Re: [gin-ops] [gin-auth] start Savannah run
Hi Terrence, The clock on remus and tg-grid1 are within a few seconds of each other (maybe closer, I can't type that fast). Using Mike's suggestion (thankyou Mike) it looks like the "server" has an expired revocation list: $ globus-url-copy -vb -dbg gsiftp://tg-gridftp.uc.teragrid.org:2811/etc/hosts file:///tmp/null debug: starting to get gsiftp://tg-gridftp.uc.teragrid.org:2811/etc/hosts debug: connecting to gsiftp://tg-gridftp.uc.teragrid.org:2811/etc/hosts debug: response from gsiftp://tg-gridftp.uc.teragrid.org:2811/etc/hosts: 220 tg-s004.uc.teragrid.org GridFTP Server 2.1 (gcc32dbg, 1122653280-63) ready. debug: authenticating with gsiftp://tg-gridftp.uc.teragrid.org:2811/etc/hosts debug: response from gsiftp://tg-gridftp.uc.teragrid.org:2811/etc/hosts: 530-globus_xio: Authentication Error 530-globus_gsi_callback_module: Could not verify credential 530-globus_gsi_callback_module: Could not verify credential 530-globus_gsi_callback_module: Invalid CRL: The available CRL has expired 530 End. debug: fault on connection to gsiftp://tg-gridftp.uc.teragrid.org:2811/etc/hosts debug: data callback, error the server sent an error response: 530 530-globus_xio: Authentication Error 530-globus_gsi_callback_module: Could not verify credential 530-globus_gsi_callback_module: Could not verify credential 530-globus_gsi_callback_module: Invalid CRL: The available CRL has expired 530 End. , buffer 0xb7e76008, length 0, offset=0, eof=true debug: operation complete error: the server sent an error response: 530 530-globus_xio: Authentication Error 530-globus_gsi_callback_module: Could not verify credential 530-globus_gsi_callback_module: Could not verify credential 530-globus_gsi_callback_module: Invalid CRL: The available CRL has expired 530 End. Regards, Colin --- Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 Room H7.26, Level 7, Building H, Monash University Caulfield 3145, Australia
-----Original Message----- From: Terrence Martin [mailto:tmartin@physics.ucsd.edu] Sent: Tuesday, 6 February 2007 5:27 AM To: Colin Enticott Cc: 'JP Navarro'; gin-auth@ggf.org; gin-ops@ggf.org; zhengc@sdsc.edu Subject: Re: [gin-ops] [gin-auth] start Savannah run
Just in case, can you confirm that the time is synchronized on the local and remote system?
Terrence
Colin Enticott wrote:
Hi JP Navarro,
The same problem has happened again. Output from gt2.4:
$ globusrun -a -r globus.infotech.monash.edu.au
GRAM Authentication test successful $ globusrun -a -r tg-grid1.uc.teragrid.org
GRAM Authentication test failure: authentication failed: GSS Major Status: Authentication Failed GSS Minor Status Error Chain:
init.c:499: globus_gss_assist_init_sec_context_async: Error during context initialization init_sec_context.c:171: gss_init_sec_context: SSLv3 handshake problems globus_i_gsi_gss_utils.c:888: globus_i_gsi_gss_handshake: Unable to verify remote side's credentials globus_i_gsi_gss_utils.c:854: globus_i_gsi_gss_handshake: SSLv3 handshake problems: Couldn't do ssl handshake OpenSSL Error: s3_pkt.c:1046: in library: SSL routines, function SSL3_READ_BYTES: sslv3 alert certificate expired
I recently renewed my APAC certificate, but it should be the same. globus.infotech.monash.edu.au worked without change.
Help!
Regards, Colin
--- Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 Room H7.26, Level 7, Building H, Monash University Caulfield 3145, Australia
-----Original Message----- From: JP Navarro [mailto:navarro@mcs.anl.gov] Sent: Thursday, 4 January 2007 3:00 AM To: Colin Enticott Cc: gin-auth@ggf.org; gin-ops@ggf.org; 'Terrence Martin'; zhengc@sdsc.edu Subject: Re: [gin-ops] [gin-auth] start Savannah run
Colin,
We didn't have the Monash University CA configured on tg- grid1.uc.teragrid.org. This has now been fixed.
Regards,
JP Navarro
On Jan 3, 2007, at 2:13 AM, Colin Enticott wrote:
First of all, Happy new year everyone!
Thankyou for your help last year.
I have two quick questions:
I am now receiving a "certificate expired" message from tg-grid1.uc.teragrid.org. My certificate still works elsewhere. Is it the server's certificate?
And on osg-gw-2.t2.ucsd.edu, I need to write ~80GB of data for the experiment. Which directory can I use?
