[gin-auth] start Savannah run

JP Navarro navarro at mcs.anl.gov
Fri Dec 1 12:34:15 CST 2006


Colin,

The error in the logs is below. Not sure what it means.  Could you  
try this
test again from your SDSC TeraGrid account so we can rule out  
software and
firewall issues?

Thanks,

JP

TIME: Thu Nov 30 18:49:42 2006
  PID: 9608 -- Notice: 0: GATEKEEPER_ACCT_FD=5 (/var/globus/prews- 
gram-4.0.1-r3-i1/log/globus-gatekeeper.log)
TIME: Thu Nov 30 18:49:42 2006
  PID: 9608 -- Notice: 6: Got connection 198.202.88.52 at Thu Nov 30  
18:49:42 2006

Failed reading length 0
GSS authentication failure
     globus_gss_assist token :3: read failure: Connection closed
Failure: GSS failed Major:01090000 Minor:00000000 Token:00000003

TIME: Thu Nov 30 18:49:42 2006
  PID: 9608 -- Failure: GSS failed Major:01090000 Minor:00000000  
Token:00000003



On Nov 30, 2006, at 7:05 PM, Colin Enticott wrote:

> Thanks JP,
>
> But I am running into some problems.  I've tried both from our  
> server and
> rocks-52 and this is what I get:
> [cme at rocks-52 ~]$ globus-job-run tg-grid1.uc.teragrid.org/ 
> jobmanager-fork
> /bin/uname -a
> GRAM Job submission failed because the connection to the server failed
> (check host and port) (error code 12)
> [cme at rocks-52 ~]$ grid-proxy-info
> subject  : /C=AU/O=APACGrid/OU=Monash University/CN=Colin
> Enticott/CN=1087048434
> issuer   : /C=AU/O=APACGrid/OU=Monash University/CN=Colin Enticott
> identity : /C=AU/O=APACGrid/OU=Monash University/CN=Colin Enticott
> type     : Proxy draft (pre-RFC) compliant impersonation proxy
> strength : 512 bits
> path     : /home/cme/globus_proxy.APACGrid
> timeleft : 836:30:26  (34.8 days)
> [cme at rocks-52 ~]$ ssh tg-grid1.uc.teragrid.org
> Warning: Permanently added 'tg-grid1.uc.teragrid.org' (RSA) to the  
> list of
> known hosts.
> Permission denied (external-keyx,gssapi,publickey,gssapi,hostbased).
> [cme at rocks-52 ~]$
>
> That is the certificate that I registered with.  I also tried the  
> ssh key
> pair I put up on the pragma wiki.
>
> Any thoughts?
>
> Thanks,
> Colin
>
> ---
> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215
> Room H7.26, Level 7, Building H, Monash University Caulfield 3145,  
> Australia
>
>
>> -----Original Message-----
>> From: JP Navarro [mailto:navarro at mcs.anl.gov]
>> Sent: Friday, 1 December 2006 2:47 AM
>> To: Colin Enticott
>> Cc: zhengc at sdsc.edu; 'Terrence Martin'; gin-ops at ggf.org; 'Oscar  
>> Koeroo';
>> gin-auth at ggf.org
>> Subject: Re: start Savannah run
>>
>> Colin,
>>
>> You should be set to go on the UC/ANL TeraGrid cluster.
>>
>> GT4 Pre-WS GRAM: tg-grid1.uc.teragrid.org:2119
>> GT4 WS GRAM:     tg-grid1.uc.teragrid.org:8443 (FORK, PBS)
>> GT4 GridFTP:     tg-gridftp.uc.teragrid.org:2811
>>
>> Regards,
>>
>> JP
>>
>> On Nov 30, 2006, at 2:43 AM, Colin Enticott wrote:
>>
>>> Thankyou everyone.
>>>
>>> I am now registered on the GIN VO (well, I appear here:
>>> http://kuiken.nikhef.nl/gin.ggf.org/grid-mapfile).
>>>
>>> What is my next step?
>>>
>>> Thanks,
>>> Colin
>>>
>>> ---
>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215
>>> Room H7.26, Level 7, Building H, Monash University Caulfield 3145,
>>> Australia
>>>
>>>
>>>> -----Original Message-----
>>>> From: Cindy Zheng [mailto:zhengc at sdsc.edu]
>>>> Sent: Thursday, 30 November 2006 11:59 AM
>>>> To: 'Terrence Martin'
>>>> Cc: 'JP Navarro'; gin-ops at ggf.org; 'Oscar Koeroo'; 'Colin
>>>> Enticott'; gin-
>>>> auth at ggf.org
>>>> Subject: RE: FW: start Savannah run
>>>>
>>>> Thank you, Terrence!
>>>> We'll wait to hear from Colin when Colin finishes
>>>> registering to gin vo.
>>>> Cindy
>>>>
>>>>> -----Original Message-----
