[gin-ops] [gin-auth] start Savannah run
Yoshio Tanaka
yoshio.tanaka at aist.go.jp
Mon Dec 4 19:21:21 CST 2006
Hi Colin,
Please test the authentication by the following command:
% globusrun -a -r osg-gw-2.t2.ucsd.edu
% globusrun -a -r tg-grid1.uc.teragrid.org
Thanks,
--
Yoshio Tanaka (yoshio.tanaka at aist.go.jp)
http://ninf.apgrid.org/
http://www.apgridpma.org/
From: Colin Enticott <Colin.Enticott at csse.monash.edu.au>
Subject: Re: [gin-ops] [gin-auth] start Savannah run
Date: Tue, 05 Dec 2006 11:44:05 +1100
Message-ID: <017401c71806$77cf6760$1e46c282 at nail>
> Thanks David,
>
> But still the same problem. As you can see, my certificate still works on
> the vpac host and there is definitely no firewall in the way:
>
> cme at edda$ grid-proxy-init -cert usercert.pem.APACGrid -key
> userkey.pem.APACGrid
> Your identity: /C=AU/O=APACGrid/OU=Monash University/CN=Colin Enticott
> Enter GRID pass phrase for this identity:
> Creating proxy ................................... Done
> Your proxy is valid until: Tue Dec 5 23:28:47 2006
> cme at edda$ globus-job-run osg-gw-2.t2.ucsd.edu/jobmanager-fork /bin/uname -a
>
> GRAM Job submission failed because the connection to the server failed
> (check host and port) (error code 12)
> cme at edda$ globus-job-run tg-grid1.uc.teragrid.org/jobmanager-fork /bin/uname
> -a
> GRAM Job submission failed because the connection to the server failed
> (check host and port) (error code 12)
> cme at edda$ globus-job-run ng1.vpac.org/jobmanager-fork /bin/uname -a
> Linux ng1.vpac.org 2.6.16.29-xen #4 SMP Sun Oct 15 13:20:46 BST 2006 i686
> i686 i386 GNU/Linux
> cme at edda$ telnet tg-grid1.uc.teragrid.org 2119
> Trying 192.5.198.225...
> Connected to tg-grid1.uc.teragrid.org.
> Escape character is '^]'.
>
>
> Connection closed by foreign host.
> cme at edda$ telnet osg-gw-2.t2.ucsd.edu 2119
> Trying 137.110.141.17...
> Connected to osg-gw-2.t2.ucsd.edu.
> Escape character is '^]'.
>
>
> Connection closed by foreign host.
>
>
> Any other thoughts from anyone?
>
> Thanks,
> Colin
>
> ---
> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215
> Room H7.26, Level 7, Building H, Monash University Caulfield 3145, Australia
>
>
> > -----Original Message-----
> > From: David Bannon [mailto:D.Bannon at vpac.org]
> > Sent: Monday, 4 December 2006 6:08 PM
> > To: JP Navarro
> > Cc: Colin Enticott; gin-auth at ggf.org; gin-ops at ggf.org; 'Terrence Martin'
> > Subject: Re: [gin-auth] start Savannah run
> >
> >
> > Colin, you can run as a Gin user on any of the VPAC machines, my be
> > easier to debug....
> >
> > David
> >
> >
> > On Fri, 2006-12-01 at 12:34 -0600, JP Navarro wrote:
> > > Colin,
> > >
> > > The error in the logs is below. Not sure what it means. Could you
> > > try this
> > > test again from your SDSC TeraGrid account so we can rule out
> > > software and
> > > firewall issues?
