[gin-ops] [gin-auth] start Savannah run
JP Navarro
navarro at mcs.anl.gov
Wed Jan 3 10:00:06 CST 2007
Colin,
We didn't have the Monash University CA configured on tg-
grid1.uc.teragrid.org.
This has now been fixed.
Regards,
JP Navarro
On Jan 3, 2007, at 2:13 AM, Colin Enticott wrote:
> First of all, Happy new year everyone!
>
> Thankyou for your help last year.
>
> I have two quick questions:
>
> I am now receiving a "certificate expired" message from
> tg-grid1.uc.teragrid.org. My certificate still works elsewhere.
> Is it the
> server's certificate?
>
> And on osg-gw-2.t2.ucsd.edu, I need to write ~80GB of data for the
> experiment. Which directory can I use?
>
> Thanks,
> Colin
>
> ---
> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215
> Room H7.26, Level 7, Building H, Monash University Caulfield 3145,
> Australia
>
>
>> -----Original Message-----
>> From: Terrence Martin [mailto:tmartin at physics.ucsd.edu]
>> Sent: Tuesday, 5 December 2006 5:41 PM
>> To: Colin Enticott
>> Cc: 'Yoshio Tanaka'; D.Bannon at vpac.org; navarro at mcs.anl.gov; gin-
>> auth at ggf.org; gin-ops at ggf.org
>> Subject: Re: [gin-ops] [gin-auth] start Savannah run
>>
>> colin, if you want to try logging into
>>
>> colin at uaf-1.t2.ucsd.edu
>>
>> run
>>
>> source /data/vdt/setup.sh
>>
>> then grab a cert with grid-proxy-init and give it a try.
>>
>> It is the machine that all my users use to submit to my OSG site.
>>
>> Terrence
>>
>>
>>
>> Colin Enticott wrote:
>>> Hi Yoshio,
>>>
>>> I've tried it from 3 servers. On the server I have root access
>>> on, I
>> just
>>> manually synced and I am still having the problem. I am
>>> wondering if
>> the CA
>>> certificate I sent is okay. It's the APAC CA files we use here
>>> on our
>>> servers.
>>>
>>> On the Pragma resources, I have been using my old certificate (as
>> initially
>>> there was teething problems with the new APAC CA). Can you
>>> update your
>>> server with the details below and I'll give it a try:
>>>
>>> http://wiki.pragma-grid.net/index.php?title=ColinDetails
>>>
>>> Thanks,
>>> Colin
>>>
>>> ---
>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215
>>> Room H7.26, Level 7, Building H, Monash University Caulfield 3145,
>> Australia
>>>
>>>
>>>
>>>> -----Original Message-----
>>>> From: Yoshio Tanaka [mailto:yoshio.tanaka at aist.go.jp]
>>>> Sent: Tuesday, 5 December 2006 4:51 PM
>>>> To: Colin.Enticott at csse.monash.edu.au
>>>> Cc: D.Bannon at vpac.org; tmartin at physics.ucsd.edu;
>>>> navarro at mcs.anl.gov;
>> gin-
>>>> auth at ggf.org; gin-ops at ggf.org; yoshio.tanaka at aist.go.jp
>>>> Subject: Re: [gin-ops] [gin-auth] start Savannah run
>>>>
>>>>
>>>> Hi Colin,
>>>>
>>>> Are you able to submit jobs to PRAGMA machines?
>>>> If yes, the APAC CA on your machine should have no problem.
>>>>
>>>> One point that I would like to confirm is...
>>>> Is the time of your client machine correct? Do you use an NTP
>>>> server
>>>> for synchronize the time?
>>>>
>>>> Thanks,
>>>>
>>>> --
>>>> Yoshio Tanaka (yoshio.tanaka at aist.go.jp)
>>>> http://ninf.apgrid.org/
>>>> http://www.apgridpma.org/
>>>>
>>>>
>>>> From: Colin Enticott <Colin.Enticott at csse.monash.edu.au>
>>>> Subject: RE: [gin-ops] [gin-auth] start Savannah run
>>>> Date: Tue, 05 Dec 2006 16:38:40 +1100
>>>> Message-ID: <01df01c7182f$9f59a3d0$1e46c282 at nail>
>>>>
>>>>
>>>>> Hi Yoshio,
>>>>>
>>>>> I am unable to log in. But below is what JP sent me. Any ideas on
>> what
>>>>>
>>>> it
>>>>
>>>>> means?
>>>>>
>>>>> Doing a Google I find:
>>>>> The error might arise from an expired certificate or when
>>>>> trying to
>>>>>
>>>> restore
>>>>
>>>>> certification expiration date and job are in some state in the
>>>>> Grid
>>>>> execution list.
>>>>>
>>>>> I guess it might be a problem with the APAC CA on your
>>>>> machines? Was
>>>>>
>>>> the CA
>>>>
>>>>> set up previously? Or did you use the ones on my info page? (This
>>>>>
>>>> leaves
>>>>
>>>>> the question if I packaged them correctly).
