Re: [gin-ops] [gin-auth] start Savannah run

First of all, Happy new year everyone! Thankyou for your help last year. I have two quick questions: I am now receiving a "certificate expired" message from tg-grid1.uc.teragrid.org. My certificate still works elsewhere. Is it the server's certificate? And on osg-gw-2.t2.ucsd.edu, I need to write ~80GB of data for the experiment. Which directory can I use? Thanks, Colin --- Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 Room H7.26, Level 7, Building H, Monash University Caulfield 3145, Australia > -----Original Message----- > From: Terrence Martin [mailto:tmartin@physics.ucsd.edu] > Sent: Tuesday, 5 December 2006 5:41 PM > To: Colin Enticott > Cc: 'Yoshio Tanaka'; D.Bannon@vpac.org; navarro@mcs.anl.gov; gin- > auth@ggf.org; gin-ops@ggf.org > Subject: Re: [gin-ops] [gin-auth] start Savannah run > > colin, if you want to try logging into > > colin@uaf-1.t2.ucsd.edu > > run > > source /data/vdt/setup.sh > > then grab a cert with grid-proxy-init and give it a try. > > It is the machine that all my users use to submit to my OSG site. > > Terrence > > > > Colin Enticott wrote: > > Hi Yoshio, > > > > I've tried it from 3 servers. On the server I have root access on, I > just > > manually synced and I am still having the problem. I am wondering if > the CA > > certificate I sent is okay. It's the APAC CA files we use here on our > > servers. > > > > On the Pragma resources, I have been using my old certificate (as > initially > > there was teething problems with the new APAC CA). Can you update your > > server with the details below and I'll give it a try: > > > > http://wiki.pragma-grid.net/index.php?title=ColinDetails > > > > Thanks, > > Colin > > > > --- > > Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 > > Room H7.26, Level 7, Building H, Monash University Caulfield 3145, > Australia > > > > > > > >> -----Original Message----- > >> From: Yoshio Tanaka [mailto:yoshio.tanaka@aist.go.jp] > >> Sent: Tuesday, 5 December 2006 4:51 PM > >> To: Colin.Enticott@csse.monash.edu.au > >> Cc: D.Bannon@vpac.org; tmartin@physics.ucsd.edu; navarro@mcs.anl.gov; > gin- > >> auth@ggf.org; gin-ops@ggf.org; yoshio.tanaka@aist.go.jp > >> Subject: Re: [gin-ops] [gin-auth] start Savannah run > >> > >> > >> Hi Colin, > >> > >> Are you able to submit jobs to PRAGMA machines? > >> If yes, the APAC CA on your machine should have no problem. > >> > >> One point that I would like to confirm is... > >> Is the time of your client machine correct? Do you use an NTP server > >> for synchronize the time? > >> > >> Thanks, > >> > >> -- > >> Yoshio Tanaka (yoshio.tanaka@aist.go.jp) > >> http://ninf.apgrid.org/ > >> http://www.apgridpma.org/ > >> > >> > >> From: Colin Enticott <Colin.Enticott@csse.monash.edu.au> > >> Subject: RE: [gin-ops] [gin-auth] start Savannah run > >> Date: Tue, 05 Dec 2006 16:38:40 +1100 > >> Message-ID: <01df01c7182f$9f59a3d0$1e46c282@nail> > >> > >> > >>> Hi Yoshio, > >>> > >>> I am unable to log in. But below is what JP sent me. Any ideas on > what > >>> > >> it > >> > >>> means? > >>> > >>> Doing a Google I find: > >>> The error might arise from an expired certificate or when trying to > >>> > >> restore > >> > >>> certification expiration date and job are in some state in the Grid > >>> execution list. > >>> > >>> I guess it might be a problem with the APAC CA on your machines? Was > >>> > >> the CA > >> > >>> set up previously? Or did you use the ones on my info page? (This > >>> > >> leaves > >> > >>> the question if I packaged them correctly). > >>> > >>> > >>> On Fri, 2006-12-01 at 12:34 -0600, JP Navarro wrote: > >>> > >>> TIME: Thu Nov 30 18:49:42 2006 > >>> PID: 9608 -- Notice: 0: GATEKEEPER_ACCT_FD=5 (/var/globus/prews- > >>> gram-4.0.1-r3-i1/log/globus-gatekeeper.log) > >>> TIME: Thu Nov 30 18:49:42 2006 > >>> PID: 9608 -- Notice: 6: Got connection 198.202.88.52 at Thu Nov 30 > >>> 18:49:42 2006 > >>> > >>> Failed reading length 0 > >>> GSS authentication failure > >>> globus_gss_assist token :3: read failure: Connection closed > >>> Failure: GSS failed Major:01090000 Minor:00000000 Token:00000003 > >>> > >>> TIME: Thu Nov 30 18:49:42 2006 > >>> PID: 9608 -- Failure: GSS failed Major:01090000 Minor:00000000 > >>> Token:00000003 > >>> > >>> > >>> Colin > >>> > >>> --- > >>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 > >>> Room H7.26, Level 7, Building H, Monash University Caulfield 3145, > >>> > >> Australia > >> > >>> > >>>> -----Original Message----- > >>>> From: Yoshio Tanaka [mailto:yoshio.tanaka@aist.go.jp] > >>>> Sent: Tuesday, 5 December 2006 12:51 PM > >>>> To: Colin.Enticott@csse.monash.edu.au > >>>> Cc: D.Bannon@vpac.org; tmartin@physics.ucsd.edu; navarro@mcs.anl.gov; > >>>> > >> gin- > >> > >>>> auth@ggf.org; gin-ops@ggf.org; yoshio.tanaka@aist.go.jp > >>>> Subject: Re: [gin-ops] [gin-auth] start Savannah run > >>>> > >>>> > >>>> Hi Colin, > >>>> > >>>> If you can login to these machines, see the globus gatekeeper's log > >>>> > >> at: > >> > >>>> ${GLOBUS_LOCATION}/var/globus-gatekeeper.log > >>>> > >>>> You may find error logs such as no entry in mapfile and failure in > >>>> tracing cert chain. > >>>> > >>>> Regards, > >>>> > >>>> -- > >>>> Yoshio Tanaka (yoshio.tanaka@aist.go.jp) > >>>> http://ninf.apgrid.org/ > >>>> http://www.apgridpma.org/ > >>>> > >>>> From: Colin Enticott <Colin.Enticott@csse.monash.edu.au> > >>>> Subject: RE: [gin-ops] [gin-auth] start Savannah run > >>>> Date: Tue, 