[gin-ops] [gin-auth] start Savannah run
Colin Enticott
Colin.Enticott at csse.monash.edu.au
Mon Dec 4 18:44:05 CST 2006
Thanks David,
But still the same problem. As you can see, my certificate still works on
the vpac host and there is definitely no firewall in the way:
cme at edda$ grid-proxy-init -cert usercert.pem.APACGrid -key
userkey.pem.APACGrid
Your identity: /C=AU/O=APACGrid/OU=Monash University/CN=Colin Enticott
Enter GRID pass phrase for this identity:
Creating proxy ................................... Done
Your proxy is valid until: Tue Dec 5 23:28:47 2006
cme at edda$ globus-job-run osg-gw-2.t2.ucsd.edu/jobmanager-fork /bin/uname -a
GRAM Job submission failed because the connection to the server failed
(check host and port) (error code 12)
cme at edda$ globus-job-run tg-grid1.uc.teragrid.org/jobmanager-fork /bin/uname
-a
GRAM Job submission failed because the connection to the server failed
(check host and port) (error code 12)
cme at edda$ globus-job-run ng1.vpac.org/jobmanager-fork /bin/uname -a
Linux ng1.vpac.org 2.6.16.29-xen #4 SMP Sun Oct 15 13:20:46 BST 2006 i686
i686 i386 GNU/Linux
cme at edda$ telnet tg-grid1.uc.teragrid.org 2119
Trying 192.5.198.225...
Connected to tg-grid1.uc.teragrid.org.
Escape character is '^]'.
Connection closed by foreign host.
cme at edda$ telnet osg-gw-2.t2.ucsd.edu 2119
Trying 137.110.141.17...
Connected to osg-gw-2.t2.ucsd.edu.
Escape character is '^]'.
Connection closed by foreign host.
Any other thoughts from anyone?
Thanks,
Colin
---
Colin Enticott, Research Scientist, Ph: +61 03 9903 2215
Room H7.26, Level 7, Building H, Monash University Caulfield 3145, Australia
> -----Original Message-----
> From: David Bannon [mailto:D.Bannon at vpac.org]
> Sent: Monday, 4 December 2006 6:08 PM
> To: JP Navarro
> Cc: Colin Enticott; gin-auth at ggf.org; gin-ops at ggf.org; 'Terrence Martin'
> Subject: Re: [gin-auth] start Savannah run
>
>
> Colin, you can run as a Gin user on any of the VPAC machines, my be
> easier to debug....
>
> David
>
>
> On Fri, 2006-12-01 at 12:34 -0600, JP Navarro wrote:
> > Colin,
> >
> > The error in the logs is below. Not sure what it means. Could you
> > try this
> > test again from your SDSC TeraGrid account so we can rule out
> > software and
> > firewall issues?
> >
> > Thanks,
> >
> > JP
> >
> > TIME: Thu Nov 30 18:49:42 2006
> > PID: 9608 -- Notice: 0: GATEKEEPER_ACCT_FD=5 (/var/globus/prews-
> > gram-4.0.1-r3-i1/log/globus-gatekeeper.log)
> > TIME: Thu Nov 30 18:49:42 2006
> > PID: 9608 -- Notice: 6: Got connection 198.202.88.52 at Thu Nov 30
> > 18:49:42 2006
> >
> > Failed reading length 0
> > GSS authentication failure
> > globus_gss_assist token :3: read failure: Connection closed
> > Failure: GSS failed Major:01090000 Minor:00000000 Token:00000003
> >
> > TIME: Thu Nov 30 18:49:42 2006
> > PID: 9608 -- Failure: GSS failed Major:01090000 Minor:00000000
> > Token:00000003
> >
> >
> >
> > On Nov 30, 2006, at 7:05 PM, Colin Enticott wrote:
> >
> > > Thanks JP,
> > >
> > > But I am running into some problems. I've tried both from our
> > > server and
> > > rocks-52 and this is what I get:
> > > [cme at rocks-52 ~]$ globus-job-run tg-grid1.uc.teragrid.org/
> > > jobmanager-fork
> > > /bin/uname -a
> > > GRAM Job submission failed because the connection to the server failed
> > > (check host and port) (error code 12)
> > > [cme at rocks-52 ~]$ grid-proxy-info
> > > subject : /C=AU/O=APACGrid/OU=Monash University/CN=Colin
> > > Enticott/CN=1087048434
> > > issuer : /C=AU/O=APACGrid/OU=Monash University/CN=Colin Enticott
> > > identity : /C=AU/O=APACGrid/OU=Monash University/CN=Colin Enticott
> > > type : Proxy draft (pre-RFC) compliant impersonation proxy
> > > strength : 512 bits
> > > path : /home/cme/globus_proxy.APACGrid
> > > timeleft : 836:30:26 (34.8 days)
> > > [cme at rocks-52 ~]$ ssh tg-grid1.uc.teragrid.org
> > > Warning: Permanently added 'tg-grid1.uc.teragrid.org' (RSA) to the
> > > list of
> > > known hosts.