>>>>>
>>>>>
>>>>> On Fri, 2006-12-01 at 12:34 -0600, JP Navarro wrote:
>>>>>
>>>>> TIME: Thu Nov 30 18:49:42 2006
>>>>> PID: 9608 -- Notice: 0: GATEKEEPER_ACCT_FD=5 (/var/globus/prews-
>>>>> gram-4.0.1-r3-i1/log/globus-gatekeeper.log)
>>>>> TIME: Thu Nov 30 18:49:42 2006
>>>>> PID: 9608 -- Notice: 6: Got connection 198.202.88.52 at Thu
>>>>> Nov 30
>>>>> 18:49:42 2006
>>>>>
>>>>> Failed reading length 0
>>>>> GSS authentication failure
>>>>> globus_gss_assist token :3: read failure: Connection closed
>>>>> Failure: GSS failed Major:01090000 Minor:00000000 Token:00000003
>>>>>
>>>>> TIME: Thu Nov 30 18:49:42 2006
>>>>> PID: 9608 -- Failure: GSS failed Major:01090000 Minor:00000000
>>>>> Token:00000003
>>>>>
>>>>>
>>>>> Colin
>>>>>
>>>>> ---
>>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215
>>>>> Room H7.26, Level 7, Building H, Monash University Caulfield 3145,
>>>>>
>>>> Australia
>>>>
>>>>>
>>>>>> -----Original Message-----
>>>>>> From: Yoshio Tanaka [mailto:yoshio.tanaka at aist.go.jp]
>>>>>> Sent: Tuesday, 5 December 2006 12:51 PM
>>>>>> To: Colin.Enticott at csse.monash.edu.au
>>>>>> Cc: D.Bannon at vpac.org; tmartin at physics.ucsd.edu;
>>>>>> navarro at mcs.anl.gov;
>>>>>>
>>>> gin-
>>>>
>>>>>> auth at ggf.org; gin-ops at ggf.org; yoshio.tanaka at aist.go.jp
>>>>>> Subject: Re: [gin-ops] [gin-auth] start Savannah run
>>>>>>
>>>>>>
>>>>>> Hi Colin,
>>>>>>
>>>>>> If you can login to these machines, see the globus
>>>>>> gatekeeper's log
>>>>>>
>>>> at:
>>>>
>>>>>> ${GLOBUS_LOCATION}/var/globus-gatekeeper.log
>>>>>>
>>>>>> You may find error logs such as no entry in mapfile and
>>>>>> failure in
>>>>>> tracing cert chain.
>>>>>>
>>>>>> Regards,
>>>>>>
>>>>>> --
>>>>>> Yoshio Tanaka (yoshio.tanaka at aist.go.jp)
>>>>>> http://ninf.apgrid.org/
>>>>>> http://www.apgridpma.org/
>>>>>>
>>>>>> From: Colin Enticott <Colin.Enticott at csse.monash.edu.au>
>>>>>> Subject: RE: [gin-ops] [gin-auth] start Savannah run
>>>>>> Date: Tue, 05 Dec 2006 12:24:42 +1100
>>>>>> Message-ID: <01c001c7180c$24c430e0$1e46c282 at nail>
>>>>>>
>>>>>>
>>>>>>> Thanks Yoshio,
>>>>>>>
>>>>>>> So it looks like authentication issues as I can connect to
>>>>>>> port 2119
>>>>>>>
>>>> on
>>>>
>>>>>> both
>>>>>>
>>>>>>> hosts:
>>>>>>>
>>>>>>> cme at edda$ globusrun -a -r tg-grid1.uc.teragrid.org
>>>>>>>
>>>>>>> GRAM Authentication test failure: connecting to the job manager
>>>>>>>
>>>> failed.
>>>>
>>>>>>> Possible reasons: job terminated, invalid job contact, network
>>>>>>>
>>>> problems,
>>>>
>>>>>> ...
>>>>>>
>>>>>>> cme at edda$ globusrun -a -r osg-gw-2.t2.ucsd.edu
>>>>>>>
>>>>>>> GRAM Authentication test failure: connecting to the job manager
>>>>>>>
>>>> failed.
>>>>
>>>>>>> Possible reasons: job terminated, invalid job contact, network
>>>>>>>
>>>> problems,
>>>>
>>>>>> ...