05 Dec 2006 12:24:42 +1100 > >>>> Message-ID: <01c001c7180c$24c430e0$1e46c282@nail> > >>>> > >>>> > >>>>> Thanks Yoshio, > >>>>> > >>>>> So it looks like authentication issues as I can connect to port 2119 > >>>>> > >> on > >> > >>>> both > >>>> > >>>>> hosts: > >>>>> > >>>>> cme@edda$ globusrun -a -r tg-grid1.uc.teragrid.org > >>>>> > >>>>> GRAM Authentication test failure: connecting to the job manager > >>>>> > >> failed. > >> > >>>>> Possible reasons: job terminated, invalid job contact, network > >>>>> > >> problems, > >> > >>>> ... > >>>> > >>>>> cme@edda$ globusrun -a -r osg-gw-2.t2.ucsd.edu > >>>>> > >>>>> GRAM Authentication test failure: connecting to the job manager > >>>>> > >> failed. > >> > >>>>> Possible reasons: job terminated, invalid job contact, network > >>>>> > >> problems, > >> > >>>> ... > >>>> > >>>>> Regards, > >>>>> Colin > >>>>> > >>>>> --- > >>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 > >>>>> Room H7.26, Level 7, Building H, Monash University Caulfield 3145, > >>>>> > >>>> Australia > >>>> > >>>>> > >>>>>> -----Original Message----- > >>>>>> From: Yoshio Tanaka [mailto:yoshio.tanaka@aist.go.jp] > >>>>>> Sent: Tuesday, 5 December 2006 12:21 PM > >>>>>> To: Colin.Enticott@csse.monash.edu.au > >>>>>> Cc: D.Bannon@vpac.org; tmartin@physics.ucsd.edu; > >>>>>> > >> navarro@mcs.anl.gov; > >> > >>>> gin- > >>>> > >>>>>> auth@ggf.org; gin-ops@ggf.org; yoshio.tanaka@aist.go.jp > >>>>>> Subject: Re: [gin-ops] [gin-auth] start Savannah run > >>>>>> > >>>>>> > >>>>>> Hi Colin, > >>>>>> > >>>>>> Please test the authentication by the following command: > >>>>>> > >>>>>> % globusrun -a -r osg-gw-2.t2.ucsd.edu > >>>>>> > >>>>>> % globusrun -a -r tg-grid1.uc.teragrid.org > >>>>>> > >>>>>> Thanks, > >>>>>> > >>>>>> -- > >>>>>> Yoshio Tanaka (yoshio.tanaka@aist.go.jp) > >>>>>> http://ninf.apgrid.org/ > >>>>>> http://www.apgridpma.org/ > >>>>>> > >>>>>> > >>>>>> From: Colin Enticott <Colin.Enticott@csse.monash.edu.au> > >>>>>> Subject: Re: [gin-ops] [gin-auth] start Savannah run > >>>>>> Date: Tue, 05 Dec 2006 11:44:05 +1100 > >>>>>> Message-ID: <017401c71806$77cf6760$1e46c282@nail> > >>>>>> > >>>>>> > >>>>>>> Thanks David, > >>>>>>> > >>>>>>> But still the same problem. As you can see, my certificate > >>>>>>> > >> still > >> > >>>> works > >>>> > >>>>>> on > >>>>>> > >>>>>>> the vpac host and there is definitely no firewall in the way: > >>>>>>> > >>>>>>> cme@edda$ grid-proxy-init -cert usercert.pem.APACGrid -key > >>>>>>> userkey.pem.APACGrid > >>>>>>> Your identity: /C=AU/O=APACGrid/OU=Monash University/CN=Colin > >>>>>>> > >>>> Enticott > >>>> > >>>>>>> Enter GRID pass phrase for this identity: > >>>>>>> Creating proxy ................................... Done > >>>>>>> Your proxy is valid until: Tue Dec 5 23:28:47 2006 > >>>>>>> cme@edda$ globus-job-run osg-gw-2.t2.ucsd.edu/jobmanager-fork > >>>>>>> > >>>> /bin/uname > >>>> > >>>>>> -a > >>>>>> > >>>>>>> GRAM Job submission failed because the connection to the server > >>>>>>> > >>>> failed > >>>> > >>>>>>> (check host and port) (error code 12) > >>>>>>> cme@edda$ globus-job-run tg-grid1.uc.teragrid.org/jobmanager- > >>>>>>> > >> fork > >> > >>>>>> /bin/uname > >>>>>> > >>>>>>> -a > >>>>>>> GRAM Job submission failed because the connection to the server > >>>>>>> > >>>> failed > >>>> > >>>>>>> (check host and port) (error code 12) > >>>>>>> cme@edda$ globus-job-run ng1.vpac.org/jobmanager-fork /bin/uname > >>>>>>> > >> -a > >> > >>>>>>> Linux ng1.vpac.org 2.6.16.29-xen #4 SMP Sun Oct 15 13:20:46 BST > >>>>>>> > >> 2006 > >> > >>>>>> i686 > >>>>>> > >>>>>>> i686 i386 GNU/Linux > >>>>>>> cme@edda$ telnet tg-grid1.uc.teragrid.org 2119 > >>>>>>> Trying 192.5.198.225... > >>>>>>> Connected to tg-grid1.uc.teragrid.org. > >>>>>>> Escape character is '^]'. > >>>>>>> > >>>>>>> > >>>>>>> Connection closed by foreign host. > >>>>>>> cme@edda$ telnet osg-gw-2.t2.ucsd.edu 2119 > >>>>>>> Trying 137.110.141.17... > >>>>>>> Connected to osg-gw-2.t2.ucsd.edu. > >>>>>>> Escape character is '^]'. > >>>>>>> > >>>>>>> > >>>>>>> Connection closed by foreign host. > >>>>>>> > >>>>>>> > >>>>>>> Any other thoughts from anyone? > >>>>>>> > >>>>>>> Thanks, > >>>>>>> Colin > >>>>>>> > >>>>>>> --- > >>>>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 > >>>>>>> Room H7.26, Level 7, Building H, Monash University Caulfield > >>>>>>> > >> 3145, > >> > >>>>>> Australia > >>>>>> > >>>>>>> > >>>>>>>> -----Original Message----- > >>>>>>>> From: David Bannon [mailto:D.Bannon@vpac.org] > >>>>>>>> Sent: Monday, 4 December 2006 6:08 PM > >>>>>>>> To: JP Navarro > >>>>>>>> Cc: Colin Enticott; gin-auth@ggf.org; gin-ops@ggf.org; > >>>>>>>> > >> 'Terrence > >> > >>>>>> Martin' > >>>>>> > >>>>>>>> Subject: Re: [gin-auth] start Savannah run > >>>>>>>> > >>>>>>>> > >>>>>>>> Colin, you can run as a Gin user on any of the VPAC machines, > >>>>>>>> > >> my > >> > >>>> be > >>>> > >>>>>>>> easier to debug.... > >>>>>>>> > >>>>>>>> David > >>>>>>>> > >>>>>>>> > >>>>>>>> On Fri, 2006-12-01 at 12:34 -0600, JP Navarro wrote: > >>>>>>>> > >>>>>>>>> Colin, > >>>>>>>>> > >>>>>>>>> The error in the logs is below. Not sure what it means. > >>>>>>>>> > >> Could > >> > >>>> you > >>>> > >>>>>>>>> try this > >>>>>>>>> test again from your SDSC TeraGrid account so we can rule > >>>>>>>>> > >> out > >> > >>>>>>>>> software and > >>>>>>>>> firewall issues? > >>>>>>>>> > >>>>>>>>> Thanks, > >>>>>>>>> > >>>>>>>>> JP > >>>>>>>>> > >>>>>>>>> TIME: Thu