> > > Permission denied (external-keyx,gssapi,publickey,gssapi,hostbased).
> > > [cme at rocks-52 ~]$
> > >
> > > That is the certificate that I registered with. I also tried the
> > > ssh key
> > > pair I put up on the pragma wiki.
> > >
> > > Any thoughts?
> > >
> > > Thanks,
> > > Colin
> > >
> > > ---
> > > Colin Enticott, Research Scientist, Ph: +61 03 9903 2215
> > > Room H7.26, Level 7, Building H, Monash University Caulfield 3145,
> > > Australia
> > >
> > >
> > >> -----Original Message-----
> > >> From: JP Navarro [mailto:navarro at mcs.anl.gov]
> > >> Sent: Friday, 1 December 2006 2:47 AM
> > >> To: Colin Enticott
> > >> Cc: zhengc at sdsc.edu; 'Terrence Martin'; gin-ops at ggf.org; 'Oscar
> > >> Koeroo';
> > >> gin-auth at ggf.org
> > >> Subject: Re: start Savannah run
> > >>
> > >> Colin,
> > >>
> > >> You should be set to go on the UC/ANL TeraGrid cluster.
> > >>
> > >> GT4 Pre-WS GRAM: tg-grid1.uc.teragrid.org:2119
> > >> GT4 WS GRAM: tg-grid1.uc.teragrid.org:8443 (FORK, PBS)
> > >> GT4 GridFTP: tg-gridftp.uc.teragrid.org:2811
> > >>
> > >> Regards,
> > >>
> > >> JP
> > >>
> > >> On Nov 30, 2006, at 2:43 AM, Colin Enticott wrote:
> > >>
> > >>> Thankyou everyone.
> > >>>
> > >>> I am now registered on the GIN VO (well, I appear here:
> > >>> http://kuiken.nikhef.nl/gin.ggf.org/grid-mapfile).
> > >>>
> > >>> What is my next step?
> > >>>
> > >>> Thanks,
> > >>> Colin
> > >>>
> > >>> ---
> > >>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215
> > >>> Room H7.26, Level 7, Building H, Monash University Caulfield 3145,
> > >>> Australia
> > >>>
> > >>>
> > >>>> -----Original Message-----
> > >>>> From: Cindy Zheng [mailto:zhengc at sdsc.edu]
> > >>>> Sent: Thursday, 30 November 2006 11:59 AM
> > >>>> To: 'Terrence Martin'
> > >>>> Cc: 'JP Navarro'; gin-ops at ggf.org; 'Oscar Koeroo'; 'Colin
> > >>>> Enticott'; gin-
> > >>>> auth at ggf.org
> > >>>> Subject: RE: FW: start Savannah run
> > >>>>
> > >>>> Thank you, Terrence!
> > >>>> We'll wait to hear from Colin when Colin finishes
> > >>>> registering to gin vo.
> > >>>> Cindy
> > >>>>
> > >>>>> -----Original Message-----
> > >>>>> From: Terrence Martin [mailto:tmartin at physics.ucsd.edu]
> > >>>>> Sent: Wednesday, November 29, 2006 11:36 AM
> > >>>>> To: Oscar Koeroo
> > >>>>> Cc: zhengc at sdsc.edu; 'JP Navarro'; gin-ops at ggf.org; 'Colin
> > >>>>> Enticott'; gin-auth at ggf.org
> > >>>>> Subject: Re: FW: start Savannah run
> > >>>>>
> > >>>>>
> > >>>>> Oscar Koeroo wrote:
> > >>>>>> Hi Terrence and Cindy,
> > >>>>>>
> > >>>>>> Getting new users up for registration on the GIN VO is easy.
> > >>>>>> To be
> > >>>>>> able to access the secured website and for authentication reasons
> > >>>>>> during the registration process new users must have their
> > >>>>> certificate
> > >>>>>> loaded and ready in their webbrowser. The VOMS server is
> > >>>>> loaded with
> > >>>>>> all IGTF accredited CAs including the Fermilab kCA.
> > >>>>>>
> > >>>>>> Go to the website:
> > >>>>> https://kuiken.nikhef.nl:8443/voms/gin.ggf.org/ and
> > >>>>>> apply for a "New user registration".
> > >>>>>>
> > >>>>>>
> > >>>>>> The usual VOMS configuration info is also available. I
> > >>>>> don't know what
> > >>>>>> you'll need to populate a GUMS server. This VOMS server is as any
> > >>>>>> other so I guess you can use your regular setup.
