[gin-auth] [gin-ops] start Savannah run

Cindy Zheng zhengc at sdsc.edu
Wed Dec 6 00:43:58 CST 2006


Thank you, Colin!
Perhaps we should just provide one link to IGTF
distribution and recommend the installation of 
all IGTF CAs.
I'll modify that soon.
Cindy

> -----Original Message-----
> From: Colin Enticott [mailto:Colin.Enticott at csse.monash.edu.au] 
> Sent: Tuesday, December 05, 2006 5:08 PM
> To: zhengc at sdsc.edu; 'Yoshio Tanaka'; 
> tmartin at physics.ucsd.edu; 'JP Navarro'; D.Bannon at vpac.org
> Cc: gin-auth at ggf.org; gin-ops at ggf.org
> Subject: RE: [gin-ops] [gin-auth] start Savannah run
> 
> 
> Hi Cindy,
> 
> Thanks for that.  I do need my new certificate mapped in any 
> event, but it
> turns out it was a problem was with the CA.  It looks like 
> you should add
> DOEGrids CA (d1b603c30) to your website
> http://goc.pragma-grid.net/gin/gin-resources.html.  I 
> shouldn't send you the
> files I have as I just copied them from a host.  It might be 
> best to get
> them through official channels.
> 
> Thanks again,
> Colin
> 
> ---
> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215
> Room H7.26, Level 7, Building H, Monash University Caulfield 
> 3145, Australia
> 
> 
> > -----Original Message-----
> > From: Cindy Zheng [mailto:zhengc at sdsc.edu]
> > Sent: Wednesday, 6 December 2006 6:14 AM
> > To: 'Colin Enticott'; 'Yoshio Tanaka'; tmartin at physics.ucsd.edu; 'JP
> > Navarro'; D.Bannon at vpac.org
> > Cc: gin-auth at ggf.org; gin-ops at ggf.org
> > Subject: RE: [gin-ops] [gin-auth] start Savannah run
> > 
> > Thank you, everyone, for helping out!
> > 
> > Hi, Colin,
> > 
> > Your certificate and DN on rocks-52 was/is from APAC-CA.
> > I did diff between files in your package and the files
> > in our certificate directory, they are the same.
> > But the DN string you used on rocks-52 before was/is
> > "/C=AU/O=APAC-GRID/OU=Monash/CN=Colin Enticott"
> > A little bit different than the one you specified in
> > your wiki page.
> > I have added your new DN string
> > "/C=AU/O=APACGrid/OU=Monash University/CN=Colin Enticott"
> > in the grid-mapfile on rocks-52. So now you have both
> > DN strings mapped to your account here.
> > 
> > You can test your access to rocks-52. Let me know if
> > you like me to remove your old DN string or not.
> > 
> > Cindy
> > 
> > > -----Original Message-----
> > > From: gin-ops-bounces at ogf.org
> > > [mailto:gin-ops-bounces at ogf.org] On Behalf Of Colin Enticott
> > > Sent: Monday, December 04, 2006 10:25 PM
> > > To: 'Yoshio Tanaka'
> > > Cc: gin-auth at ggf.org; D.Bannon at vpac.org; gin-ops at ggf.org;
> > > tmartin at physics.ucsd.edu
> > > Subject: Re: [gin-ops] [gin-auth] start Savannah run
> > >
> > >
> > > Hi Yoshio,
> > >
> > > I've tried it from 3 servers.  On the server I have root
> > > access on, I just
> > > manually synced and I am still having the problem.  I am
> > > wondering if the CA
> > > certificate I sent is okay.  It's the APAC CA files we 
> use here on our
> > > servers.
> > >
> > > On the Pragma resources, I have been using my old certificate
> > > (as initially
> > > there was teething problems with the new APAC CA).  Can you
> > > update your
> > > server with the details below and I'll give it a try:
> > >
> > > http://wiki.pragma-grid.net/index.php?title=ColinDetails
> > >
> > > Thanks,
> > > Colin
> > >
> > > ---
> > > Colin Enticott, Research Scientist, Ph: +61 03 9903 2215
> > > Room H7.26, Level 7, Building H, Monash University Caulfield
> > > 3145, Australia
> > >
> > >
> > > > -----Original Message-----
> > > > From: Yoshio Tanaka [mailto:yoshio.tanaka at aist.go.jp]
> > > > Sent: Tuesday, 5 December 2006 4:51 PM
> > > > To: Colin.Enticott at csse.monash.edu.au
> > > > Cc: D.Bannon at vpac.org; tmartin at physics.ucsd.edu;
> > > navarro at mcs.anl.gov; gin-
> > > > auth at ggf.org; gin-ops at ggf.org; yoshio.tanaka at aist.go.jp
> > > > Subject: Re: [gin-ops] [gin-auth] start Savannah run
> > > >
> > > >
> > > > Hi Colin,
> > > >
> > > > Are you able to submit jobs to PRAGMA machines?
> > > > If yes, the APAC CA on your machine should have no problem.
> > > >
> > > > One point that I would like to confirm is...
> > > > Is the time of your client machine correct?  Do you use an
> > > NTP server
> > > > for synchronize the time?