>>>>>>
>>>>>>> Regards,
>>>>>>> Colin
>>>>>>>
>>>>>>> ---
>>>>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215
>>>>>>> Room H7.26, Level 7, Building H, Monash University Caulfield
>>>>>>> 3145,
>>>>>>>
>>>>>> Australia
>>>>>>
>>>>>>>
>>>>>>>> -----Original Message-----
>>>>>>>> From: Yoshio Tanaka [mailto:yoshio.tanaka at aist.go.jp]
>>>>>>>> Sent: Tuesday, 5 December 2006 12:21 PM
>>>>>>>> To: Colin.Enticott at csse.monash.edu.au
>>>>>>>> Cc: D.Bannon at vpac.org; tmartin at physics.ucsd.edu;
>>>>>>>>
>>>> navarro at mcs.anl.gov;
>>>>
>>>>>> gin-
>>>>>>
>>>>>>>> auth at ggf.org; gin-ops at ggf.org; yoshio.tanaka at aist.go.jp
>>>>>>>> Subject: Re: [gin-ops] [gin-auth] start Savannah run
>>>>>>>>
>>>>>>>>
>>>>>>>> Hi Colin,
>>>>>>>>
>>>>>>>> Please test the authentication by the following command:
>>>>>>>>
>>>>>>>> % globusrun -a -r osg-gw-2.t2.ucsd.edu
>>>>>>>>
>>>>>>>> % globusrun -a -r tg-grid1.uc.teragrid.org
>>>>>>>>
>>>>>>>> Thanks,
>>>>>>>>
>>>>>>>> --
>>>>>>>> Yoshio Tanaka (yoshio.tanaka at aist.go.jp)
>>>>>>>> http://ninf.apgrid.org/
>>>>>>>> http://www.apgridpma.org/
>>>>>>>>
>>>>>>>>
>>>>>>>> From: Colin Enticott <Colin.Enticott at csse.monash.edu.au>
>>>>>>>> Subject: Re: [gin-ops] [gin-auth] start Savannah run
>>>>>>>> Date: Tue, 05 Dec 2006 11:44:05 +1100
>>>>>>>> Message-ID: <017401c71806$77cf6760$1e46c282 at nail>
>>>>>>>>
>>>>>>>>
>>>>>>>>> Thanks David,
>>>>>>>>>
>>>>>>>>> But still the same problem. As you can see, my certificate
>>>>>>>>>
>>>> still
>>>>
>>>>>> works
>>>>>>
>>>>>>>> on
>>>>>>>>
>>>>>>>>> the vpac host and there is definitely no firewall in the way:
>>>>>>>>>
>>>>>>>>> cme at edda$ grid-proxy-init -cert usercert.pem.APACGrid -key
>>>>>>>>> userkey.pem.APACGrid
>>>>>>>>> Your identity: /C=AU/O=APACGrid/OU=Monash University/CN=Colin
>>>>>>>>>
>>>>>> Enticott
>>>>>>
>>>>>>>>> Enter GRID pass phrase for this identity:
>>>>>>>>> Creating proxy ................................... Done
>>>>>>>>> Your proxy is valid until: Tue Dec 5 23:28:47 2006
>>>>>>>>> cme at edda$ globus-job-run osg-gw-2.t2.ucsd.edu/jobmanager-fork
>>>>>>>>>
>>>>>> /bin/uname
>>>>>>
>>>>>>>> -a
>>>>>>>>
>>>>>>>>> GRAM Job submission failed because the connection to the
>>>>>>>>> server
>>>>>>>>>
>>>>>> failed
>>>>>>
>>>>>>>>> (check host and port) (error code 12)
>>>>>>>>> cme at edda$ globus-job-run tg-grid1.uc.teragrid.org/jobmanager-
>>>>>>>>>
>>>> fork
>>>>
>>>>>>>> /bin/uname
>>>>>>>>
>>>>>>>>> -a
>>>>>>>>> GRAM Job submission failed because the connection to the
>>>>>>>>> server
>>>>>>>>>
>>>>>> failed
>>>>>>
>>>>>>>>> (check host and port) (error code 12)
>>>>>>>>> cme at edda$ globus-job-run ng1.vpac.org/jobmanager-fork /bin/
>>>>>>>>> uname
>>>>>>>>>
>>>> -a
>>>>
>>>>>>>>> Linux ng1.vpac.org 2.6.16.29-xen #4 SMP Sun Oct 15 13:20:46
>>>>>>>>> BST
>>>>>>>>>
>>>> 2006
>>>>
>>>>>>>> i686
>>>>>>>>
>>>>>>>>> i686 i386 GNU/Linux
>>>>>>>>> cme at edda$ telnet tg-grid1.uc.teragrid.org 2119
>>>>>>>>> Trying 192.5.198.225...
>>>>>>>>> Connected to tg-grid1.uc.teragrid.org.
>>>>>>>>> Escape character is '^]'.
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> Connection closed by foreign host.
>>>>>>>>> cme at edda$ telnet osg-gw-2.t2.ucsd.edu 2119
>>>>>>>>> Trying 137.110.141.17...
>>>>>>>>> Connected to osg-gw-2.t2.ucsd.edu.
>>>>>>>>> Escape character is '^]'.
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> Connection closed by foreign host.
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> Any other thoughts from anyone?
>>>>>>>>>
>>>>>>>>> Thanks,
>>>>>>>>> Colin
>>>>>>>>>
>>>>>>>>> ---
>>>>>>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215
>>>>>>>>> Room H7.26, Level 7, Building H, Monash University Caulfield
>>>>>>>>>
>>>> 3145,
>>>>
>>>>>>>> Australia
>>>>>>>>
>>>>>>>>>
>>>>>>>>>> -----Original Message-----
>>>>>>>>>> From: David Bannon [mailto:D.Bannon at vpac.org]
>>>>>>>>>> Sent: Monday, 4 December 2006 6:08 PM
>>>>>>>>>> To: JP Navarro
>>>>>>>>>> Cc: Colin Enticott; gin-auth at ggf.org; gin-ops at ggf.org;
>>>>>>>>>>
>>>> 'Terrence
>>>>
>>>>>>>> Martin'
>>>>>>>>
>>>>>>>>>> Subject: Re: [gin-auth] start Savannah run
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>> Colin, you can run as a Gin user on any of the VPAC machines,
>>>>>>>>>>
>>>> my
>>>>
>>>>>> be
>>>>>>
>>>>>>>>>> easier to debug....