> > >>>>>> In addition to the secured interface I've also made available a
> > >>>>>> non-secured way of grabbing a grid-mapfile.
> > >>>>>> http://kuiken.nikhef.nl/gin.ggf.org/grid-mapfile
> > >>>>>> There is also an RSS-feed pointing to the grid-mapfile and
> > >>>>> the secured
> > >>>>>> interface at
> > >>>>> http://kuiken.nikhef.nl/gin.ggf.org/feed-gin.ggf.org.xml
> > >>>>>>
> > >>>>>> Unfortunately I'm not aware of a clear guide. I do know a
> > >>>>>> guide for
> > >>>>>> creating the packed certificate files that go into your
> > >>>>> browser if you
> > >>>>>> start from a two PEM formated files (certificate file +
> > >>>>>> private key
> > >>>>>> file) that's at http://certificate.nikhef.nl/info/browser
> > >>>>>> Once a user has passed that stage, the registration for the
> > >>>>> VO is as
> > >>>>>> trivial as any web-forum account registration.
> > >>>>>>
> > >>>>>
> > >>>>> I am assuming this user already has a grid cert since they
> > >>>>> list a DN so
> > >>>>> only VOMS registration is required. Once that is done either I
> > >>>>> run my
> > >>>>> update of GUMS manually or in 720/2 minutes on average the
> > >>>>> user will be
> > >>>>> automatically downloaded into my GUMS database. I actually do
> > >>>>> not have
> > >>>>> to do anything, but I can speed things up ever so slightly if I
> > >>>>> am in
> > >>>>> the office and someone asks me to try refreshing gums.
> > >>>>>
> > >>>>> Terrence
> > >>>>>
> > >>>>>
> > >>>>>>
> > >>>>>>
> > >>>>>> Oscar
> > >>>>>>
> > >>>>>>
> > >>>>>>
> > >>>>>> Cindy Zheng wrote:
> > >>>>>>> Sounds right, Terrence. Let me ask Oscar who has helped me
> > >>>>> with GIN
> > >>>>>>> VO before.
> > >>>>>>>
> > >>>>>>> Hi, Oscar,
> > >>>>>>> Could you advise Colin what need to be done to be
> > >>>>>>> added in GIN VO?
> > >>>>>>> I'm also cc'ing to gin-auth list.
> > >>>>>>> If there is a guide for potential GIN users, please
> > >>>>>>> let me know the url and I can link it to our GINOPS
> > >>>>>>> page.
> > >>>>>>>
> > >>>>>>> Thanks,
> > >>>>>>>
> > >>>>>>> Cindy
> > >>>>>>>
> > >>>>>>>
> > >>>>>>>> -----Original Message-----
> > >>>>>>>> From: Terrence Martin [mailto:tmartin at physics.ucsd.edu] Sent:
> > >>>>>>>> Tuesday, November 28, 2006 3:24 PM
> > >>>>>>>> To: zhengc at sdsc.edu
> > >>>>>>>> Cc: 'JP Navarro'; gin-ops at ggf.org; 'Colin Enticott'
> > >>>>>>>> Subject: Re: FW: start Savannah run
> > >>>>>>>>
> > >>>>>>>>
> > >>>>>>>> The quickest and easiest way for me is to have him added to
> > >>>>>>>> a VO.
> > >>>>>>>> How easy is it to add him to the GIN VO? One in there I
> > >>>>> can hit my
> > >>>>>>>> gums reload and he will be able to access UCSD as a GIN
> > >>>>>>>> user. Any
> > >>>>>>>> other approach requires me hacking his DN into my local
> > >>>>> VO which I
> > >>>>>>>> prefer to avoid and does not help him with any other site.
> > >>>>>>>>
> > >>>>>>>> Terrence
> > >>>>>>>>
> > >>>>>>>>
> > >>>>>>>>
> > >>>>>>>> Cindy Zheng wrote:
> > >>>>>>>>
> > >>>>>>>>> Thanks, Terrence, for the quick reply!
> > >>>>>>>>> Colin has not been a GIN user.
> > >>>>>>>>> What do you think it's the best way to get colin access?
> > >>>>>>>>> Cindy
> > >>>>>>>>>
> > >>>>>>>>>
> > >>>>>>>>>> -----Original Message-----
> > >>>>>>>>>> From: Terrence Martin [mailto:tmartin at physics.ucsd.edu] Sent:
> > >>>>>>>>>> Tuesday, November 28, 2006 2:53 PM
> > >>>>>>>>>> To: zhengc at sdsc.edu
> > >>>>>>>>>> Cc: 'JP Navarro'; gin-ops at ggf.org
> > >>>>>>>>>> Subject: Re: FW: start Savannah run
> > >>>>>>>>>>
> > >>>>>>>>>>
> > >>>>>>>>>> We only have a production cluster, but I should still
> > >>>>> be
> > >>>>>>>> able to help.