> > > >
> > > > Thanks,
> > > >
> > > > --
> > > > Yoshio Tanaka (yoshio.tanaka at aist.go.jp)
> > > > http://ninf.apgrid.org/
> > > > http://www.apgridpma.org/
> > > >
> > > >
> > > > From: Colin Enticott <Colin.Enticott at csse.monash.edu.au>
> > > > Subject: RE: [gin-ops] [gin-auth] start Savannah run
> > > > Date: Tue, 05 Dec 2006 16:38:40 +1100
> > > > Message-ID: <01df01c7182f$9f59a3d0$1e46c282 at nail>
> > > >
> > > > > Hi Yoshio,
> > > > >
> > > > > I am unable to log in. But below is what JP sent me.  Any
> > > ideas on what
> > > > it
> > > > > means?
> > > > >
> > > > > Doing a Google I find:
> > > > > The error might arise from an expired certificate or when
> > > trying to
> > > > restore
> > > > > certification expiration date and job are in some state
> > > in the Grid
> > > > > execution list.
> > > > >
> > > > > I guess it might be a problem with the APAC CA on your
> > > machines?  Was
> > > > the CA
> > > > > set up previously?  Or did you use the ones on my 
> info page? (This
> > > > leaves
> > > > > the question if I packaged them correctly).
> > > > >
> > > > >
> > > > > On Fri, 2006-12-01 at 12:34 -0600, JP Navarro wrote:
> > > > >
> > > > > TIME: Thu Nov 30 18:49:42 2006
> > > > >   PID: 9608 -- Notice: 0: GATEKEEPER_ACCT_FD=5 
> (/var/globus/prews-
> > > > > gram-4.0.1-r3-i1/log/globus-gatekeeper.log)
> > > > > TIME: Thu Nov 30 18:49:42 2006
> > > > >   PID: 9608 -- Notice: 6: Got connection 198.202.88.52 at
> > > Thu Nov 30
> > > > > 18:49:42 2006
> > > > >
> > > > > Failed reading length 0
> > > > > GSS authentication failure
> > > > >      globus_gss_assist token :3: read failure: 
> Connection closed
> > > > > Failure: GSS failed Major:01090000 Minor:00000000 
> Token:00000003
> > > > >
> > > > > TIME: Thu Nov 30 18:49:42 2006
> > > > >   PID: 9608 -- Failure: GSS failed Major:01090000 
> Minor:00000000
> > > > > Token:00000003
> > > > >
> > > > >
> > > > > Colin
> > > > >
> > > > > ---
> > > > > Colin Enticott, Research Scientist, Ph: +61 03 9903 2215
> > > > > Room H7.26, Level 7, Building H, Monash University 
> Caulfield 3145,
> > > > Australia
> > > > >
> > > > >
> > > > > > -----Original Message-----
> > > > > > From: Yoshio Tanaka [mailto:yoshio.tanaka at aist.go.jp]
> > > > > > Sent: Tuesday, 5 December 2006 12:51 PM
> > > > > > To: Colin.Enticott at csse.monash.edu.au
> > > > > > Cc: D.Bannon at vpac.org; tmartin at physics.ucsd.edu;
> > > navarro at mcs.anl.gov;
> > > > gin-
> > > > > > auth at ggf.org; gin-ops at ggf.org; yoshio.tanaka at aist.go.jp
> > > > > > Subject: Re: [gin-ops] [gin-auth] start Savannah run
> > > > > >
> > > > > >
> > > > > > Hi Colin,
> > > > > >
> > > > > > If you can login to these machines, see the globus
> > > gatekeeper's log
> > > > at:
> > > > > >
> > > > > > ${GLOBUS_LOCATION}/var/globus-gatekeeper.log
> > > > > >
> > > > > > You may find error logs such as no entry in mapfile and
> > > failure in
> > > > > > tracing cert chain.
> > > > > >
> > > > > > Regards,
> > > > > >
> > > > > > --
> > > > > > Yoshio Tanaka (yoshio.tanaka at aist.go.jp)
> > > > > > http://ninf.apgrid.org/
> > > > > > http://www.apgridpma.org/
> > > > > >
> > > > > > From: Colin Enticott <Colin.Enticott at csse.monash.edu.au>
> > > > > > Subject: RE: [gin-ops] [gin-auth] start Savannah run
> > > > > > Date: Tue, 05 Dec 2006 12:24:42 +1100
> > > > > > Message-ID: <01c001c7180c$24c430e0$1e46c282 at nail>
> > > > > >
> > > > > > > Thanks Yoshio,
> > > > > > >
> > > > > > > So it looks like authentication issues as I can
> > > connect to port 2119
> > > > on
> > > > > > both
> > > > > > > hosts:
> > > > > > >
> > > > > > > cme at edda$ globusrun -a -r tg-grid1.uc.teragrid.org
> > > > > > >
> > > > > > > GRAM Authentication test failure: connecting to the
> > > job manager
> > > > failed.
> > > > > > > Possible reasons: job terminated, invalid job 
> contact, network
> > > > problems,
> > > > > > ...
> > > > > > > cme at edda$ globusrun -a -r osg-gw-2.t2.ucsd.edu
> > > > > > >
> > > > > > > GRAM Authentication test failure: connecting to the
> > > job manager
> > > > failed.
> > > > > > > Possible reasons: job terminated, invalid job 
> contact, network
> > > > problems,
> > > > > > ...