>>>>>>>>>>
>>>>>>>>>> David
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>> On Fri, 2006-12-01 at 12:34 -0600, JP Navarro wrote:
>>>>>>>>>>
>>>>>>>>>>> Colin,
>>>>>>>>>>>
>>>>>>>>>>> The error in the logs is below. Not sure what it means.
>>>>>>>>>>>
>>>> Could
>>>>
>>>>>> you
>>>>>>
>>>>>>>>>>> try this
>>>>>>>>>>> test again from your SDSC TeraGrid account so we can rule
>>>>>>>>>>>
>>>> out
>>>>
>>>>>>>>>>> software and
>>>>>>>>>>> firewall issues?
>>>>>>>>>>>
>>>>>>>>>>> Thanks,
>>>>>>>>>>>
>>>>>>>>>>> JP
>>>>>>>>>>>
>>>>>>>>>>> TIME: Thu Nov 30 18:49:42 2006
>>>>>>>>>>> PID: 9608 -- Notice: 0: GATEKEEPER_ACCT_FD=5
>>>>>>>>>>>
>>>>>> (/var/globus/prews-
>>>>>>
>>>>>>>>>>> gram-4.0.1-r3-i1/log/globus-gatekeeper.log)
>>>>>>>>>>> TIME: Thu Nov 30 18:49:42 2006
>>>>>>>>>>> PID: 9608 -- Notice: 6: Got connection 198.202.88.52 at
>>>>>>>>>>>
>>>> Thu
>>>>
>>>>>> Nov 30
>>>>>>
>>>>>>>>>>> 18:49:42 2006
>>>>>>>>>>>
>>>>>>>>>>> Failed reading length 0
>>>>>>>>>>> GSS authentication failure
>>>>>>>>>>> globus_gss_assist token :3: read failure: Connection
>>>>>>>>>>>
>>>> closed
>>>>
>>>>>>>>>>> Failure: GSS failed Major:01090000 Minor:00000000
>>>>>>>>>>>
>>>> Token:00000003
>>>>
>>>>>>>>>>> TIME: Thu Nov 30 18:49:42 2006
>>>>>>>>>>> PID: 9608 -- Failure: GSS failed Major:01090000
>>>>>>>>>>>
>>>> Minor:00000000
>>>>
>>>>>>>>>>> Token:00000003
>>>>>>>>>>>
>>>>>>>>>>>
>>>>>>>>>>>
>>>>>>>>>>> On Nov 30, 2006, at 7:05 PM, Colin Enticott wrote:
>>>>>>>>>>>
>>>>>>>>>>>
>>>>>>>>>>>> Thanks JP,
>>>>>>>>>>>>
>>>>>>>>>>>> But I am running into some problems. I've tried both from
>>>>>>>>>>>>
>>>> our
>>>>
>>>>>>>>>>>> server and
>>>>>>>>>>>> rocks-52 and this is what I get:
>>>>>>>>>>>> [cme at rocks-52 ~]$ globus-job-run tg-grid1.uc.teragrid.org/
>>>>>>>>>>>> jobmanager-fork
>>>>>>>>>>>> /bin/uname -a
>>>>>>>>>>>> GRAM Job submission failed because the connection to the
>>>>>>>>>>>>
>>>>>> server
>>>>>>
>>>>>>>> failed
>>>>>>>>
>>>>>>>>>>>> (check host and port) (error code 12)
>>>>>>>>>>>> [cme at rocks-52 ~]$ grid-proxy-info
>>>>>>>>>>>> subject : /C=AU/O=APACGrid/OU=Monash University/CN=Colin
>>>>>>>>>>>> Enticott/CN=1087048434
>>>>>>>>>>>> issuer : /C=AU/O=APACGrid/OU=Monash University/CN=Colin
>>>>>>>>>>>>
>>>>>> Enticott
>>>>>>
>>>>>>>>>>>> identity : /C=AU/O=APACGrid/OU=Monash University/CN=Colin
>>>>>>>>>>>>
>>>>>> Enticott
>>>>>>
>>>>>>>>>>>> type : Proxy draft (pre-RFC) compliant impersonation
>>>>>>>>>>>>
>>>> proxy
>>>>
>>>>>>>>>>>> strength : 512 bits
>>>>>>>>>>>> path : /home/cme/globus_proxy.APACGrid
>>>>>>>>>>>> timeleft : 836:30:26 (34.8 days)
>>>>>>>>>>>> [cme at rocks-52 ~]$ ssh tg-grid1.uc.teragrid.org
>>>>>>>>>>>> Warning: Permanently added 'tg-grid1.uc.teragrid.org'
>>>>>>>>>>>>
>>>> (RSA) to
>>>>
>>>>>> the
>>>>>>
>>>>>>>>>>>> list of
>>>>>>>>>>>> known hosts.
