[gin-auth] The new VOMS Server for GIN is active from now

Cindy Zheng zhengc at sdsc.edu
Tue Mar 14 00:34:04 CST 2006


Hi, Vincenzo, I'm attaching the file.  ...Cindy

> -----Original Message-----
> From: Vincenzo Ciaschini [mailto:vincenzo.ciaschini at cnaf.infn.it] 
> Sent: Monday, March 13, 2006 1:04 AM
> To: Cindy Zheng
> Cc: 'Yusuke Tanimura'; 'Oscar Koeroo'; gin-auth at ggf.org; 
> 'Olivier van der Aa'; 'Philip Papadopoulos'; 'Catlett 
> Charlie'; 'David Colling'; m.aggarwal at imperial.ac.uk; 
> yoshio.tanaka at aist.go.jp; 'Dane Skow'; 'JP Navarro'; 
> 'Arzberger Peter'; fplin at nchc.org.tw; 'mason j. katz'
> Subject: Re: [gin-auth] The new VOMS Server for GIN is active from now
> 
> 
> Cindy Zheng wrote:
> 
> > Ooops, sorry, Vincenzo. I just realized that I forgot to
> > append the error message. Here it is:
> > 
> > [zhengc at rocks-52 ~]$ voms-proxy-init --debug --voms GIN-GGF-ORG
> > Detected Globus version: 22
> > Unspecified proxy version, settling on Globus version: 2
> > Number of bits in key :512
> > Using configuration file /opt/glite/etc/vomses
> > Using configuration file /opt/glite/etc/vomses
> > voms-proxy-init: vomsclient.cc:1406: bool 
> Client::pcdInit(): Assertion
> > `stat("/data/valerio/.globus/usercert.pem", &stats) == 0' failed.
> > Aborted
> > 
> Actually, this meand that there is something strange with your 
> environment, since I just recompiled VOMS 1.6.20 and didn't have any 
> such problems.  Maybe you have your HOME variable erroneously set to 
> "/data/valerio"?
> 
> This is especially strange, since line 1046 in vomsclient.cc 
> is just an 
> output command, and so simply cannot fail an assertion.  The whole 
> routine did not actually call assert() at all, and if it were used by 
> one of the called functions, then that function name should appear.
> 
> Can you send me the complete (unmodified) copy of 
> vomsclient.cc that is 
> causing you problems?
> 
> Bye,
>     Vincenzo
> 
> 
> > Thanks,
> > 
> > Cindy
> > 
> > 
> >>-----Original Message-----
> >>From: owner-gin-auth at ggf.org [mailto:owner-gin-auth at ggf.org] 
> >>On Behalf Of Cindy Zheng
> >>Sent: Friday, March 10, 2006 3:42 PM
> >>To: 'Vincenzo Ciaschini'
> >>Cc: 'Yusuke Tanimura'; 'Oscar Koeroo'; gin-auth at ggf.org; 
> >>'Olivier van der Aa'; 'Philip Papadopoulos'; 'Catlett 
> >>Charlie'; 'David Colling'; m.aggarwal at imperial.ac.uk; 
> >>yoshio.tanaka at aist.go.jp; 'Dane Skow'; 'JP Navarro'; 
> >>'Arzberger Peter'; fplin at nchc.org.tw; 'mason j. katz'
> >>Subject: RE: [gin-auth] The new VOMS Server for GIN is 
> active from now
> >>
> >>
> >>Hi, Vincenzo,
> >>
> >>As I figured out the post installation tasks and be able 
> >>to run voms-proxy-init, I encountered another error. 
> >>I believe that Yusuke also encountered the same error 
> >>and made some code change in client.cc to get by. Since 
> >>you mensioned that you are getting ready to release 1.6.21, 
> >>I want to alert you to this. Whence you make the change, 
> >>please let me know and I'll test it again.