>>>>> From: Terrence Martin [mailto:tmartin at physics.ucsd.edu]
>>>>> Sent: Wednesday, November 29, 2006 11:36 AM
>>>>> To: Oscar Koeroo
>>>>> Cc: zhengc at sdsc.edu; 'JP Navarro'; gin-ops at ggf.org; 'Colin
>>>>> Enticott'; gin-auth at ggf.org
>>>>> Subject: Re: FW: start Savannah run
>>>>>
>>>>>
>>>>> Oscar Koeroo wrote:
>>>>>> Hi Terrence and Cindy,
>>>>>>
>>>>>> Getting new users up for registration on the GIN VO is easy.  
>>>>>> To be
>>>>>> able to access the secured website and for authentication reasons
>>>>>> during the registration process new users must have their
>>>>> certificate
>>>>>> loaded and ready in their webbrowser. The VOMS server is
>>>>> loaded with
>>>>>> all IGTF accredited CAs including the Fermilab kCA.
>>>>>>
>>>>>> Go to the website:
>>>>> https://kuiken.nikhef.nl:8443/voms/gin.ggf.org/ and
>>>>>> apply for a "New user registration".
>>>>>>
>>>>>>
>>>>>> The usual VOMS configuration info is also available. I
>>>>> don't know what
>>>>>> you'll need to populate a GUMS server. This VOMS server is as any
>>>>>> other so I guess you can use your regular setup.
>>>>>> In addition to the secured interface I've also made available a
>>>>>> non-secured way of grabbing a grid-mapfile.
>>>>>> http://kuiken.nikhef.nl/gin.ggf.org/grid-mapfile
>>>>>> There is also an RSS-feed pointing to the grid-mapfile and
>>>>> the secured
>>>>>> interface at
>>>>> http://kuiken.nikhef.nl/gin.ggf.org/feed-gin.ggf.org.xml
>>>>>>
>>>>>> Unfortunately I'm not aware of a clear guide. I do know a  
>>>>>> guide for
>>>>>> creating the packed certificate files that go into your
>>>>> browser if you
>>>>>> start from a two PEM formated files (certificate file +  
>>>>>> private key
>>>>>> file) that's at http://certificate.nikhef.nl/info/browser
>>>>>> Once a user has passed that stage, the registration for the
>>>>> VO is as
>>>>>> trivial as any web-forum account registration.
>>>>>>
>>>>>
>>>>> I am assuming this user already has a grid cert since they
>>>>> list a DN so
>>>>> only VOMS registration is required. Once that is done either I
>>>>> run my
>>>>> update of GUMS manually or in 720/2 minutes on average the
>>>>> user will be
>>>>> automatically downloaded into my GUMS database. I actually do
>>>>> not have
>>>>> to do anything, but I can speed things up ever so slightly if I
>>>>> am in
>>>>> the office and someone asks me to try refreshing gums.
>>>>>
>>>>> Terrence
>>>>>
>>>>>
>>>>>>
>>>>>>
>>>>>>    Oscar
>>>>>>
>>>>>>
>>>>>>
>>>>>> Cindy Zheng wrote:
>>>>>>> Sounds right, Terrence. Let me ask Oscar who has helped me
>>>>> with GIN
>>>>>>> VO before.
>>>>>>>
>>>>>>> Hi, Oscar,
>>>>>>> Could you advise Colin what need to be done to be
>>>>>>> added in GIN VO?
>>>>>>> I'm also cc'ing to gin-auth list.
>>>>>>> If there is a guide for potential GIN users, please
>>>>>>> let me know the url and I can link it to our GINOPS
>>>>>>> page.
>>>>>>>
>>>>>>> Thanks,
>>>>>>>
>>>>>>> Cindy
>>>>>>>
>>>>>>>
>>>>>>>> -----Original Message-----
>>>>>>>> From: Terrence Martin [mailto:tmartin at physics.ucsd.edu] Sent:
>>>>>>>> Tuesday, November 28, 2006 3:24 PM
>>>>>>>> To: zhengc at sdsc.edu
>>>>>>>> Cc: 'JP Navarro'; gin-ops at ggf.org; 'Colin Enticott'
>>>>>>>> Subject: Re: FW: start Savannah run
>>>>>>>>
>>>>>>>>
>>>>>>>> The quickest and easiest way for me is to have him added to  
>>>>>>>> a VO.
>>>>>>>> How easy is it to add him to the GIN VO? One in there I
>>>>> can hit my
>>>>>>>> gums reload and he will be able to access UCSD as a GIN  
>>>>>>>> user. Any
>>>>>>>> other approach requires me hacking his DN into my local
>>>>> VO which I
>>>>>>>> prefer to avoid and does not help him with any other site.
>>>>>>>>
>>>>>>>> Terrence