> > > > > > >
> > > > > > > Regards,
> > > > > > > Colin
> > > > > > >
> > > > > > > ---
> > > > > > > Colin Enticott, Research Scientist, Ph: +61 03 9903 2215
> > > > > > > Room H7.26, Level 7, Building H, Monash University
> > > Caulfield 3145,
> > > > > > Australia
> > > > > > >
> > > > > > >
> > > > > > > > -----Original Message-----
> > > > > > > > From: Yoshio Tanaka [mailto:yoshio.tanaka at aist.go.jp]
> > > > > > > > Sent: Tuesday, 5 December 2006 12:21 PM
> > > > > > > > To: Colin.Enticott at csse.monash.edu.au
> > > > > > > > Cc: D.Bannon at vpac.org; tmartin at physics.ucsd.edu;
> > > > navarro at mcs.anl.gov;
> > > > > > gin-
> > > > > > > > auth at ggf.org; gin-ops at ggf.org; yoshio.tanaka at aist.go.jp
> > > > > > > > Subject: Re: [gin-ops] [gin-auth] start Savannah run
> > > > > > > >
> > > > > > > >
> > > > > > > > Hi Colin,
> > > > > > > >
> > > > > > > > Please test the authentication by the following command:
> > > > > > > >
> > > > > > > > % globusrun -a -r osg-gw-2.t2.ucsd.edu
> > > > > > > >
> > > > > > > > % globusrun -a -r tg-grid1.uc.teragrid.org
> > > > > > > >
> > > > > > > > Thanks,
> > > > > > > >
> > > > > > > > --
> > > > > > > > Yoshio Tanaka (yoshio.tanaka at aist.go.jp)
> > > > > > > > http://ninf.apgrid.org/
> > > > > > > > http://www.apgridpma.org/
> > > > > > > >
> > > > > > > >
> > > > > > > > From: Colin Enticott <Colin.Enticott at csse.monash.edu.au>
> > > > > > > > Subject: Re: [gin-ops] [gin-auth] start Savannah run
> > > > > > > > Date: Tue, 05 Dec 2006 11:44:05 +1100
> > > > > > > > Message-ID: <017401c71806$77cf6760$1e46c282 at nail>
> > > > > > > >
> > > > > > > > > Thanks David,
> > > > > > > > >
> > > > > > > > > But still the same problem.  As you can see, my
> > > certificate
> > > > still
> > > > > > works
> > > > > > > > on
> > > > > > > > > the vpac host and there is definitely no firewall
> > > in the way:
> > > > > > > > >
> > > > > > > > > cme at edda$ grid-proxy-init -cert 
> usercert.pem.APACGrid -key
> > > > > > > > > userkey.pem.APACGrid
> > > > > > > > > Your identity: /C=AU/O=APACGrid/OU=Monash
> > > University/CN=Colin
> > > > > > Enticott
> > > > > > > > > Enter GRID pass phrase for this identity:
> > > > > > > > > Creating proxy 
> ................................... Done
> > > > > > > > > Your proxy is valid until: Tue Dec  5 23:28:47 2006
> > > > > > > > > cme at edda$ globus-job-run
> > > osg-gw-2.t2.ucsd.edu/jobmanager-fork
> > > > > > /bin/uname
> > > > > > > > -a
> > > > > > > > >
> > > > > > > > > GRAM Job submission failed because the connection
> > > to the server
> > > > > > failed
> > > > > > > > > (check host and port) (error code 12)
> > > > > > > > > cme at edda$ globus-job-run
> > > tg-grid1.uc.teragrid.org/jobmanager-
> > > > fork
> > > > > > > > /bin/uname
> > > > > > > > > -a
> > > > > > > > > GRAM Job submission failed because the connection
> > > to the server
> > > > > > failed
> > > > > > > > > (check host and port) (error code 12)
> > > > > > > > > cme at edda$ globus-job-run
> > > ng1.vpac.org/jobmanager-fork /bin/uname
> > > > -a
> > > > > > > > > Linux ng1.vpac.org 2.6.16.29-xen #4 SMP Sun Oct
> > > 15 13:20:46 BST
> > > > 2006
> > > > > > > > i686
> > > > > > > > > i686 i386 GNU/Linux
> > > > > > > > > cme at edda$ telnet tg-grid1.uc.teragrid.org 2119
> > > > > > > > > Trying 192.5.198.225...
> > > > > > > > > Connected to tg-grid1.uc.teragrid.org.
> > > > > > > > > Escape character is '^]'.
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > Connection closed by foreign host.
> > > > > > > > > cme at edda$ telnet osg-gw-2.t2.ucsd.edu 2119
> > > > > > > > > Trying 137.110.141.17...
> > > > > > > > > Connected to osg-gw-2.t2.ucsd.edu.
> > > > > > > > > Escape character is '^]'.
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > Connection closed by foreign host.
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > Any other thoughts from anyone?
> > > > > > > > >
> > > > > > > > > Thanks,
> > > > > > > > > Colin
> > > > > > > > >
> > > > > > > > > ---
> > > > > > > > > Colin Enticott, Research Scientist, Ph: +61 
> 03 9903 2215
> > > > > > > > > Room H7.26, Level 7, Building H, Monash
> > > University Caulfield
> > > > 3145,
> > > > > > > > Australia
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > > -----Original Message-----
> > > > > > > > > > From: David Bannon [mailto:D.Bannon at vpac.org]
> > > > > > > > > > Sent: Monday, 4 December 2006 6:08 PM
> > > > > > > > > > To: JP Navarro
> > > > > > > > > > Cc: Colin Enticott; gin-auth at ggf.org; 
> gin-ops at ggf.org;
> > > > 'Terrence
> > > > > > > > Martin'
> > > > > > > > > > Subject: Re: [gin-auth] start Savannah run
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > > Colin, you can run as a Gin user on any of the
> > > VPAC machines,
> > > > my
> > > > > > be
> > > > > > > > > > easier to debug....