Nov 30 18:49:42 2006 > >>>>>>>>> PID: 9608 -- Notice: 0: GATEKEEPER_ACCT_FD=5 > >>>>>>>>> > >>>> (/var/globus/prews- > >>>> > >>>>>>>>> gram-4.0.1-r3-i1/log/globus-gatekeeper.log) > >>>>>>>>> TIME: Thu Nov 30 18:49:42 2006 > >>>>>>>>> PID: 9608 -- Notice: 6: Got connection 198.202.88.52 at > >>>>>>>>> > >> Thu > >> > >>>> Nov 30 > >>>> > >>>>>>>>> 18:49:42 2006 > >>>>>>>>> > >>>>>>>>> Failed reading length 0 > >>>>>>>>> GSS authentication failure > >>>>>>>>> globus_gss_assist token :3: read failure: Connection > >>>>>>>>> > >> closed > >> > >>>>>>>>> Failure: GSS failed Major:01090000 Minor:00000000 > >>>>>>>>> > >> Token:00000003 > >> > >>>>>>>>> TIME: Thu Nov 30 18:49:42 2006 > >>>>>>>>> PID: 9608 -- Failure: GSS failed Major:01090000 > >>>>>>>>> > >> Minor:00000000 > >> > >>>>>>>>> Token:00000003 > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> On Nov 30, 2006, at 7:05 PM, Colin Enticott wrote: > >>>>>>>>> > >>>>>>>>> > >>>>>>>>>> Thanks JP, > >>>>>>>>>> > >>>>>>>>>> But I am running into some problems. I've tried both from > >>>>>>>>>> > >> our > >> > >>>>>>>>>> server and > >>>>>>>>>> rocks-52 and this is what I get: > >>>>>>>>>> [cme@rocks-52 ~]$ globus-job-run tg-grid1.uc.teragrid.org/ > >>>>>>>>>> jobmanager-fork > >>>>>>>>>> /bin/uname -a > >>>>>>>>>> GRAM Job submission failed because the connection to the > >>>>>>>>>> > >>>> server > >>>> > >>>>>> failed > >>>>>> > >>>>>>>>>> (check host and port) (error code 12) > >>>>>>>>>> [cme@rocks-52 ~]$ grid-proxy-info > >>>>>>>>>> subject : /C=AU/O=APACGrid/OU=Monash University/CN=Colin > >>>>>>>>>> Enticott/CN=1087048434 > >>>>>>>>>> issuer : /C=AU/O=APACGrid/OU=Monash University/CN=Colin > >>>>>>>>>> > >>>> Enticott > >>>> > >>>>>>>>>> identity : /C=AU/O=APACGrid/OU=Monash University/CN=Colin > >>>>>>>>>> > >>>> Enticott > >>>> > >>>>>>>>>> type : Proxy draft (pre-RFC) compliant impersonation > >>>>>>>>>> > >> proxy > >> > >>>>>>>>>> strength : 512 bits > >>>>>>>>>> path : /home/cme/globus_proxy.APACGrid > >>>>>>>>>> timeleft : 836:30:26 (34.8 days) > >>>>>>>>>> [cme@rocks-52 ~]$ ssh tg-grid1.uc.teragrid.org > >>>>>>>>>> Warning: Permanently added 'tg-grid1.uc.teragrid.org' > >>>>>>>>>> > >> (RSA) to > >> > >>>> the > >>>> > >>>>>>>>>> list of > >>>>>>>>>> known hosts. > >>>>>>>>>> Permission denied (external- > >>>>>>>>>> > >>>>>> keyx,gssapi,publickey,gssapi,hostbased). > >>>>>> > >>>>>>>>>> [cme@rocks-52 ~]$ > >>>>>>>>>> > >>>>>>>>>> That is the certificate that I registered with. I also > >>>>>>>>>> > >> tried > >> > >>>> the > >>>> > >>>>>>>>>> ssh key > >>>>>>>>>> pair I put up on the pragma wiki. > >>>>>>>>>> > >>>>>>>>>> Any thoughts? > >>>>>>>>>> > >>>>>>>>>> Thanks, > >>>>>>>>>> Colin > >>>>>>>>>> > >>>>>>>>>> --- > >>>>>>>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 > >>>>>>>>>> Room H7.26, Level 7, Building H, Monash University > >>>>>>>>>> > >> Caulfield > >> > >>>> 3145, > >>>> > >>>>>>>>>> Australia > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>>> -----Original Message----- > >>>>>>>>>>> From: JP Navarro [mailto:navarro@mcs.anl.gov] > >>>>>>>>>>> Sent: Friday, 1 December 2006 2:47 AM > >>>>>>>>>>> To: Colin Enticott > >>>>>>>>>>> Cc: zhengc@sdsc.edu; 'Terrence Martin'; gin-ops@ggf.org; > >>>>>>>>>>> > >>>> 'Oscar > >>>> > >>>>>>>>>>> Koeroo'; > >>>>>>>>>>> gin-auth@ggf.org > >>>>>>>>>>> Subject: Re: start Savannah run > >>>>>>>>>>> > >>>>>>>>>>> Colin, > >>>>>>>>>>> > >>>>>>>>>>> You should be set to go on the UC/ANL TeraGrid cluster. > >>>>>>>>>>> > >>>>>>>>>>> GT4 Pre-WS GRAM: tg-grid1.uc.teragrid.org:2119 > >>>>>>>>>>> GT4 WS GRAM: tg-grid1.uc.teragrid.org:8443 (FORK, > >>>>>>>>>>> > >> PBS) > >> > >>>>>>>>>>> GT4 GridFTP: tg-gridftp.uc.teragrid.org:2811 > >>>>>>>>>>> > >>>>>>>>>>> Regards, > >>>>>>>>>>> > >>>>>>>>>>> JP > >>>>>>>>>>> > >>>>>>>>>>> On Nov 30, 2006, at 2:43 AM, Colin Enticott wrote: > >>>>>>>>>>> > >>>>>>>>>>> > >>>>>>>>>>>> Thankyou everyone. > >>>>>>>>>>>> > >>>>>>>>>>>> I am now registered on the GIN VO (well, I appear here: > >>>>>>>>>>>> http://kuiken.nikhef.nl/gin.ggf.org/grid-mapfile). > >>>>>>>>>>>> > >>>>>>>>>>>> What is my next step? > >>>>>>>>>>>> > >>>>>>>>>>>> Thanks, > >>>>>>>>>>>> Colin > >>>>>>>>>>>> > >>>>>>>>>>>> --- > >>>>>>>>>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 > >>>>>>>>>>>> Room H7.26, Level 7, Building H, Monash University > >>>>>>>>>>>> > >> Caulfield > >> > >>>>>> 3145, > >>>>>> > >>>>>>>>>>>> Australia > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>>> -----Original Message----- > >>>>>>>>>>>>> From: Cindy Zheng [mailto:zhengc@sdsc.edu] > >>>>>>>>>>>>> Sent: Thursday, 30 November 2006 11:59 AM > >>>>>>>>>>>>> To: 'Terrence Martin' > >>>>>>>>>>>>> Cc: 'JP Navarro'; gin-ops@ggf.org; 'Oscar Koeroo'; > >>>>>>>>>>>>> > >> 'Colin > >> > >>>>>>>>>>>>> Enticott'; gin- > >>>>>>>>>>>>> auth@ggf.org > >>>>>>>>>>>>> Subject: RE: FW: start Savannah run > >>>>>>>>>>>>> > >>>>>>>>>>>>> Thank you, Terrence! > >>>>>>>>>>>>> We'll wait to hear from Colin when Colin finishes > >>>>>>>>>>>>> registering to gin vo. > >>>>>>>>>>>>> Cindy > >>>>>>>>>>>>> > >>>>>>>>>>>>> > >>>>>>>>>>>>>> -----Original Message----- > >>>>>>>>>>>>>> From: Terrence Martin > >>>>>>>>>>>>>> > >> [mailto:tmartin@physics.ucsd.edu] > >> > >>>>>>>>>>>>>> Sent: Wednesday, November 29, 2006 11:36 AM > >>>>>>>>>>>>>> To: Oscar Koeroo > >>>>>>>>>>>>>> Cc: zhengc@sdsc.edu; 'JP Navarro'; gin-ops@ggf.org; > >>>>>>>>>>>>>> > >> 'Colin > >> > >>>>>>>>>>>>>> Enticott'; gin-auth@ggf.org > >>>>>>>>>>>>>> Subject: Re: FW: start Savannah run > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> Oscar Koeroo wrote: > >>>>>>>>>>>>>> > >>>>>>>>>>>>>>> Hi Terrence and Cindy, > >>>>>>>>>>>>>>> > >>>>>>>>>>>>>>> Getting new users up for registration on the GIN VO > >>>>>>>>>>>>>>> > >> is > >> > >>>> easy. > >>>> > >>>>>>>>>>>>>>> To be > >>>>>>>>>>>>>>> able to access the secured website and for > >>>>>>>>>>>>>>> > >> authentication > >> > >>>>>> reasons > >>>>>> > >>>>>>>>>>>>>>> during the registration process new users must have > >>>>>>>>>>>>>>> > >> their > >> > >>>>>>>>>>>>>> certificate > >>>>>>>>>>>>>> > >>>>>>>>>>>>>>> loaded and ready in their webbrowser. The VOMS server > >>>>>>>>>>>>>>> > >> is > >> > >>>>>>>>>>>>>> loaded with > >>>>>>>>>>>>>> > >>>>>>>>>>>>>>> all IGTF accredited CAs including the Fermilab kCA. > >>>>>>>>>>>>>>> > >>>>>>>>>>>>>>> Go to the website: > >>>>>>>>>>>>>>> > >>>>>>>>>>>>>> https://kuiken.nikhef.nl:8443/voms/gin.ggf.org/ and > >>>>>>>>>>>>>> > >>>>>>>>>>>>>>> apply for a "New user registration". > >>>>>>>>>>>>>>> > >>>>>>>>>>>>>>> > >>>>>>>>>>>>>>> The usual VOMS configuration info is also available. > >>>>>>>>>>>>>>> > >> I > >> > >>>>>>>>>>>>>> don't know what > >>>>>>>>>>>>>> > >>>>>>>>>>>>>>> you'll need to populate a GUMS server. This VOMS > >>>>>>>>>>>>>>> > >> server > >> > >>>> is as > >>>> > >>>>>> any > >>>>>> > >>>>>>>>>>>>>>> other so I guess you can use your regular setup. > >>>>>>>>>>>>>>> In addition to the secured interface I've also made > >>>>>>>>>>>>>>> > >>>> available > >>>> > >>>>>> a > >>>>>> > >>>>>>>>>>>>>>> non-secured way of grabbing a grid-mapfile. > >>>>>>>>>>>>>>> http://kuiken.nikhef.nl/gin.ggf.org/grid-mapfile > >>>>>>>>>>>>>>> There is also an RSS-feed pointing to the grid- > >>>>>>>>>>>>>>> > >> mapfile > >> > >>>> and > >>>> > >>>>>>>>>>>>>> the secured > >>>>>>>>>>>>>> > >>>>>>>>>>>>>>> interface at > >>>>>>>>>>>>>>> > >>>>>>>>>>>>>> http://kuiken.nikhef.nl/gin.ggf.org/feed- > >>>>>>>>>>>>>> > >> gin.ggf.org.xml > >> > >>>>>>>>>>>>>>> Unfortunately I'm not aware of a clear guide. I do > >>>>>>>>>>>>>>> > >> know a > >> > >>>>>>>>>>>>>>> guide for > >>>>>>>>>>>>>>> creating the packed certificate files that go into > >>>>>>>>>>>>>>> > >> your > >> > >>>>>>>>>>>>>> browser if you > >>>>>>>>>>>>>> > >>>>>>>>>>>>>>> start from a two PEM formated files (certificate file > >>>>>>>>>>>>>>> > >> + > >> > >>>>>>>>>>>>>>> private key > >>>>>>>>>>>>>>> file) that's at > >>>>>>>>>>>>>>> > >> http://certificate.nikhef.nl/info/browser > >> > >>>>>>>>>>>>>>> Once a user has passed that stage, the registration > >>>>>>>>>>>>>>> > >> for > >> > >>>> the > >>>> > >>>>>>>>>>>>>> VO is as > >>>>>>>>>>>>>> > >>>>>>>>>>>>>>> trivial as any web-forum account registration. > >>>>>>>>>>>>>>> > >>>>>>>>>>>>>>> > >>>>>>>>>>>>>> I am assuming this user already has a grid cert since > >>>>>>>>>>>>>> > >> they > >> > >>>>>>>>>>>>>> list a DN so > >>>>>>>>>>>>>> only VOMS registration is required. Once that is done > >>>>>>>>>>>>>> > >>>> either I > >>>> > >>>>>>>>>>>>>> run my > >>>>>>>>>>>>>> update of GUMS manually or in 720/2 minutes on average > >>>>>>>>>>>>>> > >> the > >> > >>>>>>>>>>>>>> user will be > >>>>>>>>>>>>>> automatically downloaded into my GUMS database. I > >>>>>>>>>>>>>> > >> actually > >> > >>>> do > >>>> > >>>>>>>>>>>>>> not have > >>>>>>>>>>>>>> to do anything, but I can speed things up ever so > >>>>>>>>>>>>>> > >> slightly > >> > >>>> if > >>>> > >>>>>> I > >>>>>> > >>>>>>>>>>>>>> am in > >>>>>>>>>>>>>> the office and someone asks me to try refreshing gums. > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> Terrence > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> > >>>>>>>>>>>>>>> Oscar > >>>>>>>>>>>>>>> > >>>>>>>>>>>>>>> > >>>>>>>>>>>>>>> > >>>>>>>>>>>>>>> Cindy Zheng wrote: > >>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> Sounds right, Terrence. Let me ask Oscar who has > >>>>>>>>>>>>>>>> > >> helped > >> > >>>> me > >>>> > >>>>>>>>>>>>>> with GIN > >>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> VO before. > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> Hi, Oscar, > >>>>>>>>>>>>>>>> Could you advise Colin what need to be done to be > >>>>>>>>>>>>>>>> added in GIN VO? > >>>>>>>>>>>>>>>> I'm also cc'ing to gin-auth list. > >>>>>>>>>>>>>>>> If there is a guide for potential GIN users, please > >>>>>>>>>>>>>>>> let me know the url and I can link it to our GINOPS > >>>>>>>>>>>>>>>> page. > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> Thanks, > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> Cindy > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> -----Original Message----- > >>>>>>>>>>>>>>>>> From: Terrence Martin > >>>>>>>>>>>>>>>>> > >> [mailto:tmartin@physics.ucsd.edu] > >> > >>>>>> Sent: > >>>>>> > >>>>>>>>>>>>>>>>> Tuesday, November 28, 2006 3:24 PM > >>>>>>>>>>>>>>>>> To: zhengc@sdsc.edu > >>>>>>>>>>>>>>>>> Cc: 'JP Navarro'; gin-ops@ggf.org; 'Colin Enticott' > >>>>>>>>>>>>>>>>> Subject: Re: FW: start Savannah run > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> The quickest and easiest way for me is to have him > >>>>>>>>>>>>>>>>> > >>>> added to > >>>> > >>>>>>>>>>>>>>>>> a VO. > >>>>>>>>>>>>>>>>> How easy is it to add him to the GIN VO? One in > >>>>>>>>>>>>>>>>> > >> there I > >> > >>>>>>>>>>>>>> can hit my > >>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> gums reload and he