Thanks, Colin
--- Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 Room H7.26, Level 7, Building H, Monash University Caulfield 3145, Australia
-----Original Message----- From: Terrence Martin [mailto:tmartin@physics.ucsd.edu] Sent: Tuesday, 5 December 2006 5:41 PM To: Colin Enticott Cc: 'Yoshio Tanaka'; D.Bannon@vpac.org; navarro@mcs.anl.gov; gin- auth@ggf.org; gin-ops@ggf.org Subject: Re: [gin-ops] [gin-auth] start Savannah run
colin, if you want to try logging into
colin@uaf-1.t2.ucsd.edu
run
source /data/vdt/setup.sh
then grab a cert with grid-proxy-init and give it a try.
It is the machine that all my users use to submit to my OSG site.
Terrence
Colin Enticott wrote:
Hi Yoshio,
I've tried it from 3 servers. On the server I have root access on, I
just
manually synced and I am still having the problem. I am wondering if
the CA
certificate I sent is okay. It's the APAC CA files we use here on our servers.
On the Pragma resources, I have been using my old certificate (as
initially
there was teething problems with the new APAC CA). Can you update your server with the details below and I'll give it a try:
http://wiki.pragma-grid.net/index.php?title=ColinDetails
Thanks, Colin
--- Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 Room H7.26, Level 7, Building H, Monash University Caulfield 3145,
Australia
> -----Original Message----- > From: Yoshio Tanaka [mailto:yoshio.tanaka@aist.go.jp] > Sent: Tuesday, 5 December 2006 4:51 PM > To: Colin.Enticott@csse.monash.edu.au > Cc: D.Bannon@vpac.org; tmartin@physics.ucsd.edu; > navarro@mcs.anl.gov; >
gin-
> auth@ggf.org; gin-ops@ggf.org; yoshio.tanaka@aist.go.jp > Subject: Re: [gin-ops] [gin-auth] start Savannah run > > > Hi Colin, > > Are you able to submit jobs to PRAGMA machines? > If yes, the APAC CA on your machine should have no problem. > > One point that I would like to confirm is... > Is the time of your client machine correct? Do you use an NTP > server > for synchronize the time? > > Thanks, > > -- > Yoshio Tanaka (yoshio.tanaka@aist.go.jp) > http://ninf.apgrid.org/ > http://www.apgridpma.org/ > > > From: Colin Enticott <Colin.Enticott@csse.monash.edu.au> > Subject: RE: [gin-ops] [gin-auth] start Savannah run > Date: Tue, 05 Dec 2006 16:38:40 +1100 > Message-ID: <01df01c7182f$9f59a3d0$1e46c282@nail> > > > >> Hi Yoshio, >> >> I am unable to log in. But below is what JP sent me. Any ideas on >> what
> it > > >> means? >> >> Doing a Google I find: >> The error might arise from an expired certificate or when >> trying to >> >> > restore > > >> certification expiration date and job are in some state in the >> Grid >> execution list. >> >> I guess it might be a problem with the APAC CA on your >> machines? Was >> >> > the CA > > >> set up previously? Or did you use the ones on my info page? (This >> >> > leaves > > >> the question if I packaged them correctly). >> >> >> On Fri, 2006-12-01 at 12:34 -0600, JP Navarro wrote: >> >> TIME: Thu Nov 30 18:49:42 2006 >> PID: 9608 -- Notice: 0: GATEKEEPER_ACCT_FD=5 (/var/globus/prews- >> gram-4.0.1-r3-i1/log/globus-gatekeeper.log) >> TIME: Thu Nov 30 18:49:42 2006 >> PID: 9608 -- Notice: 6: Got connection 198.202.88.52 at Thu >> Nov 30 >> 18:49:42 2006 >> >> Failed reading length 0 >> GSS authentication failure >> globus_gss_assist token :3: read failure: Connection closed >> Failure: GSS failed Major:01090000 Minor:00000000 Token:00000003 >> >> TIME: Thu Nov 30 18:49:42 2006 >> PID: 9608 -- Failure: GSS failed Major:01090000 Minor:00000000 >> Token:00000003 >> >> >> Colin >> >> --- >> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 >> Room H7.26, Level 7, Building H, Monash University Caulfield 3145, >> >> > Australia > > >>> -----Original Message----- >>> From: Yoshio Tanaka [mailto:yoshio.tanaka@aist.go.jp] >>> Sent: Tuesday, 5 December 2006 12:51 PM >>> To: Colin.Enticott@csse.monash.edu.au >>> Cc: D.Bannon@vpac.org; tmartin@physics.ucsd.edu; >>> navarro@mcs.anl.gov; >>> >>> > gin- > > >>> auth@ggf.org; gin-ops@ggf.org; yoshio.tanaka@aist.go.jp >>> Subject: Re: [gin-ops] [gin-auth] start Savannah run >>> >>> >>> Hi Colin, >>> >>> If you can login to these machines, see the globus >>> gatekeeper's log >>> >>> > at: > > >>> ${GLOBUS_LOCATION}/var/globus-gatekeeper.log >>> >>> You may find error logs such as no entry in mapfile and >>> failure in >>> tracing cert chain. >>> >>> Regards, >>> >>> -- >>> Yoshio Tanaka (yoshio.tanaka@aist.go.jp) >>> http://ninf.apgrid.org/ >>> http://www.apgridpma.org/ >>> >>> From: Colin Enticott <Colin.Enticott@csse.monash.edu.au> >>> Subject: RE: [gin-ops] [gin-auth] start Savannah run >>> Date: Tue, 05 Dec 2006 12:24:42 +1100 >>> Message-ID: <01c001c7180c$24c430e0$1e46c282@nail> >>> >>> >>> >>>> Thanks Yoshio, >>>> >>>> So it looks like authentication issues as I can connect to >>>> port 2119 >>>> >>>> > on > > >>> both >>> >>> >>>> hosts: >>>> >>>> cme@edda$ globusrun -a -r tg-grid1.uc.teragrid.org >>>> >>>> GRAM Authentication test failure: connecting to the job manager >>>> >>>> > failed. > > >>>> Possible reasons: job terminated, invalid job contact, network >>>> >>>> > problems, > > >>> ... >>> >>> >>>> cme@edda$ globusrun -a -r osg-gw-2.t2.ucsd.edu >>>> >>>> GRAM Authentication test failure: connecting to the job manager >>>> >>>> > failed. > > >>>> Possible reasons: job terminated, invalid job contact, network >>>> >>>> > problems, > > >>> ... >>> >>> >>>> Regards, >>>> Colin >>>> >>>> --- >>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 >>>> Room H7.26, Level 7, Building H, Monash University Caulfield >>>> 3145, >>>> >>>> >>> Australia >>> >>> >>>>> -----Original Message----- >>>>> From: Yoshio Tanaka [mailto:yoshio.tanaka@aist.go.jp] >>>>> Sent: Tuesday, 5 December 2006 12:21 PM >>>>> To: Colin.Enticott@csse.monash.edu.au >>>>> Cc: D.Bannon@vpac.org; tmartin@physics.ucsd.edu; >>>>> >>>>> > navarro@mcs.anl.gov; > > >>> gin- >>> >>> >>>>> auth@ggf.org; gin-ops@ggf.org; yoshio.tanaka@aist.go.jp >>>>> Subject: Re: [gin-ops] [gin-auth] start Savannah run >>>>> >>>>> >>>>> Hi Colin, >>>>> >>>>> Please test the authentication by the following command: >>>>> >>>>> % globusrun -a -r osg-gw-2.t2.ucsd.edu >>>>> >>>>> % globusrun -a -r tg-grid1.uc.teragrid.org >>>>> >>>>> Thanks, >>>>> >>>>> -- >>>>> Yoshio Tanaka (yoshio.tanaka@aist.go.jp) >>>>> http://ninf.apgrid.org/ >>>>> http://www.apgridpma.org/ >>>>> >>>>> >>>>> From: Colin Enticott <Colin.Enticott@csse.monash.edu.au> >>>>> Subject: Re: [gin-ops] [gin-auth] start Savannah run >>>>> Date: Tue, 05 Dec 2006 11:44:05 +1100 >>>>> Message-ID: <017401c71806$77cf6760$1e46c282@nail> >>>>> >>>>> >>>>> >>>>>> Thanks David, >>>>>> >>>>>> But still the same problem. As you can see, my certificate >>>>>> >>>>>> > still > > >>> works >>> >>> >>>>> on >>>>> >>>>> >>>>>> the vpac host and there is definitely no firewall in the way: >>>>>> >>>>>> cme@edda$ grid-proxy-init -cert usercert.pem.APACGrid -key >>>>>> userkey.pem.APACGrid >>>>>> Your identity: /C=AU/O=APACGrid/OU=Monash University/CN=Colin >>>>>> >>>>>> >>> Enticott >>> >>> >>>>>> Enter GRID pass phrase for this identity: >>>>>> Creating proxy ................................... Done >>>>>> Your proxy is valid until: Tue Dec 5 23:28:47 2006 >>>>>> cme@edda$ globus-job-run osg-gw-2.t2.ucsd.edu/jobmanager-fork >>>>>> >>>>>> >>> /bin/uname >>> >>> >>>>> -a >>>>> >>>>> >>>>>> GRAM Job submission failed because the connection to the >>>>>> server >>>>>> >>>>>> >>> failed >>> >>> >>>>>> (check host and port) (error code 12) >>>>>> cme@edda$ globus-job-run tg-grid1.uc.teragrid.org/jobmanager- >>>>>> >>>>>> > fork > > >>>>> /bin/uname >>>>> >>>>> >>>>>> -a >>>>>> GRAM Job submission failed because the connection to the >>>>>> server >>>>>> >>>>>> >>> failed >>> >>> >>>>>> (check host and port) (error code 12) >>>>>> cme@edda$ globus-job-run ng1.vpac.org/jobmanager-fork /bin/ >>>>>> uname >>>>>> >>>>>> > -a > > >>>>>> Linux ng1.vpac.org 2.6.16.29-xen #4 SMP Sun Oct 15 13:20:46 >>>>>> BST >>>>>> >>>>>> > 2006 > > >>>>> i686 >>>>> >>>>> >>>>>> i686 i386 GNU/Linux >>>>>> cme@edda$ telnet tg-grid1.uc.teragrid.org 2119 >>>>>> Trying 192.5.198.225... >>>>>> Connected to tg-grid1.uc.teragrid.org. >>>>>> Escape character is '^]'. >>>>>> >>>>>> >>>>>> Connection closed by foreign host. >>>>>> cme@edda$ telnet osg-gw-2.t2.ucsd.edu 2119 >>>>>> Trying 137.110.141.17... >>>>>> Connected to osg-gw-2.t2.ucsd.edu. >>>>>> Escape character is '^]'. >>>>>> >>>>>> >>>>>> Connection closed by foreign host. >>>>>> >>>>>> >>>>>> Any other thoughts from anyone? >>>>>> >>>>>> Thanks, >>>>>> Colin >>>>>> >>>>>> --- >>>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 >>>>>> Room H7.26, Level 7, Building H, Monash University Caulfield >>>>>> >>>>>> > 3145, > > >>>>> Australia >>>>> >>>>> >>>>>>> -----Original Message----- >>>>>>> From: David Bannon [mailto:D.Bannon@vpac.org] >>>>>>> Sent: Monday, 4 December 2006 6:08 PM >>>>>>> To: JP Navarro >>>>>>> Cc: Colin Enticott; gin-auth@ggf.org; gin-ops@ggf.org; >>>>>>> >>>>>>> > 'Terrence > > >>>>> Martin' >>>>> >>>>> >>>>>>> Subject: Re: [gin-auth] start Savannah run >>>>>>> >>>>>>> >>>>>>> Colin, you can run as a Gin user on any of the VPAC machines, >>>>>>> >>>>>>> > my > > >>> be >>> >>> >>>>>>> easier to debug.... >>>>>>> >>>>>>> David >>>>>>> >>>>>>> >>>>>>> On Fri, 2006-12-01 at 12:34 -0600, JP Navarro wrote: >>>>>>> >>>>>>> >>>>>>>> Colin, >>>>>>>> >>>>>>>> The error in the logs is below. Not sure what it means. >>>>>>>> >>>>>>>> > Could > > >>> you >>> >>> >>>>>>>> try this >>>>>>>> test again from your SDSC TeraGrid account so we can rule >>>>>>>> >>>>>>>> > out > > >>>>>>>> software and >>>>>>>> firewall issues? >>>>>>>> >>>>>>>> Thanks, >>>>>>>> >>>>>>>> JP >>>>>>>> >>>>>>>> TIME: Thu Nov 30 18:49:42 2006 >>>>>>>> PID: 9608 -- Notice: 0: GATEKEEPER_ACCT_FD=5 >>>>>>>> >>>>>>>> >>> (/var/globus/prews- >>> >>> >>>>>>>> gram-4.0.1-r3-i1/log/globus-gatekeeper.log) >>>>>>>> TIME: Thu Nov 30 18:49:42 2006 >>>>>>>> PID: 9608 -- Notice: 6: Got connection 198.202.88.52 at >>>>>>>> >>>>>>>> > Thu > > >>> Nov 30 >>> >>> >>>>>>>> 18:49:42 2006 >>>>>>>> >>>>>>>> Failed reading length 0 >>>>>>>> GSS authentication failure >>>>>>>> globus_gss_assist token :3: read failure: Connection >>>>>>>> >>>>>>>> > closed > > >>>>>>>> Failure: GSS failed Major:01090000 Minor:00000000 >>>>>>>> >>>>>>>> > Token:00000003 > > >>>>>>>> TIME: Thu Nov 30 18:49:42 2006 >>>>>>>> PID: 9608 -- Failure: GSS failed Major:01090000 >>>>>>>> >>>>>>>> > Minor:00000000 > > >>>>>>>> Token:00000003 >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> On Nov 30, 2006, at 7:05 PM, Colin Enticott wrote: >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>>> Thanks JP, >>>>>>>>> >>>>>>>>> But I am running into some problems. I've tried both from >>>>>>>>> >>>>>>>>> > our > > >>>>>>>>> server and >>>>>>>>> rocks-52 and this is what I get: >>>>>>>>> [cme@rocks-52 ~]$ globus-job-run tg-grid1.uc.teragrid.org/ >>>>>>>>> jobmanager-fork >>>>>>>>> /bin/uname -a >>>>>>>>> GRAM Job submission failed because the connection to the >>>>>>>>> >>>>>>>>> >>> server >>> >>> >>>>> failed >>>>> >>>>> >>>>>>>>> (check host and port) (error code 12) >>>>>>>>> [cme@rocks-52 ~]$ grid-proxy-info >>>>>>>>> subject : /C=AU/O=APACGrid/OU=Monash University/CN=Colin >>>>>>>>> Enticott/CN=1087048434 >>>>>>>>> issuer : /C=AU/O=APACGrid/OU=Monash University/CN=Colin >>>>>>>>> >>>>>>>>> >>> Enticott >>> >>> >>>>>>>>> identity : /C=AU/O=APACGrid/OU=Monash University/CN=Colin >>>>>>>>> >>>>>>>>> >>> Enticott >>> >>> >>>>>>>>> type : Proxy draft (pre-RFC) compliant impersonation >>>>>>>>> >>>>>>>>> > proxy > > >>>>>>>>> strength : 512 bits >>>>>>>>> path : /home/cme/globus_proxy.APACGrid >>>>>>>>> timeleft : 836:30:26 (34.8 days) >>>>>>>>> [cme@rocks-52 ~]$ ssh tg-grid1.uc.teragrid.org >>>>>>>>> Warning: Permanently added 'tg-grid1.uc.teragrid.org' >>>>>>>>> >>>>>>>>> > (RSA) to > > >>> the >>> >>> >>>>>>>>> list of >>>>>>>>> known hosts. >>>>>>>>> Permission denied (external- >>>>>>>>> >>>>>>>>> >>>>> keyx,gssapi,publickey,gssapi,hostbased). >>>>> >>>>> >>>>>>>>> [cme@rocks-52 ~]$ >>>>>>>>> >>>>>>>>> That is the certificate that I registered with. I also >>>>>>>>> >>>>>>>>> > tried > > >>> the >>> >>> >>>>>>>>> ssh key >>>>>>>>> pair I put up on the pragma wiki. >>>>>>>>> >>>>>>>>> Any thoughts? >>>>>>>>> >>>>>>>>> Thanks, >>>>>>>>> Colin >>>>>>>>> >>>>>>>>> --- >>>>>>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 >>>>>>>>> Room H7.26, Level 7, Building H, Monash University >>>>>>>>> >>>>>>>>> > Caulfield > > >>> 3145, >>> >>> >>>>>>>>> Australia >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>>> -----Original Message----- >>>>>>>>>> From: JP Navarro [mailto:navarro@mcs.anl.gov] >>>>>>>>>> Sent: Friday, 1 December 2006 2:47 AM >>>>>>>>>> To: Colin Enticott >>>>>>>>>> Cc: zhengc@sdsc.edu; 'Terrence Martin'; gin-ops@ggf.org; >>>>>>>>>> >>>>>>>>>> >>> 'Oscar >>> >>> >>>>>>>>>> Koeroo'; >>>>>>>>>> gin-auth@ggf.org >>>>>>>>>> Subject: Re: start Savannah run >>>>>>>>>> >>>>>>>>>> Colin, >>>>>>>>>> >>>>>>>>>> You should be set to go on the UC/ANL TeraGrid cluster. >>>>>>>>>> >>>>>>>>>> GT4 Pre-WS GRAM: tg-grid1.uc.teragrid.org:2119 >>>>>>>>>> GT4 WS GRAM: tg-grid1.uc.teragrid.org:8443 (FORK, >>>>>>>>>> >>>>>>>>>> > PBS) > > >>>>>>>>>> GT4 GridFTP: tg-gridftp.uc.teragrid.org:2811 >>>>>>>>>> >>>>>>>>>> Regards, >>>>>>>>>> >>>>>>>>>> JP >>>>>>>>>> >>>>>>>>>> On Nov 30, 2006, at 2:43 AM, Colin Enticott wrote: >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>>>>>>> Thankyou everyone. >>>>>>>>>>> >>>>>>>>>>> I am now registered on the GIN VO (well, I appear here: >>>>>>>>>>> http://kuiken.nikhef.nl/gin.ggf.org/grid-mapfile). >>>>>>>>>>> >>>>>>>>>>> What is my next step? >>>>>>>>>>> >>>>>>>>>>> Thanks, >>>>>>>>>>> Colin >>>>>>>>>>> >>>>>>>>>>> --- >>>>>>>>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 >>>>>>>>>>> Room H7.26, Level 7, Building H, Monash University >>>>>>>>>>> >>>>>>>>>>> > Caulfield > > >>>>> 3145, >>>>> >>>>> >>>>>>>>>>> Australia >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>>> -----Original Message----- >>>>>>>>>>>> From: Cindy Zheng [mailto:zhengc@sdsc.edu] >>>>>>>>>>>> Sent: Thursday, 30 November 2006 11:59 AM >>>>>>>>>>>> To: 'Terrence Martin' >>>>>>>>>>>> Cc: 'JP Navarro'; gin-ops@ggf.org; 'Oscar Koeroo'; >>>>>>>>>>>> >>>>>>>>>>>> > 'Colin > > >>>>>>>>>>>> Enticott'; gin- >>>>>>>>>>>> auth@ggf.org >>>>>>>>>>>> Subject: RE: FW: start Savannah run >>>>>>>>>>>> >>>>>>>>>>>> Thank you, Terrence! >>>>>>>>>>>> We'll wait to hear from Colin when Colin finishes >>>>>>>>>>>> registering to gin vo. >>>>>>>>>>>> Cindy >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>>> -----Original Message----- >>>>>>>>>>>>> From: Terrence Martin >>>>>>>>>>>>> >>>>>>>>>>>>> > [mailto:tmartin@physics.ucsd.edu] > > >>>>>>>>>>>>> Sent: Wednesday, November 29, 2006 11:36 AM >>>>>>>>>>>>> To: Oscar Koeroo >>>>>>>>>>>>> Cc: zhengc@sdsc.edu; 'JP Navarro'; gin-ops@ggf.org; >>>>>>>>>>>>> >>>>>>>>>>>>> > 'Colin > > >>>>>>>>>>>>> Enticott'; gin-auth@ggf.org >>>>>>>>>>>>> Subject: Re: FW: start Savannah run >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>> Oscar Koeroo wrote: >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>>> Hi Terrence and Cindy, >>>>>>>>>>>>>> >>>>>>>>>>>>>> Getting new users up for registration on the GIN VO >>>>>>>>>>>>>> >>>>>>>>>>>>>> > is > > >>> easy. >>> >>> >>>>>>>>>>>>>> To be >>>>>>>>>>>>>> able to access the secured website and for >>>>>>>>>>>>>> >>>>>>>>>>>>>> > authentication > > >>>>> reasons >>>>> >>>>> >>>>>>>>>>>>>> during the registration process new users must have >>>>>>>>>>>>>> >>>>>>>>>>>>>> > their > > >>>>>>>>>>>>> certificate >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>>> loaded and ready in their webbrowser. The VOMS server >>>>>>>>>>>>>> >>>>>>>>>>>>>> > is > > >>>>>>>>>>>>> loaded