> > > > > > > > > >
> > > > > > > > > > David
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > > On Fri, 2006-12-01 at 12:34 -0600, JP Navarro wrote:
> > > > > > > > > > > Colin,
> > > > > > > > > > >
> > > > > > > > > > > The error in the logs is below. Not sure what
> > > it means.
> > > > Could
> > > > > > you
> > > > > > > > > > > try this
> > > > > > > > > > > test again from your SDSC TeraGrid account so
> > > we can rule
> > > > out
> > > > > > > > > > > software and
> > > > > > > > > > > firewall issues?
> > > > > > > > > > >
> > > > > > > > > > > Thanks,
> > > > > > > > > > >
> > > > > > > > > > > JP
> > > > > > > > > > >
> > > > > > > > > > > TIME: Thu Nov 30 18:49:42 2006
> > > > > > > > > > >   PID: 9608 -- Notice: 0: GATEKEEPER_ACCT_FD=5
> > > > > > (/var/globus/prews-
> > > > > > > > > > > gram-4.0.1-r3-i1/log/globus-gatekeeper.log)
> > > > > > > > > > > TIME: Thu Nov 30 18:49:42 2006
> > > > > > > > > > >   PID: 9608 -- Notice: 6: Got connection
> > > 198.202.88.52 at
> > > > Thu
> > > > > > Nov 30
> > > > > > > > > > > 18:49:42 2006
> > > > > > > > > > >
> > > > > > > > > > > Failed reading length 0
> > > > > > > > > > > GSS authentication failure
> > > > > > > > > > >      globus_gss_assist token :3: read
> > > failure: Connection
> > > > closed
> > > > > > > > > > > Failure: GSS failed Major:01090000 Minor:00000000
> > > > Token:00000003
> > > > > > > > > > >
> > > > > > > > > > > TIME: Thu Nov 30 18:49:42 2006
> > > > > > > > > > >   PID: 9608 -- Failure: GSS failed Major:01090000
> > > > Minor:00000000
> > > > > > > > > > > Token:00000003
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > > On Nov 30, 2006, at 7:05 PM, Colin Enticott wrote:
> > > > > > > > > > >
> > > > > > > > > > > > Thanks JP,
> > > > > > > > > > > >
> > > > > > > > > > > > But I am running into some problems.  I've
> > > tried both from
> > > > our
> > > > > > > > > > > > server and
> > > > > > > > > > > > rocks-52 and this is what I get:
> > > > > > > > > > > > [cme at rocks-52 ~]$ globus-job-run
> > > tg-grid1.uc.teragrid.org/
> > > > > > > > > > > > jobmanager-fork
> > > > > > > > > > > > /bin/uname -a
> > > > > > > > > > > > GRAM Job submission failed because the
> > > connection to the
> > > > > > server
> > > > > > > > failed
> > > > > > > > > > > > (check host and port) (error code 12)
> > > > > > > > > > > > [cme at rocks-52 ~]$ grid-proxy-info
> > > > > > > > > > > > subject  : /C=AU/O=APACGrid/OU=Monash
> > > University/CN=Colin
> > > > > > > > > > > > Enticott/CN=1087048434
> > > > > > > > > > > > issuer   : /C=AU/O=APACGrid/OU=Monash
> > > University/CN=Colin
> > > > > > Enticott
> > > > > > > > > > > > identity : /C=AU/O=APACGrid/OU=Monash
> > > University/CN=Colin
> > > > > > Enticott
> > > > > > > > > > > > type     : Proxy draft (pre-RFC) compliant
> > > impersonation
> > > > proxy
> > > > > > > > > > > > strength : 512 bits
> > > > > > > > > > > > path     : /home/cme/globus_proxy.APACGrid
> > > > > > > > > > > > timeleft : 836:30:26  (34.8 days)
> > > > > > > > > > > > [cme at rocks-52 ~]$ ssh tg-grid1.uc.teragrid.org
> > > > > > > > > > > > Warning: Permanently added
> > > 'tg-grid1.uc.teragrid.org'
> > > > (RSA) to
> > > > > > the
> > > > > > > > > > > > list of
> > > > > > > > > > > > known hosts.
> > > > > > > > > > > > Permission denied (external-
> > > > > > > > keyx,gssapi,publickey,gssapi,hostbased).
> > > > > > > > > > > > [cme at rocks-52 ~]$
> > > > > > > > > > > >
> > > > > > > > > > > > That is the certificate that I registered
> > > with.  I also
> > > > tried
> > > > > > the
> > > > > > > > > > > > ssh key
> > > > > > > > > > > > pair I put up on the pragma wiki.
> > > > > > > > > > > >
> > > > > > > > > > > > Any thoughts?