will be able to access UCSD as a > >>>>>>>>>>>>>>>>> > >> GIN > >> > >>>>>>>>>>>>>>>>> user. Any > >>>>>>>>>>>>>>>>> other approach requires me hacking his DN into my > >>>>>>>>>>>>>>>>> > >> local > >> > >>>>>>>>>>>>>> VO which I > >>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> prefer to avoid and does not help him with any > >>>>>>>>>>>>>>>>> > >> other > >> > >>>> site. > >>>> > >>>>>>>>>>>>>>>>> Terrence > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> Cindy Zheng wrote: > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>> Thanks, Terrence, for the quick reply! > >>>>>>>>>>>>>>>>>> Colin has not been a GIN user. > >>>>>>>>>>>>>>>>>> What do you think it's the best way to get colin > >>>>>>>>>>>>>>>>>> > >>>> access? > >>>> > >>>>>>>>>>>>>>>>>> Cindy > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> -----Original Message----- > >>>>>>>>>>>>>>>>>>> From: Terrence Martin > >>>>>>>>>>>>>>>>>>> > >>>> [mailto:tmartin@physics.ucsd.edu] > >>>> > >>>>>> Sent: > >>>>>> > >>>>>>>>>>>>>>>>>>> Tuesday, November 28, 2006 2:53 PM > >>>>>>>>>>>>>>>>>>> To: zhengc@sdsc.edu > >>>>>>>>>>>>>>>>>>> Cc: 'JP Navarro'; gin-ops@ggf.org > >>>>>>>>>>>>>>>>>>> Subject: Re: FW: start Savannah run > >>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> We only have a production cluster, but I should > >>>>>>>>>>>>>>>>>>> > >> still > >> > >>>>>>>>>>>>>> be > >>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> able to help. > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> I do not seem to have Colin in my GUMS database > >>>>>>>>>>>>>>>>>>> > >>>> though > >>>> > >>>>>>>>>>>>>> for > >>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> GIN or any > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> other VO. Should he be downloaded with GIN's > >>>>>>>>>>>>>>>>>>> > >> users? > >> > >>>>>>>>>>>>>>>>>>> Terrence > >>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> Cindy Zheng wrote: > >>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> Hi, JP and Terrence, > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> Could you help Colin to get ready to run > >>>>>>>>>>>>>>>>>>>> > >> Savannah > >> > >>>>>>>>>>>>>>>>>>>> application on your GIN testbed clusters? > >>>>>>>>>>>>>>>>>>>> You can find Colin's user info at > >>>>>>>>>>>>>>>>>>>> http://wiki.pragma- > >>>>>>>>>>>>>>>>>>>> > >>>> grid.net/index.php?title=ColinDetails > >>>> > >>>>>>>>>>>>>>>>>>>> If you need more info or action from Colin, or > >>>>>>>>>>>>>>>>>>>> > >> have > >> > >>>>>>>>>>>>>> any questions > >>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> for Colin or me, please let us know. > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> Thank you very much! > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> Cindy > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> -----Original Message----- > >>>>>>>>>>>>>>>>>>>> From: Cindy Zheng [mailto:zhengc@sdsc.edu] Sent: > >>>>>>>>>>>>>>>>>>>> > >>>>>> Tuesday, > >>>>>> > >>>>>>>>>>>>>>>>>>>> November 28, 2006 2:31 PM > >>>>>>>>>>>>>>>>>>>> To: 'gin-ops@ggf.org' > >>>>>>>>>>>>>>>>>>>> Subject: start Savannah run > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> Dear all, > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> Thanks for all the people involved to help make > >>>>>>>>>>>>>>>>>>>> TDDFT application run and GIN testbed monitoring > >>>>>>>>>>>>>>>>>>>> very fruitful experiments! We have learned a lot > >>>>>>>>>>>>>>>>>>>> > >> and > >> > >>>>>> have > >>>>>> > >>>>>>>>>>>>>>>>>>>> presented our learnings at OGF and SC06. > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> Let's continue our collaborative effort with our > >>>>>>>>>>>>>>>>>>>> > >>>> plan > >>>> > >>>>>>>>>>>>>> - start our > >>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> next experiment with Savannah > >>>>>>>>>>>>>>>>>>>> fire simulation - a data-intensive application, > >>>>>>>>>>>>>>>>>>>> > >> to > >> > >>>>>>>>>>>>>> explore data > >>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> related interoperation issues. > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> Colin Enticott at Monash University of Australia > >>>>>>>>>>>>>>>>>>>> is the lead driver. Colin has documented the > >>>>>>>>>>>>>>>>>>>> introduction and requirements of this > >>>>>>>>>>>>>>>>>>>> > >> application at > >> > >>>>>>>>>>>>>>>>>>>> http://wiki.pragma- > >>>>>>>>>>>>>>>>>>>> > >> grid.net/index.php?title=Savannah > >> > >>>>>>>>>>>>>>>>>>>> or go to > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> http://forge.gridforum.org/sf/wiki/do/viewPage/ > >>>>>>>>>>>>>>>>>>> projects.gin/wi > >>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>> ki/GinOps > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> click "Savannah" under "Applications", > >>>>>>>>>>>>>>>>>>> where "first Savannah experiment" is refering to > >>>>>>>>>>>>>>>>>>> a previous experiment in PRAGMA testbed. The > >>>>>>>>>>>>>>>>>>> "second Savannah experiment" is the one for GIN > >>>>>>>>>>>>>>>>>>> > >>>> testbed. > >>>> > >>>>>>>>>>>>>>>>>>> We like to run this application on all Grids in > >>>>>>>>>>>>>>>>>>> > >> GIN > >> > >>>>>>>>>>>>>> testbed, but > >>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> in 2 steps. First, we will run it on > >>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>> PRAGMA/TeraGrid/OSG - since > >>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> these should be relatively easier to do. We like > >>>>>>>>>>>>>>>>>>> > >> to > >> > >>>> get > >>>> > >>>>>>>>>>>>>> this done > >>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> before the year end. > >>>>>>>>>>>>>>>>>>> The next step, Colin will work with EGEE and > >>>>>>>>>>>>>>>>>>> > >>>> Nordugrid > >>>> > >>>>>>>>>>>>>>>>>>> to develop possible solutions, to enable > >>>>>>>>>>>>>>>>>>> > >>>> interoperation > >>>> > >>>>>>>>>>>>>>>>>>> and to include all 5 Grids in the run. > >>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> Thanks in advance for your continued help with > >>>>>>>>>>>>>>>>>>> > >> this! > >> > >>>>>>>>>>>>>>>>>>> Cindy > >>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> > >>>>>>>>> -- > >>>>>>>>> gin-auth mailing list > >>>>>>>>> gin-auth@ogf.org > >>>>>>>>> http://www.ogf.org/mailman/listinfo/gin-auth > >>>>>>>>> > >>>>>>> -- > >>>>>>> gin-ops mailing list > >>>>>>> gin-ops@ogf.org > >>>>>>> http://www.ogf.org/mailman/listinfo/gin-ops > >>>>>>> > > > > > >

Colin, We didn't have the Monash University CA configured on tg- grid1.uc.teragrid.org. This has now been fixed. Regards, JP Navarro On Jan 3, 2007, at 2:13 AM, Colin Enticott wrote: > First of all, Happy new year everyone! > > Thankyou for your help last year. > > I have two quick questions: > > I am now receiving a "certificate expired" message from > tg-grid1.uc.teragrid.org. My certificate still works elsewhere. > Is it the > server's certificate? > > And on osg-gw-2.t2.ucsd.edu, I need to write ~80GB of data for the > experiment. Which directory can I use? > > Thanks, > Colin > > --- > Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 > Room H7.26, Level 7, Building H, Monash University Caulfield 3145, > Australia > > >> -----Original Message----- >> From: Terrence Martin [mailto:tmartin@physics.ucsd.edu] >> Sent: Tuesday, 5 December 2006 5:41 PM >> To: Colin Enticott >> Cc: 'Yoshio Tanaka'; D.Bannon@vpac.org; navarro@mcs.anl.gov; gin- >> auth@ggf.org; gin-ops@ggf.org >> Subject: Re: [gin-ops] [gin-auth] start Savannah run >> >> colin, if you want to try logging into >> >> colin@uaf-1.t2.ucsd.edu >> >> run >> >> source /data/vdt/setup.sh >> >> then grab a cert with grid-proxy-init and give it a try. >> >> It is the machine that all my users use to submit to my OSG site. >> >> Terrence >> >> >> >> Colin Enticott wrote: >>> Hi Yoshio, >>> >>> I've tried it from 3 servers. On the server I have root access >>> on, I >> just >>> manually synced and I am still having the problem. I am >>> wondering if >> the CA >>> certificate I sent is okay. It's the APAC CA files we use here >>> on our >>> servers. >>> >>> On the Pragma resources, I have been using my old certificate (as >> initially >>> there was teething problems with the new APAC CA). Can you >>> update your >>> server with the details below and I'll give it a try: >>> >>> http://wiki.pragma-grid.net/index.php?title=ColinDetails >>> >>> Thanks, >>> Colin >>> >>> --- >>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 >>> Room H7.26, Level 7, Building H, Monash University Caulfield 3145, >> Australia >>> >>> >>> >>>> -----Original Message----- >>>> From: Yoshio Tanaka [mailto:yoshio.tanaka@aist.go.jp] >>>> Sent: Tuesday, 5 December 2006 4:51 PM >>>> To: Colin.Enticott@csse.monash.edu.au >>>> Cc: D.Bannon@vpac.org; tmartin@physics.ucsd.edu; >>>> navarro@mcs.anl.gov; >> gin- >>>> auth@ggf.org; gin-ops@ggf.org; yoshio.tanaka@aist.go.jp >>>> Subject: Re: [gin-ops] [gin-auth] start Savannah run >>>> >>>> >>>> Hi Colin, >>>> >>>> Are you able to submit jobs to PRAGMA machines? >>>> If yes, the APAC CA on your machine should have no problem. >>>> >>>> One point that I would like to confirm is... >>>> Is the time of your client machine correct? Do you use an NTP >>>> server >>>> for synchronize the time? >>>> >>>> Thanks, >>>> >>>> -- >>>> Yoshio Tanaka (yoshio.tanaka@aist.go.jp) >>>> http://ninf.apgrid.org/ >>>> http://www.apgridpma.org/ >>>> >>>> >>>> From: Colin Enticott <Colin.Enticott@csse.monash.edu.au> >>>> Subject: RE: [gin-ops] [gin-auth] start Savannah run >>>> Date: Tue, 05 Dec 2006 16:38:40 +1100 >>>> Message-ID: <01df01c7182f$9f59a3d0$1e46c282@nail> >>>> >>>> >>>>> Hi Yoshio, >>>>> >>>>> I am unable to log in. But below is what JP sent me. Any ideas on >> what >>>>> >>>> it >>>> >>>>> means? >>>>> >>>>> Doing a Google I find: >>>>> The error might arise from an expired certificate or when >>>>> trying to >>>>> >>>> restore >>>> >>>>> certification expiration date and job are in some state in the >>>>> Grid >>>>> execution list. >>>>> >>>>> I guess it might be a problem with the APAC CA on your >>>>> machines? Was >>>>> >>>> the CA >>>> >>>>> set up previously? Or did you use the ones on my info page? (This >>>>> >>>> leaves >>>> >>>>> the question if I packaged them correctly). >>>>> >>>>> >>>>> On Fri, 2006-12-01 at 12:34 -0600, JP Navarro wrote: >>>>> >>>>> TIME: Thu Nov 30 18:49:42 2006 >>>>> PID: 9608 -- Notice: 0: GATEKEEPER_ACCT_FD=5 (/var/globus/prews- >>>>> gram-4.0.1-r3-i1/log/globus-gatekeeper.log) >>>>> TIME: Thu Nov 30 18:49:42 2006 >>>>> PID: 9608 -- Notice: 6: Got connection 198.202.88.52 at Thu >>>>> Nov 30 >>>>> 18:49:42 2006 >>>>> >>>>> Failed reading length 0 >>>>> GSS authentication failure >>>>> globus_gss_assist token :3: read failure: Connection closed >>>>> Failure: GSS failed Major:01090000 Minor:00000000 Token:00000003 >>>>> >>>>> TIME: Thu Nov 30 18:49:42 2006 >>>>> PID: 9608 -- Failure: GSS failed Major:01090000 