>>>>>>>>>>>> Permission denied (external-
>>>>>>>>>>>>
>>>>>>>> keyx,gssapi,publickey,gssapi,hostbased).
>>>>>>>>
>>>>>>>>>>>> [cme at rocks-52 ~]$
>>>>>>>>>>>>
>>>>>>>>>>>> That is the certificate that I registered with. I also
>>>>>>>>>>>>
>>>> tried
>>>>
>>>>>> the
>>>>>>
>>>>>>>>>>>> ssh key
>>>>>>>>>>>> pair I put up on the pragma wiki.
>>>>>>>>>>>>
>>>>>>>>>>>> Any thoughts?
>>>>>>>>>>>>
>>>>>>>>>>>> Thanks,
>>>>>>>>>>>> Colin
>>>>>>>>>>>>
>>>>>>>>>>>> ---
>>>>>>>>>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215
>>>>>>>>>>>> Room H7.26, Level 7, Building H, Monash University
>>>>>>>>>>>>
>>>> Caulfield
>>>>
>>>>>> 3145,
>>>>>>
>>>>>>>>>>>> Australia
>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>>> -----Original Message-----
>>>>>>>>>>>>> From: JP Navarro [mailto:navarro at mcs.anl.gov]
>>>>>>>>>>>>> Sent: Friday, 1 December 2006 2:47 AM
>>>>>>>>>>>>> To: Colin Enticott
>>>>>>>>>>>>> Cc: zhengc at sdsc.edu; 'Terrence Martin'; gin-ops at ggf.org;
>>>>>>>>>>>>>
>>>>>> 'Oscar
>>>>>>
>>>>>>>>>>>>> Koeroo';
>>>>>>>>>>>>> gin-auth at ggf.org
>>>>>>>>>>>>> Subject: Re: start Savannah run
>>>>>>>>>>>>>
>>>>>>>>>>>>> Colin,
>>>>>>>>>>>>>
>>>>>>>>>>>>> You should be set to go on the UC/ANL TeraGrid cluster.
>>>>>>>>>>>>>
>>>>>>>>>>>>> GT4 Pre-WS GRAM: tg-grid1.uc.teragrid.org:2119
>>>>>>>>>>>>> GT4 WS GRAM: tg-grid1.uc.teragrid.org:8443 (FORK,
>>>>>>>>>>>>>
>>>> PBS)
>>>>
>>>>>>>>>>>>> GT4 GridFTP: tg-gridftp.uc.teragrid.org:2811
>>>>>>>>>>>>>
>>>>>>>>>>>>> Regards,
>>>>>>>>>>>>>
>>>>>>>>>>>>> JP
>>>>>>>>>>>>>
>>>>>>>>>>>>> On Nov 30, 2006, at 2:43 AM, Colin Enticott wrote:
>>>>>>>>>>>>>
>>>>>>>>>>>>>
>>>>>>>>>>>>>> Thankyou everyone.
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> I am now registered on the GIN VO (well, I appear here:
>>>>>>>>>>>>>> http://kuiken.nikhef.nl/gin.ggf.org/grid-mapfile).
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> What is my next step?
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> Thanks,
>>>>>>>>>>>>>> Colin
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> ---
>>>>>>>>>>>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215
>>>>>>>>>>>>>> Room H7.26, Level 7, Building H, Monash University
>>>>>>>>>>>>>>
>>>> Caulfield
>>>>
>>>>>>>> 3145,
>>>>>>>>
>>>>>>>>>>>>>> Australia
>>>>>>>>>>>>>>
>>>>>>>>>>>>>>
>>>>>>>>>>>>>>
>>>>>>>>>>>>>>> -----Original Message-----
>>>>>>>>>>>>>>> From: Cindy Zheng [mailto:zhengc at sdsc.edu]
>>>>>>>>>>>>>>> Sent: Thursday, 30 November 2006 11:59 AM
>>>>>>>>>>>>>>> To: 'Terrence Martin'
>>>>>>>>>>>>>>> Cc: 'JP Navarro'; gin-ops at ggf.org; 'Oscar Koeroo';
>>>>>>>>>>>>>>>
>>>> 'Colin
>>>>
>>>>>>>>>>>>>>> Enticott'; gin-
>>>>>>>>>>>>>>> auth at ggf.org
>>>>>>>>>>>>>>> Subject: RE: FW: start Savannah run
>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>> Thank you, Terrence!
>>>>>>>>>>>>>>> We'll wait to hear from Colin when Colin finishes
>>>>>>>>>>>>>>> registering to gin vo.