> > > > > > > > > > > >
> > > > > > > > > > > > Thanks,
> > > > > > > > > > > > Colin
> > > > > > > > > > > >
> > > > > > > > > > > > ---
> > > > > > > > > > > > Colin Enticott, Research Scientist, Ph: +61
> > > 03 9903 2215
> > > > > > > > > > > > Room H7.26, Level 7, Building H, Monash 
> University
> > > > Caulfield
> > > > > > 3145,
> > > > > > > > > > > > Australia
> > > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > > >> -----Original Message-----
> > > > > > > > > > > >> From: JP Navarro [mailto:navarro at mcs.anl.gov]
> > > > > > > > > > > >> Sent: Friday, 1 December 2006 2:47 AM
> > > > > > > > > > > >> To: Colin Enticott
> > > > > > > > > > > >> Cc: zhengc at sdsc.edu; 'Terrence Martin';
> > > gin-ops at ggf.org;
> > > > > > 'Oscar
> > > > > > > > > > > >> Koeroo';
> > > > > > > > > > > >> gin-auth at ggf.org
> > > > > > > > > > > >> Subject: Re: start Savannah run
> > > > > > > > > > > >>
> > > > > > > > > > > >> Colin,
> > > > > > > > > > > >>
> > > > > > > > > > > >> You should be set to go on the UC/ANL
> > > TeraGrid cluster.
> > > > > > > > > > > >>
> > > > > > > > > > > >> GT4 Pre-WS GRAM: tg-grid1.uc.teragrid.org:2119
> > > > > > > > > > > >> GT4 WS GRAM:
> > > tg-grid1.uc.teragrid.org:8443 (FORK,
> > > > PBS)
> > > > > > > > > > > >> GT4 GridFTP:     
> tg-gridftp.uc.teragrid.org:2811
> > > > > > > > > > > >>
> > > > > > > > > > > >> Regards,
> > > > > > > > > > > >>
> > > > > > > > > > > >> JP
> > > > > > > > > > > >>
> > > > > > > > > > > >> On Nov 30, 2006, at 2:43 AM, Colin 
> Enticott wrote:
> > > > > > > > > > > >>
> > > > > > > > > > > >>> Thankyou everyone.
> > > > > > > > > > > >>>
> > > > > > > > > > > >>> I am now registered on the GIN VO (well,
> > > I appear here:
> > > > > > > > > > > >>> 
> http://kuiken.nikhef.nl/gin.ggf.org/grid-mapfile).
> > > > > > > > > > > >>>
> > > > > > > > > > > >>> What is my next step?
> > > > > > > > > > > >>>
> > > > > > > > > > > >>> Thanks,
> > > > > > > > > > > >>> Colin
> > > > > > > > > > > >>>
> > > > > > > > > > > >>> ---
> > > > > > > > > > > >>> Colin Enticott, Research Scientist, Ph:
> > > +61 03 9903 2215
> > > > > > > > > > > >>> Room H7.26, Level 7, Building H, 
> Monash University
> > > > Caulfield
> > > > > > > > 3145,
> > > > > > > > > > > >>> Australia
> > > > > > > > > > > >>>
> > > > > > > > > > > >>>
> > > > > > > > > > > >>>> -----Original Message-----
> > > > > > > > > > > >>>> From: Cindy Zheng [mailto:zhengc at sdsc.edu]
> > > > > > > > > > > >>>> Sent: Thursday, 30 November 2006 11:59 AM
> > > > > > > > > > > >>>> To: 'Terrence Martin'
> > > > > > > > > > > >>>> Cc: 'JP Navarro'; gin-ops at ggf.org;
> > > 'Oscar Koeroo';
> > > > 'Colin
> > > > > > > > > > > >>>> Enticott'; gin-
> > > > > > > > > > > >>>> auth at ggf.org
> > > > > > > > > > > >>>> Subject: RE: FW: start Savannah run
> > > > > > > > > > > >>>>
> > > > > > > > > > > >>>> Thank you, Terrence!
> > > > > > > > > > > >>>> We'll wait to hear from Colin when 
> Colin finishes
> > > > > > > > > > > >>>> registering to gin vo.
> > > > > > > > > > > >>>> Cindy
> > > > > > > > > > > >>>>
> > > > > > > > > > > >>>>> -----Original Message-----
> > > > > > > > > > > >>>>> From: Terrence Martin
> > > > [mailto:tmartin at physics.ucsd.edu]
> > > > > > > > > > > >>>>> Sent: Wednesday, November 29, 2006 11:36 AM
> > > > > > > > > > > >>>>> To: Oscar Koeroo
> > > > > > > > > > > >>>>> Cc: zhengc at sdsc.edu; 'JP Navarro';
> > > gin-ops at ggf.org;
> > > > 'Colin
> > > > > > > > > > > >>>>> Enticott'; gin-auth at ggf.org
> > > > > > > > > > > >>>>> Subject: Re: FW: start Savannah run
> > > > > > > > > > > >>>>>
> > > > > > > > > > > >>>>>
> > > > > > > > > > > >>>>> Oscar Koeroo wrote:
> > > > > > > > > > > >>>>>> Hi Terrence and Cindy,
> > > > > > > > > > > >>>>>>
> > > > > > > > > > > >>>>>> Getting new users up for registration
> > > on the GIN VO
> > > > is
> > > > > > easy.
> > > > > > > > > > > >>>>>> To be
> > > > > > > > > > > >>>>>> able to access the secured website and for
> > > > authentication
> > > > > > > > reasons
> > > > > > > > > > > >>>>>> during the registration process new
> > > users must have
> > > > their
> > > > > > > > > > > >>>>> certificate
> > > > > > > > > > > >>>>>> loaded and ready in their webbrowser.
> > > The VOMS server
> > > > is
> > > > > > > > > > > >>>>> loaded with
> > > > > > > > > > > >>>>>> all IGTF accredited CAs including the
> > > Fermilab kCA.