Minor:00000000 >>>>> Token:00000003 >>>>> >>>>> >>>>> Colin >>>>> >>>>> --- >>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 >>>>> Room H7.26, Level 7, Building H, Monash University Caulfield 3145, >>>>> >>>> Australia >>>> >>>>> >>>>>> -----Original Message----- >>>>>> From: Yoshio Tanaka [mailto:yoshio.tanaka@aist.go.jp] >>>>>> Sent: Tuesday, 5 December 2006 12:51 PM >>>>>> To: Colin.Enticott@csse.monash.edu.au >>>>>> Cc: D.Bannon@vpac.org; tmartin@physics.ucsd.edu; >>>>>> navarro@mcs.anl.gov; >>>>>> >>>> gin- >>>> >>>>>> auth@ggf.org; gin-ops@ggf.org; yoshio.tanaka@aist.go.jp >>>>>> Subject: Re: [gin-ops] [gin-auth] start Savannah run >>>>>> >>>>>> >>>>>> Hi Colin, >>>>>> >>>>>> If you can login to these machines, see the globus >>>>>> gatekeeper's log >>>>>> >>>> at: >>>> >>>>>> ${GLOBUS_LOCATION}/var/globus-gatekeeper.log >>>>>> >>>>>> You may find error logs such as no entry in mapfile and >>>>>> failure in >>>>>> tracing cert chain. >>>>>> >>>>>> Regards, >>>>>> >>>>>> -- >>>>>> Yoshio Tanaka (yoshio.tanaka@aist.go.jp) >>>>>> http://ninf.apgrid.org/ >>>>>> http://www.apgridpma.org/ >>>>>> >>>>>> From: Colin Enticott <Colin.Enticott@csse.monash.edu.au> >>>>>> Subject: RE: [gin-ops] [gin-auth] start Savannah run >>>>>> Date: Tue, 05 Dec 2006 12:24:42 +1100 >>>>>> Message-ID: <01c001c7180c$24c430e0$1e46c282@nail> >>>>>> >>>>>> >>>>>>> Thanks Yoshio, >>>>>>> >>>>>>> So it looks like authentication issues as I can connect to >>>>>>> port 2119 >>>>>>> >>>> on >>>> >>>>>> both >>>>>> >>>>>>> hosts: >>>>>>> >>>>>>> cme@edda$ globusrun -a -r tg-grid1.uc.teragrid.org >>>>>>> >>>>>>> GRAM Authentication test failure: connecting to the job manager >>>>>>> >>>> failed. >>>> >>>>>>> Possible reasons: job terminated, invalid job contact, network >>>>>>> >>>> problems, >>>> >>>>>> ... >>>>>> >>>>>>> cme@edda$ globusrun -a -r osg-gw-2.t2.ucsd.edu >>>>>>> >>>>>>> GRAM Authentication test failure: connecting to the job manager >>>>>>> >>>> failed. >>>> >>>>>>> Possible reasons: job terminated, invalid job contact, network >>>>>>> >>>> problems, >>>> >>>>>> ... >>>>>> >>>>>>> Regards, >>>>>>> Colin >>>>>>> >>>>>>> --- >>>>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 >>>>>>> Room H7.26, Level 7, Building H, Monash University Caulfield >>>>>>> 3145, >>>>>>> >>>>>> Australia >>>>>> >>>>>>> >>>>>>>> -----Original Message----- >>>>>>>> From: Yoshio Tanaka [mailto:yoshio.tanaka@aist.go.jp] >>>>>>>> Sent: Tuesday, 5 December 2006 12:21 PM >>>>>>>> To: Colin.Enticott@csse.monash.edu.au >>>>>>>> Cc: D.Bannon@vpac.org; tmartin@physics.ucsd.edu; >>>>>>>> >>>> navarro@mcs.anl.gov; >>>> >>>>>> gin- >>>>>> >>>>>>>> auth@ggf.org; gin-ops@ggf.org; yoshio.tanaka@aist.go.jp >>>>>>>> Subject: Re: [gin-ops] [gin-auth] start Savannah run >>>>>>>> >>>>>>>> >>>>>>>> Hi Colin, >>>>>>>> >>>>>>>> Please test the authentication by the following command: >>>>>>>> >>>>>>>> % globusrun -a -r osg-gw-2.t2.ucsd.edu >>>>>>>> >>>>>>>> % globusrun -a -r tg-grid1.uc.teragrid.org >>>>>>>> >>>>>>>> Thanks, >>>>>>>> >>>>>>>> -- >>>>>>>> Yoshio Tanaka (yoshio.tanaka@aist.go.jp) >>>>>>>> http://ninf.apgrid.org/ >>>>>>>> http://www.apgridpma.org/ >>>>>>>> >>>>>>>> >>>>>>>> From: Colin Enticott <Colin.Enticott@csse.monash.edu.au> >>>>>>>> Subject: Re: [gin-ops] [gin-auth] start Savannah run >>>>>>>> Date: Tue, 05 Dec 2006 11:44:05 +1100 >>>>>>>> Message-ID: <017401c71806$77cf6760$1e46c282@nail> >>>>>>>> >>>>>>>> >>>>>>>>> Thanks David, >>>>>>>>> >>>>>>>>> But still the same problem. As you can see, my certificate >>>>>>>>> >>>> still >>>> >>>>>> works >>>>>> >>>>>>>> on >>>>>>>> >>>>>>>>> the vpac host and there is definitely no firewall in the way: >>>>>>>>> >>>>>>>>> cme@edda$ grid-proxy-init -cert usercert.pem.APACGrid -key >>>>>>>>> userkey.pem.APACGrid >>>>>>>>> Your identity: /C=AU/O=APACGrid/OU=Monash University/CN=Colin >>>>>>>>> >>>>>> Enticott >>>>>> >>>>>>>>> Enter GRID pass phrase for this identity: >>>>>>>>> Creating proxy ................................... Done >>>>>>>>> Your proxy is valid until: Tue Dec 5 23:28:47 2006 >>>>>>>>> cme@edda$ globus-job-run osg-gw-2.t2.ucsd.edu/jobmanager-fork >>>>>>>>> >>>>>> /bin/uname >>>>>> >>>>>>>> -a >>>>>>>> >>>>>>>>> GRAM Job submission failed because the connection to the >>>>>>>>> server >>>>>>>>> >>>>>> failed >>>>>> >>>>>>>>> (check host and port) (error code 12) >>>>>>>>> cme@edda$ globus-job-run tg-grid1.uc.teragrid.org/jobmanager- >>>>>>>>> >>>> fork >>>> >>>>>>>> /bin/uname >>>>>>>> >>>>>>>>> -a >>>>>>>>> GRAM Job submission failed because the connection to the >>>>>>>>> server >>>>>>>>> >>>>>> failed >>>>>> >>>>>>>>> (check host and port) (error code 12) >>>>>>>>> cme@edda$ globus-job-run ng1.vpac.org/jobmanager-fork /bin/ >>>>>>>>> uname >>>>>>>>> >>>> -a >>>> >>>>>>>>> Linux ng1.vpac.org 2.6.16.29-xen #4 SMP Sun Oct 15 13:20:46 >>>>>>>>> BST >>>>>>>>> >>>> 2006 >>>> >>>>>>>> i686 >>>>>>>> >>>>>>>>> i686 i386 GNU/Linux >>>>>>>>> cme@edda$ telnet tg-grid1.uc.teragrid.org 2119 >>>>>>>>> Trying 192.5.198.225... >>>>>>>>> Connected to tg-grid1.uc.teragrid.org. >>>>>>>>> Escape character is '^]'. >>>>>>>>> >>>>>>>>> >>>>>>>>> Connection closed by foreign host. >>>>>>>>> cme@edda$ telnet osg-gw-2.t2.ucsd.edu 2119 >>>>>>>>> Trying 137.110.141.17... >>>>>>>>> Connected to osg-gw-2.t2.ucsd.edu. >>>>>>>>> Escape character is '^]'. >>>>>>>>> >>>>>>>>> >>>>>>>>> Connection closed by foreign host. >>>>>>>>> >>>>>>>>> >>>>>>>>> Any other thoughts from