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> Cindy Zheng wrote:
>>>>>>>>
>>>>>>>>> Thanks, Terrence, for the quick reply!
>>>>>>>>> Colin has not been a GIN user.
>>>>>>>>> What do you think it's the best way to get colin access?
>>>>>>>>> Cindy
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>> -----Original Message-----
>>>>>>>>>> From: Terrence Martin [mailto:tmartin at physics.ucsd.edu] Sent:
>>>>>>>>>> Tuesday, November 28, 2006 2:53 PM
>>>>>>>>>> To: zhengc at sdsc.edu
>>>>>>>>>> Cc: 'JP Navarro'; gin-ops at ggf.org
>>>>>>>>>> Subject: Re: FW: start Savannah run
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>> We only have a production cluster, but I should still
>>>>> be
>>>>>>>> able to help.
>>>>>>>>
>>>>>>>>>> I do not seem to have Colin in my GUMS database though
>>>>> for
>>>>>>>> GIN or any
>>>>>>>>>> other VO. Should he be downloaded with GIN's users?
>>>>>>>>>>
>>>>>>>>>> Terrence
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>> Cindy Zheng wrote:
>>>>>>>>>>
>>>>>>>>>>> Hi, JP and Terrence,
>>>>>>>>>>>
>>>>>>>>>>> Could you help Colin to get ready to run Savannah
>>>>>>>>>>> application on your GIN testbed clusters?
>>>>>>>>>>> You can find Colin's user info at
>>>>>>>>>>> http://wiki.pragma-grid.net/index.php?title=ColinDetails
>>>>>>>>>>> If you need more info or action from Colin, or have
>>>>> any questions
>>>>>>>>>>> for Colin or me, please let us know.
>>>>>>>>>>>
>>>>>>>>>>> Thank you very much!
>>>>>>>>>>>
>>>>>>>>>>> Cindy
>>>>>>>>>>>
>>>>>>>>>>> -----Original Message-----
>>>>>>>>>>> From: Cindy Zheng [mailto:zhengc at sdsc.edu] Sent: Tuesday,
>>>>>>>>>>> November 28, 2006 2:31 PM
>>>>>>>>>>> To: 'gin-ops at ggf.org'
>>>>>>>>>>> Subject: start Savannah run
>>>>>>>>>>>
>>>>>>>>>>>
>>>>>>>>>>> Dear all,
>>>>>>>>>>>
>>>>>>>>>>> Thanks for all the people involved to help make
>>>>>>>>>>> TDDFT application run and GIN testbed monitoring
>>>>>>>>>>> very fruitful experiments! We have learned a lot and have
>>>>>>>>>>> presented our learnings at OGF and SC06.
>>>>>>>>>>>
>>>>>>>>>>> Let's continue our collaborative effort with our plan
>>>>> - start our
>>>>>>>>>>> next experiment with Savannah
>>>>>>>>>>> fire simulation - a data-intensive application, to
>>>>> explore data
>>>>>>>>>>> related interoperation issues.
>>>>>>>>>>>
>>>>>>>>>>> Colin Enticott at Monash University of Australia
>>>>>>>>>>> is the lead driver. Colin has documented the
>>>>>>>>>>> introduction and requirements of this application at
>>>>>>>>>>> http://wiki.pragma-grid.net/index.php?title=Savannah
>>>>>>>>>>> or go to
>>>>>>>>>>>
>>>>>>>>>>>
>>>>>>>>>> http://forge.gridforum.org/sf/wiki/do/viewPage/ 
>>>>>>>>>> projects.gin/wi
>>>>>>>>>>
>>>>>>>>> ki/GinOps
>>>>>>>>>
>>>>>>>>>> click "Savannah" under "Applications",
>>>>>>>>>> where "first Savannah experiment" is refering to
>>>>>>>>>> a previous experiment in PRAGMA testbed. The
>>>>>>>>>> "second Savannah experiment" is the one for GIN testbed.
>>>>>>>>>>
>>>>>>>>>> We like to run this application on all Grids in GIN
>>>>> testbed, but
>>>>>>>>>> in 2 steps. First, we will run it on
>>>>> PRAGMA/TeraGrid/OSG - since
>>>>>>>>>> these should be relatively easier to do. We like to get
>>>>> this done
>>>>>>>>>> before the year end.
>>>>>>>>>> The next step, Colin will work with EGEE and Nordugrid
>>>>>>>>>> to develop possible solutions, to enable interoperation
>>>>>>>>>> and to include all 5 Grids in the run.
>>>>>>>>>>
>>>>>>>>>> Thanks in advance for your continued help with this!
>>>>>>>>>>
>>>>>>>>>> Cindy
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>
>>>>>>
>>>>>
>>>
>



More information about the gin-auth mailing list