> > > > > > > > > > > >>>>>>
> > > > > > > > > > > >>>>>> Go to the website:
> > > > > > > > > > > >>>>>
> > > https://kuiken.nikhef.nl:8443/voms/gin.ggf.org/ and
> > > > > > > > > > > >>>>>> apply for a "New user registration".
> > > > > > > > > > > >>>>>>
> > > > > > > > > > > >>>>>>
> > > > > > > > > > > >>>>>> The usual VOMS configuration info is
> > > also available.
> > > > I
> > > > > > > > > > > >>>>> don't know what
> > > > > > > > > > > >>>>>> you'll need to populate a GUMS server.
> > > This VOMS
> > > > server
> > > > > > is as
> > > > > > > > any
> > > > > > > > > > > >>>>>> other so I guess you can use your
> > > regular setup.
> > > > > > > > > > > >>>>>> In addition to the secured interface
> > > I've also made
> > > > > > available
> > > > > > > > a
> > > > > > > > > > > >>>>>> non-secured way of grabbing a grid-mapfile.
> > > > > > > > > > > >>>>>>
> > > http://kuiken.nikhef.nl/gin.ggf.org/grid-mapfile
> > > > > > > > > > > >>>>>> There is also an RSS-feed pointing 
> to the grid-
> > > > mapfile
> > > > > > and
> > > > > > > > > > > >>>>> the secured
> > > > > > > > > > > >>>>>> interface at
> > > > > > > > > > > >>>>> http://kuiken.nikhef.nl/gin.ggf.org/feed-
> > > > gin.ggf.org.xml
> > > > > > > > > > > >>>>>>
> > > > > > > > > > > >>>>>> Unfortunately I'm not aware of a clear
> > > guide. I do
> > > > know a
> > > > > > > > > > > >>>>>> guide for
> > > > > > > > > > > >>>>>> creating the packed certificate files
> > > that go into
> > > > your
> > > > > > > > > > > >>>>> browser if you
> > > > > > > > > > > >>>>>> start from a two PEM formated files
> > > (certificate file
> > > > +
> > > > > > > > > > > >>>>>> private key
> > > > > > > > > > > >>>>>> file) that's at
> > > > http://certificate.nikhef.nl/info/browser
> > > > > > > > > > > >>>>>> Once a user has passed that stage, the
> > > registration
> > > > for
> > > > > > the
> > > > > > > > > > > >>>>> VO is as
> > > > > > > > > > > >>>>>> trivial as any web-forum account 
> registration.
> > > > > > > > > > > >>>>>>
> > > > > > > > > > > >>>>>
> > > > > > > > > > > >>>>> I am assuming this user already has a
> > > grid cert since
> > > > they
> > > > > > > > > > > >>>>> list a DN so
> > > > > > > > > > > >>>>> only VOMS registration is required.
> > > Once that is done
> > > > > > either I
> > > > > > > > > > > >>>>> run my
> > > > > > > > > > > >>>>> update of GUMS manually or in 720/2
> > > minutes on average
> > > > the
> > > > > > > > > > > >>>>> user will be
> > > > > > > > > > > >>>>> automatically downloaded into my GUMS
> > > database. I
> > > > actually
> > > > > > do
> > > > > > > > > > > >>>>> not have
> > > > > > > > > > > >>>>> to do anything, but I can speed things
> > > up ever so
> > > > slightly
> > > > > > if
> > > > > > > > I
> > > > > > > > > > > >>>>> am in
> > > > > > > > > > > >>>>> the office and someone asks me to try
> > > refreshing gums.
> > > > > > > > > > > >>>>>
> > > > > > > > > > > >>>>> Terrence
> > > > > > > > > > > >>>>>
> > > > > > > > > > > >>>>>
> > > > > > > > > > > >>>>>>
> > > > > > > > > > > >>>>>>
> > > > > > > > > > > >>>>>>    Oscar
> > > > > > > > > > > >>>>>>
> > > > > > > > > > > >>>>>>
> > > > > > > > > > > >>>>>>
> > > > > > > > > > > >>>>>> Cindy Zheng wrote:
> > > > > > > > > > > >>>>>>> Sounds right, Terrence. Let me ask
> > > Oscar who has
> > > > helped
> > > > > > me
> > > > > > > > > > > >>>>> with GIN
> > > > > > > > > > > >>>>>>> VO before.
> > > > > > > > > > > >>>>>>>
> > > > > > > > > > > >>>>>>> Hi, Oscar,
> > > > > > > > > > > >>>>>>> Could you advise Colin what need to
> > > be done to be
> > > > > > > > > > > >>>>>>> added in GIN VO?
> > > > > > > > > > > >>>>>>> I'm also cc'ing to gin-auth list.
> > > > > > > > > > > >>>>>>> If there is a guide for potential GIN
> > > users, please
> > > > > > > > > > > >>>>>>> let me know the url and I can link it
> > > to our GINOPS
> > > > > > > > > > > >>>>>>> page.