> >>
> >>Thanks for all your help,
> >>
> >>Cindy
> >>
> >>
> >>>-----Original Message-----
> >>>From: owner-gin-auth at ggf.org [mailto:owner-gin-auth at ggf.org] 
> >>>On Behalf Of Vincenzo Ciaschini
> >>>Sent: Thursday, March 09, 2006 10:45 PM
> >>>To: Cindy Zheng
> >>>Cc: 'Yusuke Tanimura'; 'Oscar Koeroo'; gin-auth at ggf.org; 
> >>>'Olivier van der Aa'; 'Philip Papadopoulos'; 'Catlett 
> >>>Charlie'; 'David Colling'; m.aggarwal at imperial.ac.uk; 
> >>>yoshio.tanaka at aist.go.jp; 'Dane Skow'; 'JP Navarro'; 
> >>>'Arzberger Peter'; fplin at nchc.org.tw; 'mason j. katz'
> >>>Subject: Re: [gin-auth] The new VOMS Server for GIN is 
> >>
> >>active from now
> >>
> >>>
> >>>Cindy Zheng wrote:
> >>>
> >>>>Thank you, Vincenzo! These are very helpful 
> >>>>requirement info. Perhaps can be included in 
> >>>>the INSTALL file in the voms package?
> >>>>
> >>>
> >>>Yes.
> >>>
> >>>
> >>>>Now I have finished make and make install.
> >>>
> >>>So, you can confirm that now building worked?  If so, I 
> will commit 
> >>>1.6.21, which will remove the need for the workaround during 
> >>>compilation.  I will announce here once it is done.
> >>>
> >>>
> >>>>What do I need to do with the server pem file,
> >>>>mkgridmap.conf etc.? Is there an url for such 
> >>>>instructions?
> >>>>
> >>>
> >>>You need to do nothing special with the server certificate 
> >>
> >>other than 
> >>
> >>>installing it (along with the key) in /etc/grid-security.
> >>>
> >>>Also, there is no need of having a gridmapfile in the VOMS 
> >>
> >>server, so 
> >>
> >>>there is no need to do anything special.  If you instead 
> >>>meant what to 
> >>>do on other sites to get a gridmapfile from VOMS, then the 
> >>>exact format 
> >>>depends on how you configure VOMS, so instructions are 
> >>>provided by voms 
> >>>itself, at the page of the admin interface.  See the 
> "configuration 
> >>>info" link.
> >>>
> >>>Bye,
> >>>    Vincenzo
> >>>
> >>>
> >>>>Dear all, I'm thinking that this may be a good 
> >>>>opportunity to find out what info we need to 
> >>>>provide to Other grid admins and users to make 
> >>>>Grid interopration easier. Perhaps through our 
> >>>>experiment, we can jot down a step by step 
> >>>>interoperation guide for each grid?
> >>>>
> >>>>Welcome thoughts and suggestions from everyone! 
> >>>>
> >>>>Thanks,
> >>>>
> >>>>Cindy 
> >>>>
> >>>>
> >>>>
> >>>>>-----Original Message-----
> >>>>>From: Vincenzo Ciaschini 
> [mailto:vincenzo.ciaschini at cnaf.infn.it] 
> >>>>>Sent: Thursday, March 09, 2006 12:24 PM
> >>>>>To: mason j. katz
> >>>>>Cc: Cindy Zheng; 'Yusuke Tanimura'; 'Oscar Koeroo'; 
> >>>>>gin-auth at ggf.org; 'Olivier van der Aa'; 'Philip 
> >>>>>Papadopoulos'; 'Catlett Charlie'; 'David Colling'; 
> >>>>>m.aggarwal at imperial.ac.uk; yoshio.tanaka at aist.go.jp; 'Dane 
> >>>>>Skow'; 'JP Navarro'; 'Arzberger Peter'; fplin at nchc.org.tw
> >>>>>Subject: Re: [gin-auth] The new VOMS Server for GIN is 
> >>>
> >>>active from now
> >>>
> >>>>>
> >>>>>doxygen is only a requirement if you want documentation.  
> >>>>>Otherwise, you 
> >>>>>can disable doc generation with the --enable-docs=no option 
> >>>>>to configure.
> >>>>>
> >>>>>Anywya, the software requirements are the following:
> >>>>>
> >>>>>Globus   Version 2.0 and up.