>>>>>>>>>>>>>>> Cindy
>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>> -----Original Message-----
>>>>>>>>>>>>>>>> From: Terrence Martin
>>>>>>>>>>>>>>>>
>>>> [mailto:tmartin at physics.ucsd.edu]
>>>>
>>>>>>>>>>>>>>>> Sent: Wednesday, November 29, 2006 11:36 AM
>>>>>>>>>>>>>>>> To: Oscar Koeroo
>>>>>>>>>>>>>>>> Cc: zhengc at sdsc.edu; 'JP Navarro'; gin-ops at ggf.org;
>>>>>>>>>>>>>>>>
>>>> 'Colin
>>>>
>>>>>>>>>>>>>>>> Enticott'; gin-auth at ggf.org
>>>>>>>>>>>>>>>> Subject: Re: FW: start Savannah run
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>> Oscar Koeroo wrote:
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>> Hi Terrence and Cindy,
>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>> Getting new users up for registration on the GIN VO
>>>>>>>>>>>>>>>>>
>>>> is
>>>>
>>>>>> easy.
>>>>>>
>>>>>>>>>>>>>>>>> To be
>>>>>>>>>>>>>>>>> able to access the secured website and for
>>>>>>>>>>>>>>>>>
>>>> authentication
>>>>
>>>>>>>> reasons
>>>>>>>>
>>>>>>>>>>>>>>>>> during the registration process new users must have
>>>>>>>>>>>>>>>>>
>>>> their
>>>>
>>>>>>>>>>>>>>>> certificate
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>> loaded and ready in their webbrowser. The VOMS server
>>>>>>>>>>>>>>>>>
>>>> is
>>>>
>>>>>>>>>>>>>>>> loaded with
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>> all IGTF accredited CAs including the Fermilab kCA.
>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>> Go to the website:
>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>> https://kuiken.nikhef.nl:8443/voms/gin.ggf.org/ and
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>> apply for a "New user registration".
>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>> The usual VOMS configuration info is also available.
>>>>>>>>>>>>>>>>>
>>>> I
>>>>
>>>>>>>>>>>>>>>> don't know what
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>> you'll need to populate a GUMS server. This VOMS
>>>>>>>>>>>>>>>>>
>>>> server
>>>>
>>>>>> is as
>>>>>>
>>>>>>>> any
>>>>>>>>
>>>>>>>>>>>>>>>>> other so I guess you can use your regular setup.
>>>>>>>>>>>>>>>>> In addition to the secured interface I've also made
>>>>>>>>>>>>>>>>>
>>>>>> available
>>>>>>
>>>>>>>> a
>>>>>>>>
>>>>>>>>>>>>>>>>> non-secured way of grabbing a grid-mapfile.
>>>>>>>>>>>>>>>>> http://kuiken.nikhef.nl/gin.ggf.org/grid-mapfile
>>>>>>>>>>>>>>>>> There is also an RSS-feed pointing to the grid-
>>>>>>>>>>>>>>>>>
>>>> mapfile
>>>>
>>>>>> and
>>>>>>
>>>>>>>>>>>>>>>> the secured
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>> interface at
>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>> http://kuiken.nikhef.nl/gin.ggf.org/feed-
>>>>>>>>>>>>>>>>
>>>> gin.ggf.org.xml
>>>>
>>>>>>>>>>>>>>>>> Unfortunately I'm not aware of a clear guide. I do
>>>>>>>>>>>>>>>>>
>>>> know a
>>>>
>>>>>>>>>>>>>>>>> guide for
>>>>>>>>>>>>>>>>> creating the packed certificate files that go into
>>>>>>>>>>>>>>>>>
>>>> your
>>>>
>>>>>>>>>>>>>>>> browser if you
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>> start from a two PEM formated files (certificate file
>>>>>>>>>>>>>>>>>
>>>> +
>>>>
>>>>>>>>>>>>>>>>> private key
>>>>>>>>>>>>>>>>> file) that's at
>>>>>>>>>>>>>>>>>
>>>> http://certificate.nikhef.nl/info/browser
>>>>
>>>>>>>>>>>>>>>>> Once a user has passed that stage, the registration
>>>>>>>>>>>>>>>>>
>>>> for
>>>>
>>>>>> the
>>>>>>
>>>>>>>>>>>>>>>> VO is as
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>> trivial as any web-forum account registration.
>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>> I am assuming this user already has a grid cert since
>>>>>>>>>>>>>>>>
>>>> they
>>>>
>>>>>>>>>>>>>>>> list a DN so
>>>>>>>>>>>>>>>> only VOMS registration is required. Once that is done
>>>>>>>>>>>>>>>>
>>>>>> either I
>>>>>>
>>>>>>>>>>>>>>>> run my
>>>>>>>>>>>>>>>> update of GUMS manually or in 720/2 minutes on average
>>>>>>>>>>>>>>>>
>>>> the
>>>>
>>>>>>>>>>>>>>>> user will be
>>>>>>>>>>>>>>>> automatically downloaded into my GUMS database. I
>>>>>>>>>>>>>>>>
>>>> actually
>>>>
>>>>>> do
>>>>>>
>>>>>>>>>>>>>>>> not have
>>>>>>>>>>>>>>>> to do anything, but I can speed things up ever so
>>>>>>>>>>>>>>>>
>>>> slightly
>>>>
>>>>>> if
>>>>>>
>>>>>>>> I
>>>>>>>>
>>>>>>>>>>>>>>>> am in
>>>>>>>>>>>>>>>> the office and someone asks me to try refreshing gums.