> > >
> > > Thanks,
> > >
> > > JP
> > >
> > > TIME: Thu Nov 30 18:49:42 2006
> > > PID: 9608 -- Notice: 0: GATEKEEPER_ACCT_FD=5 (/var/globus/prews-
> > > gram-4.0.1-r3-i1/log/globus-gatekeeper.log)
> > > TIME: Thu Nov 30 18:49:42 2006
> > > PID: 9608 -- Notice: 6: Got connection 198.202.88.52 at Thu Nov 30
> > > 18:49:42 2006
> > >
> > > Failed reading length 0
> > > GSS authentication failure
> > > globus_gss_assist token :3: read failure: Connection closed
> > > Failure: GSS failed Major:01090000 Minor:00000000 Token:00000003
> > >
> > > TIME: Thu Nov 30 18:49:42 2006
> > > PID: 9608 -- Failure: GSS failed Major:01090000 Minor:00000000
> > > Token:00000003
> > >
> > >
> > >
> > > On Nov 30, 2006, at 7:05 PM, Colin Enticott wrote:
> > >
> > > > Thanks JP,
> > > >
> > > > But I am running into some problems. I've tried both from our
> > > > server and
> > > > rocks-52 and this is what I get:
> > > > [cme at rocks-52 ~]$ globus-job-run tg-grid1.uc.teragrid.org/
> > > > jobmanager-fork
> > > > /bin/uname -a
> > > > GRAM Job submission failed because the connection to the server failed
> > > > (check host and port) (error code 12)
> > > > [cme at rocks-52 ~]$ grid-proxy-info
> > > > subject : /C=AU/O=APACGrid/OU=Monash University/CN=Colin
> > > > Enticott/CN=1087048434
> > > > issuer : /C=AU/O=APACGrid/OU=Monash University/CN=Colin Enticott
> > > > identity : /C=AU/O=APACGrid/OU=Monash University/CN=Colin Enticott
> > > > type : Proxy draft (pre-RFC) compliant impersonation proxy
> > > > strength : 512 bits
> > > > path : /home/cme/globus_proxy.APACGrid
> > > > timeleft : 836:30:26 (34.8 days)
> > > > [cme at rocks-52 ~]$ ssh tg-grid1.uc.teragrid.org
> > > > Warning: Permanently added 'tg-grid1.uc.teragrid.org' (RSA) to the
> > > > list of
> > > > known hosts.
> > > > Permission denied (external-keyx,gssapi,publickey,gssapi,hostbased).
> > > > [cme at rocks-52 ~]$
> > > >
> > > > That is the certificate that I registered with. I also tried the
> > > > ssh key
> > > > pair I put up on the pragma wiki.
> > > >
> > > > Any thoughts?
> > > >
> > > > Thanks,
> > > > Colin
> > > >
> > > > ---
> > > > Colin Enticott, Research Scientist, Ph: +61 03 9903 2215
> > > > Room H7.26, Level 7, Building H, Monash University Caulfield 3145,
> > > > Australia
> > > >
> > > >
> > > >> -----Original Message-----
> > > >> From: JP Navarro [mailto:navarro at mcs.anl.gov]
> > > >> Sent: Friday, 1 December 2006 2:47 AM
> > > >> To: Colin Enticott
> > > >> Cc: zhengc at sdsc.edu; 'Terrence Martin'; gin-ops at ggf.org; 'Oscar
> > > >> Koeroo';
> > > >> gin-auth at ggf.org
> > > >> Subject: Re: start Savannah run
> > > >>
> > > >> Colin,
> > > >>
> > > >> You should be set to go on the UC/ANL TeraGrid cluster.
> > > >>
> > > >> GT4 Pre-WS GRAM: tg-grid1.uc.teragrid.org:2119
> > > >> GT4 WS GRAM: tg-grid1.uc.teragrid.org:8443 (FORK, PBS)
> > > >> GT4 GridFTP: tg-gridftp.uc.teragrid.org:2811
> > > >>
> > > >> Regards,
> > > >>
> > > >> JP
> > > >>
> > > >> On Nov 30, 2006, at 2:43 AM, Colin Enticott wrote:
> > > >>
> > > >>> Thankyou everyone.
> > > >>>
> > > >>> I am now registered on the GIN VO (well, I appear here:
> > > >>> http://kuiken.nikhef.nl/gin.ggf.org/grid-mapfile).
> > > >>>
> > > >>> What is my next step?
