your settings, and see our Troubleshooting page for more help.
Why does the proxy server sometimes ask me to log in when I'm not accessing a licensed library resource?
Many online information vendors use several servers within the same internet domain to provide their services. In such cases, the Library proxy is active for the
entire domain to ensure that all these resources are available to the campus community.
Sometimes sites which are available freely to the public and would not require the proxy are served from within the same internet domain as sites which require a
license. Therefore, if your browser is configured to use the proxy server, you may be asked to log in to access such a site.
We apologize for any inconvenience this may cause. If it becomes bothersome, you can turn off the proxy setting in your browser (for details on how to do this,
consult the setup instructions).
CalNet-related issues
Why do I see warnings about going from secure to insecure
(and vice versa) connections when logging in with my CalNet ID?
Authentication via the CalNet proxy server is a complex process, involving several redirections of your browser between the proxy server and the campus authentication server, which use different security protocols. If your browser is set to
warn you upon entering or leaving a secure environment, you may see such a warning when going through the steps of this process.
You do not need to worry about these messages. The only exchange of confidential information takes place when you enter
your CalNet ID and passphrase, and that exchange is encrypted and highly secure. Your ID and passphrase are seen only by the campus's authentication server and are not
transmitted back over the Internet, so your confidential information cannot be observed by any unauthorized third party.
You may be able to change your browser's security settings to eliminate these warning messages. However, please read the browser's help documentation carefully to
make sure you understand the implications of this change.
Why do I have trouble using my browser's "Back" button beyond the login screen?
As mentioned above, logging in with a CalNet ID and passphrase triggers a series of exchanges among two campus servers and your browser. Unfortunately, if you try to
use your browser's "Back" button to go back to a page you visited before logging in, this may cause you to see a message such as this:
Missing Data
This document resulted from a POST operation and has expired from the cache.
If you wish you can repost the form data to recreate the document by pressing the reload button.
Clicking on the "Back" button repeatedly may or may not get you beyond this roadblock, depending on your browser and what pages it has visited.
Whatever you do, do not click on the "Reload" button.
If you want to move back to a page you viewed before logging in, a better solution is to use the tool provided in your browser for displaying a pop-up menu of pages you
have visited. This can usually be done by clicking on the "Back" button and holding the mouse button down, or clicking on a small down-arrow or "Go" pulldown next to
the "Back" button. The browser's "History" function may also be useful.
After logging in, why do I sometimes see a window with a "Connect to Resource" button?
Usually after you have logged in, your browser is redirected straight to the resource you initially requested. However, under two different circumstances, the proxy
server instead displays a window containing a "Connect to Resource" button:
- A few resources, such as the Biblioline databases, spawn a new browser window when they are invoked. This can cause problems, which we avoid by
instead displaying the window with the "Connect to Resource" button.
- When authentication takes place while you're in the midst of a search operation,
you may be returned to a "Connect to Resource" form if the resource sends its search parameters using the "POST" method of data transmission.
In either case, clicking on the "Connect to Resource" button will usually get you where you're going.
What do I do when asked to log in within a resource
that uses frames?
If authentication becomes necessary while you are working with a resource that uses
frames, the login form will be displayed within one of the resource's
frames. Generally this is no problem, but sometimes it is displayed in a short or narrow frame where it is hard to read.
You can usually adjust the dimensions of the frame by dragging its boundaries
with the mouse.
Alternately, you can use your "Tab" key to move from one field to another within that
frame.
Other problems
I have a problem not described here. What should I do?
Go to our Troubleshooting page for a systematic checklist and a list of known problems and solutions.
If your situation is not addressed there, feel free to submit the
Proxy Server Problem Report Form.
To help us analyze your problem, please submit this form from the machine
on which you are experiencing the problem, and as close to the time the problem
occurred as possible. The form gathers information about your operating system, browser, and Internet connection that may help us resolve the issue.
Copyright © 2012
The Regents of the University of California. All rights reserved.
Last updated 05/02/12. Server manager: contact
|