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>> Terrence
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>> Oscar
>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>> Cindy Zheng wrote:
>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>> Sounds right, Terrence. Let me ask Oscar who has
>>>>>>>>>>>>>>>>>>
>>>> helped
>>>>
>>>>>> me
>>>>>>
>>>>>>>>>>>>>>>> with GIN
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>> VO before.
>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>> Hi, Oscar,
>>>>>>>>>>>>>>>>>> Could you advise Colin what need to be done to be
>>>>>>>>>>>>>>>>>> added in GIN VO?
>>>>>>>>>>>>>>>>>> I'm also cc'ing to gin-auth list.
>>>>>>>>>>>>>>>>>> If there is a guide for potential GIN users, please
>>>>>>>>>>>>>>>>>> let me know the url and I can link it to our GINOPS
>>>>>>>>>>>>>>>>>> page.
>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>> Thanks,
>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>> Cindy
>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>> -----Original Message-----
>>>>>>>>>>>>>>>>>>> From: Terrence Martin
>>>>>>>>>>>>>>>>>>>
>>>> [mailto:tmartin at physics.ucsd.edu]
>>>>
>>>>>>>> Sent:
>>>>>>>>
>>>>>>>>>>>>>>>>>>> Tuesday, November 28, 2006 3:24 PM
>>>>>>>>>>>>>>>>>>> To: zhengc at sdsc.edu
>>>>>>>>>>>>>>>>>>> Cc: 'JP Navarro'; gin-ops at ggf.org; 'Colin Enticott'
>>>>>>>>>>>>>>>>>>> Subject: Re: FW: start Savannah run
>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>> The quickest and easiest way for me is to have him
>>>>>>>>>>>>>>>>>>>
>>>>>> added to
>>>>>>
>>>>>>>>>>>>>>>>>>> a VO.
>>>>>>>>>>>>>>>>>>> How easy is it to add him to the GIN VO? One in
>>>>>>>>>>>>>>>>>>>
>>>> there I
>>>>
>>>>>>>>>>>>>>>> can hit my
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>> gums reload and he will be able to access UCSD as a
>>>>>>>>>>>>>>>>>>>
>>>> GIN
>>>>
>>>>>>>>>>>>>>>>>>> user. Any
>>>>>>>>>>>>>>>>>>> other approach requires me hacking his DN into my
>>>>>>>>>>>>>>>>>>>
>>>> local
>>>>
>>>>>>>>>>>>>>>> VO which I
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>> prefer to avoid and does not help him with any
>>>>>>>>>>>>>>>>>>>
>>>> other
>>>>
>>>>>> site.
>>>>>>
>>>>>>>>>>>>>>>>>>> Terrence
>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>> Cindy Zheng wrote:
>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>> Thanks, Terrence, for the quick reply!
>>>>>>>>>>>>>>>>>>>> Colin has not been a GIN user.
>>>>>>>>>>>>>>>>>>>> What do you think it's the best way to get colin
>>>>>>>>>>>>>>>>>>>>
>>>>>> access?
>>>>>>
>>>>>>>>>>>>>>>>>>>> Cindy
>>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>>> -----Original Message-----
>>>>>>>>>>>>>>>>>>>>> From: Terrence Martin
>>>>>>>>>>>>>>>>>>>>>
>>>>>> [mailto:tmartin at physics.ucsd.edu]
>>>>>>
>>>>>>>> Sent:
>>>>>>>>
>>>>>>>>>>>>>>>>>>>>> Tuesday, November 28, 2006 2:53 PM
>>>>>>>>>>>>>>>>>>>>> To: zhengc at sdsc.edu
>>>>>>>>>>>>>>>>>>>>> Cc: 'JP Navarro'; gin-ops at ggf.org
>>>>>>>>>>>>>>>>>>>>> Subject: Re: FW: start Savannah run
>>>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>>> We only have a production cluster, but I should
>>>>>>>>>>>>>>>>>>>>>
>>>> still
>>>>
>>>>>>>>>>>>>>>> be
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>> able to help.
>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>>> I do not seem to have Colin in my GUMS database
>>>>>>>>>>>>>>>>>>>>>
>>>>>> though
>>>>>>
>>>>>>>>>>>>>>>> for
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>> GIN or any
>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>>> other VO. Should he be downloaded with GIN's
>>>>>>>>>>>>>>>>>>>>>
>>>> users?
>>>>
>>>>>>>>>>>>>>>>>>>>> Terrence
>>>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>>> Cindy Zheng wrote:
>>>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>>>> Hi, JP and Terrence,
>>>>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>>>> Could you help Colin to get ready to run
>>>>>>>>>>>>>>>>>>>>>>
>>>> Savannah
>>>>
>>>>>>>>>>>>>>>>>>>>>> application on your GIN testbed clusters?
