Find My Friends widget - El Capitan - not working

Question

Level 1

9 points

Find My Friends widget - El Capitan - not working

Hello,

I just did a fresh install of El Capitan on my machine - and have all the updates (so I'm on 10.11.3). When I first installed and punched in my iCloud info - FMF widget seemed to work. Later at some point - my friends (really just my family) came up - but all grey and Unavailable.

Frustrated by this - I tried signing out of iCloud and back in on my Mac. Now the widget is completely blank - no Friends listed. Just the link to 'learn more'.

Has anyone experienced this ? Super frustrating - I know this widget is a minor thing - but I was looking forward to it in El Capitan.

I have an iPhone and it works there - and I can hit icloud.com in a browser and it works there. It's the just widget that is now dead in the water.

Any info would be appreciated - thanks.

MacBook Air (13-inch Mid 2013), OS X El Capitan (10.11.3)

Posted on Feb 8, 2016 6:47 PM

Reply

Answer 1

vom Author

Level 1

9 points

Feb 9, 2016 7:01 AM in response to vom

I opened an Apple Bug on this:

24566728

Reply

Answer 2

vom Author

Level 1

9 points

Feb 10, 2016 7:02 PM in response to vom

I might have found the culprit. I use a system-wide proxy on my machine (SSH tunnel to squid on the remote box). Everything else seems to be fine through this (Safari, App Store, Messages, other NC widgets...). Been using it for years.

When I disable this - FMF widget works. When I put it back - it says unavailable.

I've updated my bug report - hopefully it gets some traction.

Reply

Answer 3

vom Author

Level 1

9 points

Feb 12, 2016 7:11 PM in response to vom

I fixed it. It was default sandboxing policy blocking it. I updated my ticket with this same info.

Couple of notes first - this only affects you if you are using a proxy config that's not on ports 80/443/8888. This involves temporarily disabling system integrity protection as well as editing important system files. The usual warnings and disclaimers about breaking your system apply.

---

I fixed it. It's the default sanbox policy for fmfd only allowing ports 80/443/8888.

I rebooted into Recovery - and disabled SIP (csrutil). Then when booted - I edited /System/Library/Sandbox/Profiles/fmfd.sb, and changed the end adding port 3128:

(allow network-outbound

(literal "/private/var/run/mDNSResponder")

(remote tcp "*:443")

(remote tcp "*:8888")

(remote tcp "*:80")

(remote tcp "*:3128"))

I can now use the widget - as well as Details in messages works.

I'd be curious to know if this could be added permanently in OSX from Apple ?

---

Reply

Answer 4

JECurran

Level 1

10 points

Jun 22, 2016 3:37 PM in response to vom

I rebooted into Recovery - and disabled SIP (csrutil). Then when booted - I edited /System/Library/Sandbox/Profiles/fmfd.sb, and changed the end adding port 3128:

This is a little bit intimidating to the less technically inclined. I there a step by step process that an average user might use to resolve this problem?

Reply