> > > > > > > > > > > >>>>>>>
> > > > > > > > > > > >>>>>>> Thanks,
> > > > > > > > > > > >>>>>>>
> > > > > > > > > > > >>>>>>> Cindy
> > > > > > > > > > > >>>>>>>
> > > > > > > > > > > >>>>>>>
> > > > > > > > > > > >>>>>>>> -----Original Message-----
> > > > > > > > > > > >>>>>>>> From: Terrence Martin
> > > > [mailto:tmartin at physics.ucsd.edu]
> > > > > > > > Sent:
> > > > > > > > > > > >>>>>>>> Tuesday, November 28, 2006 3:24 PM
> > > > > > > > > > > >>>>>>>> To: zhengc at sdsc.edu
> > > > > > > > > > > >>>>>>>> Cc: 'JP Navarro'; gin-ops at ggf.org;
> > > 'Colin Enticott'
> > > > > > > > > > > >>>>>>>> Subject: Re: FW: start Savannah run
> > > > > > > > > > > >>>>>>>>
> > > > > > > > > > > >>>>>>>>
> > > > > > > > > > > >>>>>>>> The quickest and easiest way for me
> > > is to have him
> > > > > > added to
> > > > > > > > > > > >>>>>>>> a VO.
> > > > > > > > > > > >>>>>>>> How easy is it to add him to the GIN
> > > VO? One in
> > > > there I
> > > > > > > > > > > >>>>> can hit my
> > > > > > > > > > > >>>>>>>> gums reload and he will be able to
> > > access UCSD as a
> > > > GIN
> > > > > > > > > > > >>>>>>>> user. Any
> > > > > > > > > > > >>>>>>>> other approach requires me hacking
> > > his DN into my
> > > > local
> > > > > > > > > > > >>>>> VO which I
> > > > > > > > > > > >>>>>>>> prefer to avoid and does not help
> > > him with any
> > > > other
> > > > > > site.
> > > > > > > > > > > >>>>>>>>
> > > > > > > > > > > >>>>>>>> Terrence
> > > > > > > > > > > >>>>>>>>
> > > > > > > > > > > >>>>>>>>
> > > > > > > > > > > >>>>>>>>
> > > > > > > > > > > >>>>>>>> Cindy Zheng wrote:
> > > > > > > > > > > >>>>>>>>
> > > > > > > > > > > >>>>>>>>> Thanks, Terrence, for the quick reply!
> > > > > > > > > > > >>>>>>>>> Colin has not been a GIN user.
> > > > > > > > > > > >>>>>>>>> What do you think it's the best way
> > > to get colin
> > > > > > access?
> > > > > > > > > > > >>>>>>>>> Cindy
> > > > > > > > > > > >>>>>>>>>
> > > > > > > > > > > >>>>>>>>>
> > > > > > > > > > > >>>>>>>>>> -----Original Message-----
> > > > > > > > > > > >>>>>>>>>> From: Terrence Martin
> > > > > > [mailto:tmartin at physics.ucsd.edu]
> > > > > > > > Sent:
> > > > > > > > > > > >>>>>>>>>> Tuesday, November 28, 2006 2:53 PM
> > > > > > > > > > > >>>>>>>>>> To: zhengc at sdsc.edu
> > > > > > > > > > > >>>>>>>>>> Cc: 'JP Navarro'; gin-ops at ggf.org
> > > > > > > > > > > >>>>>>>>>> Subject: Re: FW: start Savannah run
> > > > > > > > > > > >>>>>>>>>>
> > > > > > > > > > > >>>>>>>>>>
> > > > > > > > > > > >>>>>>>>>> We only have a production cluster,
> > > but I should
> > > > still
> > > > > > > > > > > >>>>> be
> > > > > > > > > > > >>>>>>>> able to help.
> > > > > > > > > > > >>>>>>>>
> > > > > > > > > > > >>>>>>>>>> I do not seem to have Colin in my
> > > GUMS database
> > > > > > though
> > > > > > > > > > > >>>>> for
> > > > > > > > > > > >>>>>>>> GIN or any
> > > > > > > > > > > >>>>>>>>>> other VO. Should he be downloaded
> > > with GIN's
> > > > users?
> > > > > > > > > > > >>>>>>>>>>
> > > > > > > > > > > >>>>>>>>>> Terrence
> > > > > > > > > > > >>>>>>>>>>
> > > > > > > > > > > >>>>>>>>>>
> > > > > > > > > > > >>>>>>>>>>
> > > > > > > > > > > >>>>>>>>>> Cindy Zheng wrote:
> > > > > > > > > > > >>>>>>>>>>
> > > > > > > > > > > >>>>>>>>>>> Hi, JP and Terrence,
> > > > > > > > > > > >>>>>>>>>>>
> > > > > > > > > > > >>>>>>>>>>> Could you help Colin to get 
> ready to run
> > > > Savannah
> > > > > > > > > > > >>>>>>>>>>> application on your GIN 
> testbed clusters?
> > > > > > > > > > > >>>>>>>>>>> You can find Colin's user info at
> > > > > > > > > > > >>>>>>>>>>> http://wiki.pragma-
> > > > > > grid.net/index.php?title=ColinDetails
> > > > > > > > > > > >>>>>>>>>>> If you need more info or action
> > > from Colin, or
> > > > have
> > > > > > > > > > > >>>>> any questions
> > > > > > > > > > > >>>>>>>>>>> for Colin or me, please let us know.
> > > > > > > > > > > >>>>>>>>>>>
> > > > > > > > > > > >>>>>>>>>>> Thank you very much!