>>>>>>>>>>>>>>>>>>>>>> You can find Colin's user info at
>>>>>>>>>>>>>>>>>>>>>> http://wiki.pragma-
>>>>>>>>>>>>>>>>>>>>>>
>>>>>> grid.net/index.php?title=ColinDetails
>>>>>>
>>>>>>>>>>>>>>>>>>>>>> If you need more info or action from Colin, or
>>>>>>>>>>>>>>>>>>>>>>
>>>> have
>>>>
>>>>>>>>>>>>>>>> any questions
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>>>> for Colin or me, please let us know.
>>>>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>>>> Thank you very much!
>>>>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>>>> Cindy
>>>>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>>>> -----Original Message-----
>>>>>>>>>>>>>>>>>>>>>> From: Cindy Zheng [mailto:zhengc at sdsc.edu] Sent:
>>>>>>>>>>>>>>>>>>>>>>
>>>>>>>> Tuesday,
>>>>>>>>
>>>>>>>>>>>>>>>>>>>>>> November 28, 2006 2:31 PM
>>>>>>>>>>>>>>>>>>>>>> To: 'gin-ops at ggf.org'
>>>>>>>>>>>>>>>>>>>>>> Subject: start Savannah run
>>>>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>>>> Dear all,
>>>>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>>>> Thanks for all the people involved to help make
>>>>>>>>>>>>>>>>>>>>>> TDDFT application run and GIN testbed monitoring
>>>>>>>>>>>>>>>>>>>>>> very fruitful experiments! We have learned a lot
>>>>>>>>>>>>>>>>>>>>>>
>>>> and
>>>>
>>>>>>>> have
>>>>>>>>
>>>>>>>>>>>>>>>>>>>>>> presented our learnings at OGF and SC06.
>>>>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>>>> Let's continue our collaborative effort with our
>>>>>>>>>>>>>>>>>>>>>>
>>>>>> plan
>>>>>>
>>>>>>>>>>>>>>>> - start our
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>>>> next experiment with Savannah
>>>>>>>>>>>>>>>>>>>>>> fire simulation - a data-intensive application,
>>>>>>>>>>>>>>>>>>>>>>
>>>> to
>>>>
>>>>>>>>>>>>>>>> explore data
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>>>> related interoperation issues.
>>>>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>>>> Colin Enticott at Monash University of Australia
>>>>>>>>>>>>>>>>>>>>>> is the lead driver. Colin has documented the
>>>>>>>>>>>>>>>>>>>>>> introduction and requirements of this
>>>>>>>>>>>>>>>>>>>>>>
>>>> application at
>>>>
>>>>>>>>>>>>>>>>>>>>>> http://wiki.pragma-
>>>>>>>>>>>>>>>>>>>>>>
>>>> grid.net/index.php?title=Savannah
>>>>
>>>>>>>>>>>>>>>>>>>>>> or go to
>>>>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>>> http://forge.gridforum.org/sf/wiki/do/viewPage/
>>>>>>>>>>>>>>>>>>>>> projects.gin/wi
>>>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>> ki/GinOps
>>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>>> click "Savannah" under "Applications",
>>>>>>>>>>>>>>>>>>>>> where "first Savannah experiment" is refering to
>>>>>>>>>>>>>>>>>>>>> a previous experiment in PRAGMA testbed. The
>>>>>>>>>>>>>>>>>>>>> "second Savannah experiment" is the one for GIN
>>>>>>>>>>>>>>>>>>>>>
>>>>>> testbed.
>>>>>>
>>>>>>>>>>>>>>>>>>>>> We like to run this application on all Grids in
>>>>>>>>>>>>>>>>>>>>>
>>>> GIN
>>>>
>>>>>>>>>>>>>>>> testbed, but
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>>> in 2 steps. First, we will run it on
>>>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>> PRAGMA/TeraGrid/OSG - since
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>>> these should be relatively easier to do. We like
>>>>>>>>>>>>>>>>>>>>>
>>>> to
>>>>
>>>>>> get
>>>>>>
>>>>>>>>>>>>>>>> this done
>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>>> before the year end.
>>>>>>>>>>>>>>>>>>>>> The next step, Colin will work with EGEE and
>>>>>>>>>>>>>>>>>>>>>
>>>>>> Nordugrid
>>>>>>
>>>>>>>>>>>>>>>>>>>>> to develop possible solutions, to enable
>>>>>>>>>>>>>>>>>>>>>
>>>>>> interoperation
>>>>>>
>>>>>>>>>>>>>>>>>>>>> and to include all 5 Grids in the run.
>>>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>>> Thanks in advance for your continued help with
>>>>>>>>>>>>>>>>>>>>>
>>>> this!
>>>>
>>>>>>>>>>>>>>>>>>>>> Cindy
>>>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>> --
>>>>>>>>>>> gin-auth mailing list
>>>>>>>>>>> gin-auth at ogf.org
>>>>>>>>>>> http://www.ogf.org/mailman/listinfo/gin-auth
>>>>>>>>>>>
>>>>>>>>> --
>>>>>>>>> gin-ops mailing list
>>>>>>>>> gin-ops at ogf.org
>>>>>>>>> http://www.ogf.org/mailman/listinfo/gin-ops
>>>>>>>>>
>>>
>>>
>>>
>
More information about the gin-ops
mailing list