> > >>>>>>>>
> > >>>>>>>>>> I do not seem to have Colin in my GUMS database though
> > >>>>> for
> > >>>>>>>> GIN or any
> > >>>>>>>>>> other VO. Should he be downloaded with GIN's users?
> > >>>>>>>>>>
> > >>>>>>>>>> Terrence
> > >>>>>>>>>>
> > >>>>>>>>>>
> > >>>>>>>>>>
> > >>>>>>>>>> Cindy Zheng wrote:
> > >>>>>>>>>>
> > >>>>>>>>>>> Hi, JP and Terrence,
> > >>>>>>>>>>>
> > >>>>>>>>>>> Could you help Colin to get ready to run Savannah
> > >>>>>>>>>>> application on your GIN testbed clusters?
> > >>>>>>>>>>> You can find Colin's user info at
> > >>>>>>>>>>> http://wiki.pragma-grid.net/index.php?title=ColinDetails
> > >>>>>>>>>>> If you need more info or action from Colin, or have
> > >>>>> any questions
> > >>>>>>>>>>> for Colin or me, please let us know.
> > >>>>>>>>>>>
> > >>>>>>>>>>> Thank you very much!
> > >>>>>>>>>>>
> > >>>>>>>>>>> Cindy
> > >>>>>>>>>>>
> > >>>>>>>>>>> -----Original Message-----
> > >>>>>>>>>>> From: Cindy Zheng [mailto:zhengc at sdsc.edu] Sent: Tuesday,
> > >>>>>>>>>>> November 28, 2006 2:31 PM
> > >>>>>>>>>>> To: 'gin-ops at ggf.org'
> > >>>>>>>>>>> Subject: start Savannah run
> > >>>>>>>>>>>
> > >>>>>>>>>>>
> > >>>>>>>>>>> Dear all,
> > >>>>>>>>>>>
> > >>>>>>>>>>> Thanks for all the people involved to help make
> > >>>>>>>>>>> TDDFT application run and GIN testbed monitoring
> > >>>>>>>>>>> very fruitful experiments! We have learned a lot and have
> > >>>>>>>>>>> presented our learnings at OGF and SC06.
> > >>>>>>>>>>>
> > >>>>>>>>>>> Let's continue our collaborative effort with our plan
> > >>>>> - start our
> > >>>>>>>>>>> next experiment with Savannah
> > >>>>>>>>>>> fire simulation - a data-intensive application, to
> > >>>>> explore data
> > >>>>>>>>>>> related interoperation issues.
> > >>>>>>>>>>>
> > >>>>>>>>>>> Colin Enticott at Monash University of Australia
> > >>>>>>>>>>> is the lead driver. Colin has documented the
> > >>>>>>>>>>> introduction and requirements of this application at
> > >>>>>>>>>>> http://wiki.pragma-grid.net/index.php?title=Savannah
> > >>>>>>>>>>> or go to
> > >>>>>>>>>>>
> > >>>>>>>>>>>
> > >>>>>>>>>> http://forge.gridforum.org/sf/wiki/do/viewPage/
> > >>>>>>>>>> projects.gin/wi
> > >>>>>>>>>>
> > >>>>>>>>> ki/GinOps
> > >>>>>>>>>
> > >>>>>>>>>> click "Savannah" under "Applications",
> > >>>>>>>>>> where "first Savannah experiment" is refering to
> > >>>>>>>>>> a previous experiment in PRAGMA testbed. The
> > >>>>>>>>>> "second Savannah experiment" is the one for GIN testbed.
> > >>>>>>>>>>
> > >>>>>>>>>> We like to run this application on all Grids in GIN
> > >>>>> testbed, but
> > >>>>>>>>>> in 2 steps. First, we will run it on
> > >>>>> PRAGMA/TeraGrid/OSG - since
> > >>>>>>>>>> these should be relatively easier to do. We like to get
> > >>>>> this done
> > >>>>>>>>>> before the year end.
> > >>>>>>>>>> The next step, Colin will work with EGEE and Nordugrid
> > >>>>>>>>>> to develop possible solutions, to enable interoperation
> > >>>>>>>>>> and to include all 5 Grids in the run.
> > >>>>>>>>>>
> > >>>>>>>>>> Thanks in advance for your continued help with this!
> > >>>>>>>>>>
> > >>>>>>>>>> Cindy
> > >>>>>>>>>>
> > >>>>>>>>>>
> > >>>>>>>>>>
> > >>>>>>>>>
> > >>>>>>
> > >>>>>
> > >>>
> > >
> >
> > --
> > gin-auth mailing list
> > gin-auth at ogf.org
> > http://www.ogf.org/mailman/listinfo/gin-auth
More information about the gin-ops
mailing list