> > > > > > > > > > > >>>>>>>>>>>
> > > > > > > > > > > >>>>>>>>>>> Cindy
> > > > > > > > > > > >>>>>>>>>>>
> > > > > > > > > > > >>>>>>>>>>> -----Original Message-----
> > > > > > > > > > > >>>>>>>>>>> From: Cindy Zheng
> > > [mailto:zhengc at sdsc.edu] Sent:
> > > > > > > > Tuesday,
> > > > > > > > > > > >>>>>>>>>>> November 28, 2006 2:31 PM
> > > > > > > > > > > >>>>>>>>>>> To: 'gin-ops at ggf.org'
> > > > > > > > > > > >>>>>>>>>>> Subject: start Savannah run
> > > > > > > > > > > >>>>>>>>>>>
> > > > > > > > > > > >>>>>>>>>>>
> > > > > > > > > > > >>>>>>>>>>> Dear all,
> > > > > > > > > > > >>>>>>>>>>>
> > > > > > > > > > > >>>>>>>>>>> Thanks for all the people
> > > involved to help make
> > > > > > > > > > > >>>>>>>>>>> TDDFT application run and GIN
> > > testbed monitoring
> > > > > > > > > > > >>>>>>>>>>> very fruitful experiments! We
> > > have learned a lot
> > > > and
> > > > > > > > have
> > > > > > > > > > > >>>>>>>>>>> presented our learnings at 
> OGF and SC06.
> > > > > > > > > > > >>>>>>>>>>>
> > > > > > > > > > > >>>>>>>>>>> Let's continue our collaborative
> > > effort with our
> > > > > > plan
> > > > > > > > > > > >>>>> - start our
> > > > > > > > > > > >>>>>>>>>>> next experiment with Savannah
> > > > > > > > > > > >>>>>>>>>>> fire simulation - a
> > > data-intensive application,
> > > > to
> > > > > > > > > > > >>>>> explore data
> > > > > > > > > > > >>>>>>>>>>> related interoperation issues.
> > > > > > > > > > > >>>>>>>>>>>
> > > > > > > > > > > >>>>>>>>>>> Colin Enticott at Monash
> > > University of Australia
> > > > > > > > > > > >>>>>>>>>>> is the lead driver. Colin has
> > > documented the
> > > > > > > > > > > >>>>>>>>>>> introduction and requirements of this
> > > > application at
> > > > > > > > > > > >>>>>>>>>>> http://wiki.pragma-
> > > > grid.net/index.php?title=Savannah
> > > > > > > > > > > >>>>>>>>>>> or go to
> > > > > > > > > > > >>>>>>>>>>>
> > > > > > > > > > > >>>>>>>>>>>
> > > > > > > > > > > >>>>>>>>>>
> > > http://forge.gridforum.org/sf/wiki/do/viewPage/
> > > > > > > > > > > >>>>>>>>>> projects.gin/wi
> > > > > > > > > > > >>>>>>>>>>
> > > > > > > > > > > >>>>>>>>> ki/GinOps
> > > > > > > > > > > >>>>>>>>>
> > > > > > > > > > > >>>>>>>>>> click "Savannah" under "Applications",
> > > > > > > > > > > >>>>>>>>>> where "first Savannah experiment"
> > > is refering to
> > > > > > > > > > > >>>>>>>>>> a previous experiment in PRAGMA
> > > testbed. The
> > > > > > > > > > > >>>>>>>>>> "second Savannah experiment" is
> > > the one for GIN
> > > > > > testbed.
> > > > > > > > > > > >>>>>>>>>>
> > > > > > > > > > > >>>>>>>>>> We like to run this application on
> > > all Grids in
> > > > GIN
> > > > > > > > > > > >>>>> testbed, but
> > > > > > > > > > > >>>>>>>>>> in 2 steps. First, we will run it on
> > > > > > > > > > > >>>>> PRAGMA/TeraGrid/OSG - since
> > > > > > > > > > > >>>>>>>>>> these should be relatively easier
> > > to do. We like
> > > > to
> > > > > > get
> > > > > > > > > > > >>>>> this done
> > > > > > > > > > > >>>>>>>>>> before the year end.
> > > > > > > > > > > >>>>>>>>>> The next step, Colin will work
> > > with EGEE and
> > > > > > Nordugrid
> > > > > > > > > > > >>>>>>>>>> to develop possible solutions, 
> to enable
> > > > > > interoperation
> > > > > > > > > > > >>>>>>>>>> and to include all 5 Grids in the run.
> > > > > > > > > > > >>>>>>>>>>
> > > > > > > > > > > >>>>>>>>>> Thanks in advance for your
> > > continued help with
> > > > this!
> > > > > > > > > > > >>>>>>>>>>
> > > > > > > > > > > >>>>>>>>>> Cindy
> > > > > > > > > > > >>>>>>>>>>
> > > > > > > > > > > >>>>>>>>>>
> > > > > > > > > > > >>>>>>>>>>
> > > > > > > > > > > >>>>>>>>>
> > > > > > > > > > > >>>>>>
> > > > > > > > > > > >>>>>
> > > > > > > > > > > >>>
> > > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > > --
> > > > > > > > > > >   gin-auth mailing list
> > > > > > > > > > >   gin-auth at ogf.org
> > > > > > > > > > >   http://www.ogf.org/mailman/listinfo/gin-auth
> > > > > > > > >
> > > > > > > > > --
> > > > > > > > >   gin-ops mailing list
> > > > > > > > >   gin-ops at ogf.org
> > > > > > > > >   http://www.ogf.org/mailman/listinfo/gin-ops
> > > > > > >
> > > > >
> > >
> > > --
> > >   gin-ops mailing list
> > >   gin-ops at ogf.org
> > >   http://www.ogf.org/mailman/listinfo/gin-ops
> > >
> 



More information about the gin-auth mailing list