> > > >>>
> > > >>> Thanks,
> > > >>> Colin
> > > >>>
> > > >>> ---
> > > >>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215
> > > >>> Room H7.26, Level 7, Building H, Monash University Caulfield 3145,
> > > >>> Australia
> > > >>>
> > > >>>
> > > >>>> -----Original Message-----
> > > >>>> From: Cindy Zheng [mailto:zhengc at sdsc.edu]
> > > >>>> Sent: Thursday, 30 November 2006 11:59 AM
> > > >>>> To: 'Terrence Martin'
> > > >>>> Cc: 'JP Navarro'; gin-ops at ggf.org; 'Oscar Koeroo'; 'Colin
> > > >>>> Enticott'; gin-
> > > >>>> auth at ggf.org
> > > >>>> Subject: RE: FW: start Savannah run
> > > >>>>
> > > >>>> Thank you, Terrence!
> > > >>>> We'll wait to hear from Colin when Colin finishes
> > > >>>> registering to gin vo.
> > > >>>> Cindy
> > > >>>>
> > > >>>>> -----Original Message-----
> > > >>>>> From: Terrence Martin [mailto:tmartin at physics.ucsd.edu]
> > > >>>>> Sent: Wednesday, November 29, 2006 11:36 AM
> > > >>>>> To: Oscar Koeroo
> > > >>>>> Cc: zhengc at sdsc.edu; 'JP Navarro'; gin-ops at ggf.org; 'Colin
> > > >>>>> Enticott'; gin-auth at ggf.org
> > > >>>>> Subject: Re: FW: start Savannah run
> > > >>>>>
> > > >>>>>
> > > >>>>> Oscar Koeroo wrote:
> > > >>>>>> Hi Terrence and Cindy,
> > > >>>>>>
> > > >>>>>> Getting new users up for registration on the GIN VO is easy.
> > > >>>>>> To be
> > > >>>>>> able to access the secured website and for authentication reasons
> > > >>>>>> during the registration process new users must have their
> > > >>>>> certificate
> > > >>>>>> loaded and ready in their webbrowser. The VOMS server is
> > > >>>>> loaded with
> > > >>>>>> all IGTF accredited CAs including the Fermilab kCA.
> > > >>>>>>
> > > >>>>>> Go to the website:
> > > >>>>> https://kuiken.nikhef.nl:8443/voms/gin.ggf.org/ and
> > > >>>>>> apply for a "New user registration".
> > > >>>>>>
> > > >>>>>>
> > > >>>>>> The usual VOMS configuration info is also available. I
> > > >>>>> don't know what
> > > >>>>>> you'll need to populate a GUMS server. This VOMS server is as any
> > > >>>>>> other so I guess you can use your regular setup.
> > > >>>>>> In addition to the secured interface I've also made available a
> > > >>>>>> non-secured way of grabbing a grid-mapfile.
> > > >>>>>> http://kuiken.nikhef.nl/gin.ggf.org/grid-mapfile
> > > >>>>>> There is also an RSS-feed pointing to the grid-mapfile and
> > > >>>>> the secured
> > > >>>>>> interface at
> > > >>>>> http://kuiken.nikhef.nl/gin.ggf.org/feed-gin.ggf.org.xml
> > > >>>>>>
> > > >>>>>> Unfortunately I'm not aware of a clear guide. I do know a
> > > >>>>>> guide for
> > > >>>>>> creating the packed certificate files that go into your
> > > >>>>> browser if you
> > > >>>>>> start from a two PEM formated files (certificate file +
> > > >>>>>> private key
> > > >>>>>> file) that's at http://certificate.nikhef.nl/info/browser
> > > >>>>>> Once a user has passed that stage, the registration for the
> > > >>>>> VO is as
> > > >>>>>> trivial as any web-forum account registration.
> > > >>>>>>
> > > >>>>>
> > > >>>>> I am assuming this user already has a grid cert since they
> > > >>>>> list a DN so
> > > >>>>> only VOMS registration is required. Once that is done either I
> > > >>>>> run my
> > > >>>>> update of GUMS manually or in 720/2 minutes on average the
> > > >>>>> user will be
> > > >>>>> automatically downloaded into my GUMS database. I actually do
> > > >>>>> not have
> > > >>>>> to do anything, but I can speed things up ever so slightly if I
> > > >>>>> am in
> > > >>>>> the office and someone asks me to try refreshing gums.