with >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>>> all IGTF accredited CAs including the Fermilab kCA. >>>>>>>>>>>>>> >>>>>>>>>>>>>> Go to the website: >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>> https://kuiken.nikhef.nl:8443/voms/gin.ggf.org/ and >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>>> apply for a "New user registration". >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>> The usual VOMS configuration info is also available. >>>>>>>>>>>>>> >>>>>>>>>>>>>> > I > > >>>>>>>>>>>>> don't know what >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>>> you'll need to populate a GUMS server. This VOMS >>>>>>>>>>>>>> >>>>>>>>>>>>>> > server > > >>> is as >>> >>> >>>>> any >>>>> >>>>> >>>>>>>>>>>>>> other so I guess you can use your regular setup. >>>>>>>>>>>>>> In addition to the secured interface I've also made >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>> available >>> >>> >>>>> a >>>>> >>>>> >>>>>>>>>>>>>> non-secured way of grabbing a grid-mapfile. >>>>>>>>>>>>>> http://kuiken.nikhef.nl/gin.ggf.org/grid-mapfile >>>>>>>>>>>>>> There is also an RSS-feed pointing to the grid- >>>>>>>>>>>>>> >>>>>>>>>>>>>> > mapfile > > >>> and >>> >>> >>>>>>>>>>>>> the secured >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>>> interface at >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>> http://kuiken.nikhef.nl/gin.ggf.org/feed- >>>>>>>>>>>>> >>>>>>>>>>>>> > gin.ggf.org.xml > > >>>>>>>>>>>>>> Unfortunately I'm not aware of a clear guide. I do >>>>>>>>>>>>>> >>>>>>>>>>>>>> > know a > > >>>>>>>>>>>>>> guide for >>>>>>>>>>>>>> creating the packed certificate files that go into >>>>>>>>>>>>>> >>>>>>>>>>>>>> > your > > >>>>>>>>>>>>> browser if you >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>>> start from a two PEM formated files (certificate file >>>>>>>>>>>>>> >>>>>>>>>>>>>> > + > > >>>>>>>>>>>>>> private key >>>>>>>>>>>>>> file) that's at >>>>>>>>>>>>>> >>>>>>>>>>>>>> > http://certificate.nikhef.nl/info/browser > > >>>>>>>>>>>>>> Once a user has passed that stage, the registration >>>>>>>>>>>>>> >>>>>>>>>>>>>> > for > > >>> the >>> >>> >>>>>>>>>>>>> VO is as >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>>> trivial as any web-forum account registration. >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>> I am assuming this user already has a grid cert since >>>>>>>>>>>>> >>>>>>>>>>>>> > they > > >>>>>>>>>>>>> list a DN so >>>>>>>>>>>>> only VOMS registration is required. Once that is done >>>>>>>>>>>>> >>>>>>>>>>>>> >>> either I >>> >>> >>>>>>>>>>>>> run my >>>>>>>>>>>>> update of GUMS manually or in 720/2 minutes on average >>>>>>>>>>>>> >>>>>>>>>>>>> > the > > >>>>>>>>>>>>> user will be >>>>>>>>>>>>> automatically downloaded into my GUMS database. I >>>>>>>>>>>>> >>>>>>>>>>>>> > actually > > >>> do >>> >>> >>>>>>>>>>>>> not have >>>>>>>>>>>>> to do anything, but I can speed things up ever so >>>>>>>>>>>>> >>>>>>>>>>>>> > slightly > > >>> if >>> >>> >>>>> I >>>>> >>>>> >>>>>>>>>>>>> am in >>>>>>>>>>>>> the office and someone asks me to try refreshing gums. >>>>>>>>>>>>> >>>>>>>>>>>>> Terrence >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>>> Oscar >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>> Cindy Zheng wrote: >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>>> Sounds right, Terrence. Let me ask Oscar who has >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> > helped > > >>> me >>> >>> >>>>>>>>>>>>> with GIN >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>>>> VO before. >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> Hi, Oscar, >>>>>>>>>>>>>>> Could you advise Colin what need to be done to be >>>>>>>>>>>>>>> added in GIN VO? >>>>>>>>>>>>>>> I'm also cc'ing to gin-auth list. >>>>>>>>>>>>>>> If there is a guide for potential GIN users, please >>>>>>>>>>>>>>> let me know the url and I can link it to our GINOPS >>>>>>>>>>>>>>> page. >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> Thanks, >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> Cindy >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> -----Original Message----- >>>>>>>>>>>>>>>> From: Terrence Martin >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> > [mailto:tmartin@physics.ucsd.edu] > > >>>>> Sent: >>>>> >>>>> >>>>>>>>>>>>>>>> Tuesday, November 28, 2006 3:24 PM >>>>>>>>>>>>>>>> To: zhengc@sdsc.edu >>>>>>>>>>>>>>>> Cc: 'JP Navarro'; gin-ops@ggf.org; 'Colin Enticott' >>>>>>>>>>>>>>>> Subject: Re: FW: start Savannah run >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> The quickest and easiest way for me is to have him >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>> added to >>> >>> >>>>>>>>>>>>>>>> a VO. >>>>>>>>>>>>>>>> How easy is it to add him to the GIN VO? One in >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> > there I > > >>>>>>>>>>>>> can hit my >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>>>>> gums reload and he will be able to access UCSD as a >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> > GIN > > >>>>>>>>>>>>>>>> user. Any >>>>>>>>>>>>>>>> other approach requires me hacking his DN into my >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> > local > > >>>>>>>>>>>>> VO which I >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>>>>> prefer to avoid and does not help him with any >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> > other > > >>> site. >>> >>> >>>>>>>>>>>>>>>> Terrence >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> Cindy Zheng wrote: >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> Thanks, Terrence, for the quick reply! >>>>>>>>>>>>>>>>> Colin has not been a GIN user. >>>>>>>>>>>>>>>>> What do you think it's the best way to get colin >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>> access? >>> >>> >>>>>>>>>>>>>>>>> Cindy >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> -----Original Message----- >>>>>>>>>>>>>>>>>> From: Terrence Martin >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>> [mailto:tmartin@physics.ucsd.edu] >>> >>> >>>>> Sent: >>>>> >>>>> >>>>>>>>>>>>>>>>>> Tuesday, November 28, 2006 2:53 PM >>>>>>>>>>>>>>>>>> To: zhengc@sdsc.edu >>>>>>>>>>>>>>>>>> Cc: 'JP Navarro'; gin-ops@ggf.org >>>>>>>>>>>>>>>>>> Subject: Re: FW: start Savannah run >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> We only have a production cluster, but I should >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> > still > > >>>>>>>>>>>>> be >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>>>>> able to help. >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> I do not seem to have Colin in my GUMS database >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>> though >>> >>> >>>>>>>>>>>>> for >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>>>>> GIN or any >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> other VO. Should he be downloaded with GIN's >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> > users? > > >>>>>>>>>>>>>>>>>> Terrence >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Cindy Zheng wrote: >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> Hi, JP and Terrence, >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> Could you help Colin to get ready to run >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> > Savannah > > >>>>>>>>>>>>>>>>>>> application on your GIN testbed clusters? >>>>>>>>>>>>>>>>>>> You can find Colin's user info at >>>>>>>>>>>>>>>>>>> http://wiki.pragma- >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>> grid.net/index.php?title=ColinDetails >>> >>> >>>>>>>>>>>>>>>>>>> If you need more info or action from Colin, or >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> > have > > >>>>>>>>>>>>> any questions >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> for Colin or me, please let us know. >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> Thank you very