> >>>>>expat    (both libraries and includes) from 1.95.5 and up.  Not
> >>>>>         tested with prevoius version, but it should work.
> >>>>>
> >>>>>doxygen  Tested with 1.3.5, should work with earlier versions.
> >>>>>latex
> >>>>>sgml tools.
> >>>>>
> >>>>>Note that the need for doxygen, latex and the sgml tools 
> >>>>>disappears if 
> >>>>>--enable-docs=no is specified.
> >>>>>
> >>>>>
> >>>>>Finally, at least one of:
> >>>>>mysql       include and libraries from 4.0.14 and up
> >>>>>Oracle      include and libraries, tested with 10, should also
> >>>>>            work with 9.
> >>>>>
> >>>>>Bye,
> >>>>>   Vincenzo
> >>>>>
> >>>>>mason j. katz wrote:
> >>>>>
> >>>>>
> >>>>>>In addition to doxygen are there any other requirements 
> >>>>>
> >>>>>that systems  
> >>>>>
> >>>>>
> >>>>>>may not typically have installed?
> >>>>>>
> >>>>>>Cindy - look in 
> >>>
> >>>(/home/install/rocks-dist/lan/i386/RedHat/RPMS) on  
> >>>
> >>>>>>crayon and you will see all the OS RPMs, you can install 
> >>>>>
> >>>>>the doxygen  on 
> >>>>>
> >>>>>
> >>>>>>one the frontend and try the compilation again.
> >>>>>>
> >>>>>>   -mjk
> >>>>>>
> >>>>>>On Mar 9, 2006, at 1:01 AM, Cindy Zheng wrote:
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>>Hi, Vincenzo,
> >>>>>>>
> >>>>>>>I don't see any rpm bearing name with doxygen, but did find
> >>>>>>>some files named with doxygen. Since this is rocks cluster,
> >>>>>>>it came with a lot of software build in, I'll check with our
> >>>>>>>Rocks developers to be sure. What version of Doxygen does
> >>>>>>>voms require?
> >>>>>>>
> >>>>>>>Thanks,
> >>>>>>>
> >>>>>>>Cindy
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>>-----Original Message-----
> >>>>>>>>From: Vincenzo Ciaschini 
> >>
> >>[mailto:vincenzo.ciaschini at cnaf.infn.it]
> >>
> >>>>>>>>Sent: Wednesday, March 08, 2006 11:14 PM
> >>>>>>>>To: zhengc at sdsc.edu
> >>>>>>>>Cc: 'Mason Katz'; 'Yusuke Tanimura'; 'Oscar Koeroo';
> >>>>>>>>gin-auth at ggf.org; 'Olivier van der Aa'; 'Philip
> >>>>>>>>Papadopoulos'; 'Catlett Charlie'; 'David Colling';
> >>>>>>>>m.aggarwal at imperial.ac.uk; yoshio.tanaka at aist.go.jp; 'Dane
> >>>>>>>>Skow'; 'JP Navarro'; 'Arzberger Peter'; fplin at nchc.org.tw
> >>>>>>>>Subject: Re: [gin-auth] The new VOMS Server for GIN is 
> >>>>>
> >>>>>active from  now
> >>>>>
> >>>>>
> >>>>>>>>Cindy Zheng wrote:
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>>Thank you, Vincenzo, for your help!
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>Hi Cindy,
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>>The work-around got me a lot further along.
> >>>>>>>>>But I encountered another error during make.
> >>>>>>>>>Since Yusuke was able to install with GT 2.4.3 without
> >>>>>>>>>much problem, I wonder if this is because that we are
> >>>>>>>>>running GT4?
> >>>>>>>>>
> >>>>>>>>>I'm attaching the log files (unix text files).
> >>>>>>>>
> >>>>>>>>What exactly the error was is uncertain since you only sent
> >>>>>>>>me stdout,
> >>>>>>>>but not stderr, so the actual error message is not present in
> >>>>>>>>the dump.
> >>>>>>>>
> >>>>>>>>However, judging from where compilation stopped, you had
> >>>>>>>>problems with
> >>>>>>>>doxygen during the generation of the documentation.