> > > >>>>>
> > > >>>>> Terrence
> > > >>>>>
> > > >>>>>
> > > >>>>>>
> > > >>>>>>
> > > >>>>>> Oscar
> > > >>>>>>
> > > >>>>>>
> > > >>>>>>
> > > >>>>>> Cindy Zheng wrote:
> > > >>>>>>> Sounds right, Terrence. Let me ask Oscar who has helped me
> > > >>>>> with GIN
> > > >>>>>>> VO before.
> > > >>>>>>>
> > > >>>>>>> Hi, Oscar,
> > > >>>>>>> Could you advise Colin what need to be done to be
> > > >>>>>>> added in GIN VO?
> > > >>>>>>> I'm also cc'ing to gin-auth list.
> > > >>>>>>> If there is a guide for potential GIN users, please
> > > >>>>>>> let me know the url and I can link it to our GINOPS
> > > >>>>>>> page.
> > > >>>>>>>
> > > >>>>>>> Thanks,
> > > >>>>>>>
> > > >>>>>>> Cindy
> > > >>>>>>>
> > > >>>>>>>
> > > >>>>>>>> -----Original Message-----
> > > >>>>>>>> From: Terrence Martin [mailto:tmartin at physics.ucsd.edu] Sent:
> > > >>>>>>>> Tuesday, November 28, 2006 3:24 PM
> > > >>>>>>>> To: zhengc at sdsc.edu
> > > >>>>>>>> Cc: 'JP Navarro'; gin-ops at ggf.org; 'Colin Enticott'
> > > >>>>>>>> Subject: Re: FW: start Savannah run
> > > >>>>>>>>
> > > >>>>>>>>
> > > >>>>>>>> The quickest and easiest way for me is to have him added to
> > > >>>>>>>> a VO.
> > > >>>>>>>> How easy is it to add him to the GIN VO? One in there I
> > > >>>>> can hit my
> > > >>>>>>>> gums reload and he will be able to access UCSD as a GIN
> > > >>>>>>>> user. Any
> > > >>>>>>>> other approach requires me hacking his DN into my local
> > > >>>>> VO which I
> > > >>>>>>>> prefer to avoid and does not help him with any other site.
> > > >>>>>>>>
> > > >>>>>>>> Terrence
> > > >>>>>>>>
> > > >>>>>>>>
> > > >>>>>>>>
> > > >>>>>>>> Cindy Zheng wrote:
> > > >>>>>>>>
> > > >>>>>>>>> Thanks, Terrence, for the quick reply!
> > > >>>>>>>>> Colin has not been a GIN user.
> > > >>>>>>>>> What do you think it's the best way to get colin access?
> > > >>>>>>>>> Cindy
> > > >>>>>>>>>
> > > >>>>>>>>>
> > > >>>>>>>>>> -----Original Message-----
> > > >>>>>>>>>> From: Terrence Martin [mailto:tmartin at physics.ucsd.edu] Sent:
> > > >>>>>>>>>> Tuesday, November 28, 2006 2:53 PM
> > > >>>>>>>>>> To: zhengc at sdsc.edu
> > > >>>>>>>>>> Cc: 'JP Navarro'; gin-ops at ggf.org
> > > >>>>>>>>>> Subject: Re: FW: start Savannah run
> > > >>>>>>>>>>
> > > >>>>>>>>>>
> > > >>>>>>>>>> We only have a production cluster, but I should still
> > > >>>>> be
> > > >>>>>>>> able to help.
> > > >>>>>>>>
> > > >>>>>>>>>> I do not seem to have Colin in my GUMS database though
> > > >>>>> for
> > > >>>>>>>> GIN or any
> > > >>>>>>>>>> other VO. Should he be downloaded with GIN's users?
> > > >>>>>>>>>>
> > > >>>>>>>>>> Terrence
> > > >>>>>>>>>>
> > > >>>>>>>>>>
> > > >>>>>>>>>>
> > > >>>>>>>>>> Cindy Zheng wrote:
> > > >>>>>>>>>>
> > > >>>>>>>>>>> Hi, JP and Terrence,
> > > >>>>>>>>>>>
> > > >>>>>>>>>>> Could you help Colin to get ready to run Savannah
> > > >>>>>>>>>>> application on your GIN testbed clusters?