much! >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> Cindy >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> -----Original Message----- >>>>>>>>>>>>>>>>>>> From: Cindy Zheng [mailto:zhengc@sdsc.edu] Sent: >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>> Tuesday, >>>>> >>>>> >>>>>>>>>>>>>>>>>>> November 28, 2006 2:31 PM >>>>>>>>>>>>>>>>>>> To: 'gin-ops@ggf.org' >>>>>>>>>>>>>>>>>>> Subject: start Savannah run >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> Dear all, >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> Thanks for all the people involved to help make >>>>>>>>>>>>>>>>>>> TDDFT application run and GIN testbed monitoring >>>>>>>>>>>>>>>>>>> very fruitful experiments! We have learned a lot >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> > and > > >>>>> have >>>>> >>>>> >>>>>>>>>>>>>>>>>>> presented our learnings at OGF and SC06. >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> Let's continue our collaborative effort with our >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>> plan >>> >>> >>>>>>>>>>>>> - start our >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> next experiment with Savannah >>>>>>>>>>>>>>>>>>> fire simulation - a data-intensive application, >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> > to > > >>>>>>>>>>>>> explore data >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> related interoperation issues. >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> Colin Enticott at Monash University of Australia >>>>>>>>>>>>>>>>>>> is the lead driver. Colin has documented the >>>>>>>>>>>>>>>>>>> introduction and requirements of this >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> > application at > > >>>>>>>>>>>>>>>>>>> http://wiki.pragma- >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> > grid.net/index.php?title=Savannah > > >>>>>>>>>>>>>>>>>>> or go to >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> http://forge.gridforum.org/sf/wiki/do/viewPage/ >>>>>>>>>>>>>>>>>> projects.gin/wi >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> ki/GinOps >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> click "Savannah" under "Applications", >>>>>>>>>>>>>>>>>> where "first Savannah experiment" is refering to >>>>>>>>>>>>>>>>>> a previous experiment in PRAGMA testbed. The >>>>>>>>>>>>>>>>>> "second Savannah experiment" is the one for GIN >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>> testbed. >>> >>> >>>>>>>>>>>>>>>>>> We like to run this application on all Grids in >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> > GIN > > >>>>>>>>>>>>> testbed, but >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> in 2 steps. First, we will run it on >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>> PRAGMA/TeraGrid/OSG - since >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> these should be relatively easier to do. We like >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> > to > > >>> get >>> >>> >>>>>>>>>>>>> this done >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> before the year end. >>>>>>>>>>>>>>>>>> The next step, Colin will work with EGEE and >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>> Nordugrid >>> >>> >>>>>>>>>>>>>>>>>> to develop possible solutions, to enable >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>> interoperation >>> >>> >>>>>>>>>>>>>>>>>> and to include all 5 Grids in the run. >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Thanks in advance for your continued help with >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> > this! > > >>>>>>>>>>>>>>>>>> Cindy >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>> -- >>>>>>>> gin-auth mailing list >>>>>>>> gin-auth@ogf.org >>>>>>>> http://www.ogf.org/mailman/listinfo/gin-auth >>>>>>>> >>>>>>>> >>>>>> -- >>>>>> gin-ops mailing list >>>>>> gin-ops@ogf.org >>>>>> http://www.ogf.org/mailman/listinfo/gin-ops >>>>>> >>>>>>
participants (1)
-
Colin Enticott