> >>>>>>>>
> >>>>>>>>Can you tell me what version of doxygen you have installed?
> >>>>>>>>
> >>>>>>>>Bye,
> >>>>>>>>   Vincenzo
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>>Thanks again!
> >>>>>>>>>
> >>>>>>>>>Cindy
> >>>>>>>>>
> >>>>>>>>>
> >>>>>>>>>
> >>>>>>>>>
> >>>>>>>>>>-----Original Message-----
> >>>>>>>>>>From: Vincenzo Ciaschini 
> >>>>>
> >>>>>[mailto:vincenzo.ciaschini at cnaf.infn.it]
> >>>>>
> >>>>>
> >>>>>>>>>>Sent: Wednesday, March 08, 2006 4:30 AM
> >>>>>>>>>>To: Cindy Zheng
> >>>>>>>>>>Cc: 'Mason Katz'; 'Yusuke Tanimura'; 'Oscar Koeroo';
> >>>>>>>>>>gin-auth at ggf.org; 'Olivier van der Aa'; 'Philip
> >>>>>>>>>>Papadopoulos'; 'Catlett Charlie'; 'David Colling';
> >>>>>>>>>>m.aggarwal at imperial.ac.uk; yoshio.tanaka at aist.go.jp; 'Dane
> >>>>>>>>>>Skow'; 'JP Navarro'; 'Arzberger Peter'; fplin at nchc.org.tw
> >>>>>>>>>>Subject: Re: [gin-auth] The new VOMS Server for GIN is
> >>>>>>>>
> >>>>>>>>active from now
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>>>Cindy Zheng wrote:
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>>>Thank you, Vincenzo, for your reply!
> >>>>>>>>>>>We are running Rocks which has GT4 already build-in.
> >>>>>>>>>>>I believe it's NMI distribution. To be sure, better
> >>>>>>>>>>>have our Rocks expert, Mason, to answer your questions.
> >>>>>>>>>>>Mason, could you answer Vincenzo's questions?
> >>>>>>>>>>>
> >>>>>>>>>>>Thanks,
> >>>>>>>>>>>
> >>>>>>>>>>>Cindy
> >>>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>>Hi Cindy,
> >>>>>>>>>>
> >>>>>>>>>>  I think I have a pretty good understanding of what the
> >>>>>>>>>>problem is,
> >>>>>>>>>>and of a solution to it, along with a (admittedly ugly)
> >>>>>>>>>>workaround while
> >>>>>>>>>>we commit the solution.
> >>>>>>>>>>
> >>>>>>>>>>Explanation:
> >>>>>>>>>>  Normally, the $GLOBUS_LOCATION/include/ directory 
> >>
> >>contains a
> >>
> >>>>>>>>>>subdirectory for each globus flavor.  No packaging of globus
> >>>>>>>>>>we tested
> >>>>>>>>>>had the ldap_backend directory there.  The ./configure 
> >>>>>
> >>>>>script takes
> >>>>>
> >>>>>
> >>>>>>>>>>advantage of this to discover what flavors are present.
> >>>>>>>>
> >>>>>>>>Clearly, the
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>>>presence of ldap_backend messes things up.
> >>>>>>>>>>
> >>>>>>>>>>The solution:
> >>>>>>>>>>  We will rewrite the configure.ac script to take into
> >>>>>>>>
> >>>>>>>>account the
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>>>possible presence of the ldap_backend directory.