> > > >>>>>>>>>>> You can find Colin's user info at
> > > >>>>>>>>>>> http://wiki.pragma-grid.net/index.php?title=ColinDetails
> > > >>>>>>>>>>> If you need more info or action from Colin, or have
> > > >>>>> any questions
> > > >>>>>>>>>>> for Colin or me, please let us know.
> > > >>>>>>>>>>>
> > > >>>>>>>>>>> Thank you very much!
> > > >>>>>>>>>>>
> > > >>>>>>>>>>> Cindy
> > > >>>>>>>>>>>
> > > >>>>>>>>>>> -----Original Message-----
> > > >>>>>>>>>>> From: Cindy Zheng [mailto:zhengc at sdsc.edu] Sent: Tuesday,
> > > >>>>>>>>>>> November 28, 2006 2:31 PM
> > > >>>>>>>>>>> To: 'gin-ops at ggf.org'
> > > >>>>>>>>>>> Subject: start Savannah run
> > > >>>>>>>>>>>
> > > >>>>>>>>>>>
> > > >>>>>>>>>>> Dear all,
> > > >>>>>>>>>>>
> > > >>>>>>>>>>> Thanks for all the people involved to help make
> > > >>>>>>>>>>> TDDFT application run and GIN testbed monitoring
> > > >>>>>>>>>>> very fruitful experiments! We have learned a lot and have
> > > >>>>>>>>>>> presented our learnings at OGF and SC06.
> > > >>>>>>>>>>>
> > > >>>>>>>>>>> Let's continue our collaborative effort with our plan
> > > >>>>> - start our
> > > >>>>>>>>>>> next experiment with Savannah
> > > >>>>>>>>>>> fire simulation - a data-intensive application, to
> > > >>>>> explore data
> > > >>>>>>>>>>> related interoperation issues.
> > > >>>>>>>>>>>
> > > >>>>>>>>>>> Colin Enticott at Monash University of Australia
> > > >>>>>>>>>>> is the lead driver. Colin has documented the
> > > >>>>>>>>>>> introduction and requirements of this application at
> > > >>>>>>>>>>> http://wiki.pragma-grid.net/index.php?title=Savannah
> > > >>>>>>>>>>> or go to
> > > >>>>>>>>>>>
> > > >>>>>>>>>>>
> > > >>>>>>>>>> http://forge.gridforum.org/sf/wiki/do/viewPage/
> > > >>>>>>>>>> projects.gin/wi
> > > >>>>>>>>>>
> > > >>>>>>>>> ki/GinOps
> > > >>>>>>>>>
> > > >>>>>>>>>> click "Savannah" under "Applications",
> > > >>>>>>>>>> where "first Savannah experiment" is refering to
> > > >>>>>>>>>> a previous experiment in PRAGMA testbed. The
> > > >>>>>>>>>> "second Savannah experiment" is the one for GIN testbed.
> > > >>>>>>>>>>
> > > >>>>>>>>>> We like to run this application on all Grids in GIN
> > > >>>>> testbed, but
> > > >>>>>>>>>> in 2 steps. First, we will run it on
> > > >>>>> PRAGMA/TeraGrid/OSG - since
> > > >>>>>>>>>> these should be relatively easier to do. We like to get
> > > >>>>> this done
> > > >>>>>>>>>> before the year end.
> > > >>>>>>>>>> The next step, Colin will work with EGEE and Nordugrid
> > > >>>>>>>>>> to develop possible solutions, to enable interoperation
> > > >>>>>>>>>> and to include all 5 Grids in the run.
> > > >>>>>>>>>>
> > > >>>>>>>>>> Thanks in advance for your continued help with this!
> > > >>>>>>>>>>
> > > >>>>>>>>>> Cindy
> > > >>>>>>>>>>
> > > >>>>>>>>>>
> > > >>>>>>>>>>
> > > >>>>>>>>>
> > > >>>>>>
> > > >>>>>
> > > >>>
> > > >
> > >
> > > --
> > > gin-auth mailing list
> > > gin-auth at ogf.org
> > > http://www.ogf.org/mailman/listinfo/gin-auth
>
> --
> gin-ops mailing list
> gin-ops at ogf.org
> http://www.ogf.org/mailman/listinfo/gin-ops
More information about the gin-ops
mailing list