> >>>>>>>>>>
> >>>>>>>>>>The workaround:
> >>>>>>>>>>  While waiting for the new release, you can do the 
> >>>>>
> >>>>>following to
> >>>>>
> >>>>>
> >>>>>>>>>>compile anyway:
> >>>>>>>>>>
> >>>>>>>>>>1) mv $GLOBUS_LOCATION/include/ldap_backend 
> $GLOBUS_LOCATION/
> >>>>>>>>>>2) do the normal build cycle (configure/make/make install)
> >>>>>>>>>>3) mv $GLOBUS_LOCATION/ldap_backend 
> £GLOBUS_LOCATION/include/
> >>>>>>>>>>
> >>>>>>>>>>Bye,
> >>>>>>>>>>  Vincenzo
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>>>>-----Original Message-----
> >>>>>>>>>>>>From: Vincenzo Ciaschini 
> >>>>>
> >>>>>[mailto:vincenzo.ciaschini at cnaf.infn.it]
> >>>>>
> >>>>>
> >>>>>>>>>>>>Sent: Wednesday, March 08, 2006 12:01 AM
> >>>>>>>>>>>>To: zhengc at sdsc.edu
> >>>>>>>>>>>>Cc: 'Yusuke Tanimura'; 'Oscar Koeroo'; gin-auth at ggf.org;
> >>>>>>>>>>>>'Olivier van der Aa'; 'Philip Papadopoulos'; 'Catlett
> >>>>>>>>>>>>Charlie'; 'David Colling'; m.aggarwal at imperial.ac.uk;
> >>>>>>>>>>>>yoshio.tanaka at aist.go.jp; 'Dane Skow'; 'JP Navarro';
> >>>>>>>>>>>>'Arzberger Peter'; fplin at nchc.org.tw; 'Mason Katz'
> >>>>>>>>>>>>Subject: Re: [gin-auth] The new VOMS Server for GIN is
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>>active from now
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>>>>Cindy Zheng wrote:
> >>>>>>>>>>>>
> >>>>>>>>>>>>
> >>>>>>>>>>>>
> >>>>>>>>>>>>
> >>>>>>>>>>>>>Hi, Vincenzo,
> >>>>>>>>>>>>>
> >>>>>>>>>>>>
> >>>>>>>>>>>>Hi Cindy,
> >>>>>>>>>>>>
> >>>>>>>>>>>>
> >>>>>>>>>>>>
> >>>>>>>>>>>>
> >>>>>>>>>>>>
> >>>>>>>>>>>>>Following you and Yusuke's discussion, I downloaded
> >>>>>>>>>>>>>
> >>>>>>>>>>>>
> >>>>>>>>>>>>http://glite.web.cern.ch/glite/packages/R1.5/N2006030
> >>>
> >>>3/src/gli
> >>>
> >>>>>>>>>>>
> >>>>>>>>>>>te-security-vo
> >>>>>>>>>>>
> >>>>>>>>>>>
> >>>>>>>>>>>
> >>>>>>>>>>>
> >>>>>>>>>>>>ms-1.6.20_src.tar.gz
> >>>>>>>>>>>>ran configure and make, then encountered an error (below)
> >>>>>>>>>>>>with make. I'm also attaching the full log with command
> >>>>>>>>>>>>lines. The target cluster is a rocks 4.1 cluster, running
> >>>>>>>>>>>>GT4. Appreciate any help. Let me know if you need 
> >>
> >>more info.
> >>
> >>>>>>>>>>>>Cindy
> >>>>>>>>>>>
> >>>>>>>>>>>
> >>>>>>>>>>>Here is the problem, taken from the output of configure:
> >>>>>>>>>>>
> >>>>>>>>>>>
> >>>>>>>>>>>
> >>>>>>>>>>>
> >>>>>>>>>>>>checking for GLOBUS flavors... found  gcc32dbg 
> gcc32dbgpthr
> >>>>>>>>>>>
> >>>>>>>>>>>
> >>>>>>>>>>>ldap_backend (gcc32dbg selected)
> >>>>>>>>>>>
> >>>>>>>>>>>As you can see, ldap_backend is discovered as a flavor even
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>>though it
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>>>obviously is not one.   I'd have to say this is the first
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>>time something
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>>>like this happens. What version of globus have you
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>>installed ?  And was
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>>>it taken from the globus site or from some other packaging?
> >>>>>>>>>>>
> >>>>>>>>>>>Bye,
> >>>>>>>>>>>  Vincenzo
> >>>>>>>>>>>
> >>>>>>>>>>
> > 
> 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: vomsclient.cc
Type: application/octet-stream
Size: 45101 bytes
Desc: not available
Url : http://www.ogf.org/pipermail/gin-auth/attachments/20060313/11633172/attachment.obj 


More information about the gin-auth mailing list