anyone? >>>>>>>>> >>>>>>>>> Thanks, >>>>>>>>> Colin >>>>>>>>> >>>>>>>>> --- >>>>>>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 >>>>>>>>> Room H7.26, Level 7, Building H, Monash University Caulfield >>>>>>>>> >>>> 3145, >>>> >>>>>>>> Australia >>>>>>>> >>>>>>>>> >>>>>>>>>> -----Original Message----- >>>>>>>>>> From: David Bannon [mailto:D.Bannon@vpac.org] >>>>>>>>>> Sent: Monday, 4 December 2006 6:08 PM >>>>>>>>>> To: JP Navarro >>>>>>>>>> Cc: Colin Enticott; gin-auth@ggf.org; gin-ops@ggf.org; >>>>>>>>>> >>>> 'Terrence >>>> >>>>>>>> Martin' >>>>>>>> >>>>>>>>>> Subject: Re: [gin-auth] start Savannah run >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> Colin, you can run as a Gin user on any of the VPAC machines, >>>>>>>>>> >>>> my >>>> >>>>>> be >>>>>> >>>>>>>>>> easier to debug.... >>>>>>>>>> >>>>>>>>>> David >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> On Fri, 2006-12-01 at 12:34 -0600, JP Navarro wrote: >>>>>>>>>> >>>>>>>>>>> Colin, >>>>>>>>>>> >>>>>>>>>>> The error in the logs is below. Not sure what it means. >>>>>>>>>>> >>>> Could >>>> >>>>>> you >>>>>> >>>>>>>>>>> try this >>>>>>>>>>> test again from your SDSC TeraGrid account so we can rule >>>>>>>>>>> >>>> out >>>> >>>>>>>>>>> software and >>>>>>>>>>> firewall issues? >>>>>>>>>>> >>>>>>>>>>> Thanks, >>>>>>>>>>> >>>>>>>>>>> JP >>>>>>>>>>> >>>>>>>>>>> TIME: Thu Nov 30 18:49:42 2006 >>>>>>>>>>> PID: 9608 -- Notice: 0: GATEKEEPER_ACCT_FD=5 >>>>>>>>>>> >>>>>> (/var/globus/prews- >>>>>> >>>>>>>>>>> gram-4.0.1-r3-i1/log/globus-gatekeeper.log) >>>>>>>>>>> TIME: Thu Nov 30 18:49:42 2006 >>>>>>>>>>> PID: 9608 -- Notice: 6: Got connection 198.202.88.52 at >>>>>>>>>>> >>>> Thu >>>> >>>>>> Nov 30 >>>>>> >>>>>>>>>>> 18:49:42 2006 >>>>>>>>>>> >>>>>>>>>>> Failed reading length 0 >>>>>>>>>>> GSS authentication failure >>>>>>>>>>> globus_gss_assist token :3: read failure: Connection >>>>>>>>>>> >>>> closed >>>> >>>>>>>>>>> Failure: GSS failed Major:01090000 Minor:00000000 >>>>>>>>>>> >>>> Token:00000003 >>>> >>>>>>>>>>> TIME: Thu Nov 30 18:49:42 2006 >>>>>>>>>>> PID: 9608 -- Failure: GSS failed Major:01090000 >>>>>>>>>>> >>>> Minor:00000000 >>>> >>>>>>>>>>> Token:00000003 >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> On Nov 30, 2006, at 7:05 PM, Colin Enticott wrote: >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>>> Thanks JP, >>>>>>>>>>>> >>>>>>>>>>>> But I am running into some problems. I've tried both from >>>>>>>>>>>> >>>> our >>>> >>>>>>>>>>>> server and >>>>>>>>>>>> rocks-52 and this is what I get: >>>>>>>>>>>> [cme@rocks-52 ~]$ globus-job-run tg-grid1.uc.teragrid.org/ >>>>>>>>>>>> jobmanager-fork >>>>>>>>>>>> /bin/uname -a >>>>>>>>>>>> GRAM Job submission failed because the connection to the >>>>>>>>>>>> >>>>>> server >>>>>> >>>>>>>> failed >>>>>>>> >>>>>>>>>>>> (check host and port) (error code 12) >>>>>>>>>>>> [cme@rocks-52 ~]$ grid-proxy-info >>>>>>>>>>>> subject : /C=AU/O=APACGrid/OU=Monash University/CN=Colin >>>>>>>>>>>> Enticott/CN=1087048434 >>>>>>>>>>>> issuer : /C=AU/O=APACGrid/OU=Monash University/CN=Colin >>>>>>>>>>>> >>>>>> Enticott >>>>>> >>>>>>>>>>>> identity : /C=AU/O=APACGrid/OU=Monash University/CN=Colin >>>>>>>>>>>> >>>>>> Enticott >>>>>> >>>>>>>>>>>> type : Proxy draft (pre-RFC) compliant impersonation >>>>>>>>>>>> >>>> proxy >>>> >>>>>>>>>>>> strength : 512 bits >>>>>>>>>>>> path : /home/cme/globus_proxy.APACGrid >>>>>>>>>>>> timeleft : 836:30:26 (34.8 days) >>>>>>>>>>>> [cme@rocks-52 ~]$ ssh tg-grid1.uc.teragrid.org >>>>>>>>>>>> Warning: Permanently added 'tg-grid1.uc.teragrid.org' >>>>>>>>>>>> >>>> (RSA) to >>>> >>>>>> the >>>>>> >>>>>>>>>>>> list of >>>>>>>>>>>> known hosts. >>>>>>>>>>>> Permission denied (external- >>>>>>>>>>>> >>>>>>>> keyx,gssapi,publickey,gssapi,hostbased). >>>>>>>> >>>>>>>>>>>> [cme@rocks-52 ~]$ >>>>>>>>>>>> >>>>>>>>>>>> That is the certificate that I registered with. I also >>>>>>>>>>>> >>>> tried >>>> >>>>>> the >>>>>> >>>>>>>>>>>> ssh key >>>>>>>>>>>> pair I put up on the pragma wiki. >>>>>>>>>>>> >>>>>>>>>>>> Any thoughts? >>>>>>>>>>>> >>>>>>>>>>>> Thanks, >>>>>>>>>>>> Colin >>>>>>>>>>>> >>>>>>>>>>>> --- >>>>>>>>>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 >>>>>>>>>>>> Room H7.26, Level 7, Building H, Monash University >>>>>>>>>>>> >>>> Caulfield >>>> >>>>>> 3145, >>>>>> >>>>>>>>>>>> Australia >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>>> -----Original Message----- >>>>>>>>>>>>> From: JP Navarro [mailto:navarro@mcs.anl.gov] >>>>>>>>>>>>> Sent: Friday, 1 December 2006 2:47 AM >>>>>>>>>>>>> To: Colin Enticott >>>>>>>>>>>>> Cc: zhengc@sdsc.edu; 'Terrence Martin'; gin-ops@ggf.org; >>>>>>>>>>>>> >>>>>> 'Oscar >>>>>> >>>>>>>>>>>>> Koeroo'; >>>>>>>>>>>>> gin-auth@ggf.org >>>>>>>>>>>>> Subject: Re: start Savannah run >>>>>>>>>>>>> >>>>>>>>>>>>> Colin, >>>>>>>>>>>>> >>>>>>>>>>>>> You should be set to go on the UC/ANL TeraGrid cluster. >>>>>>>>>>>>> >>>>>>>>>>>>> GT4 Pre-WS GRAM: tg-grid1.uc.teragrid.org:2119 >>>>>>>>>>>>> GT4 WS GRAM: tg-grid1.uc.teragrid.org:8443 (FORK, >>>>>>>>>>>>> >>>> PBS) >>>> >>>>>>>>>>>>> GT4 GridFTP: tg-gridftp.uc.teragrid.org:2811 >>>>>>>>>>>>> >>>>>>>>>>>>> Regards, >>>>>>>>>>>>> >>>>>>>>>>>>> JP >>>>>>>>>>>>> >>>>>>>>>>>>> On Nov 30, 2006, at 2:43 AM, Colin Enticott wrote: >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>>> Thankyou everyone. >>>>>>>>>>>>>> >>>>>>>>>>>>>> I am now registered on the GIN VO (well, I appear here: >>>>>>>>>>>>>> http://kuiken.nikhef.nl/gin.ggf.org/grid-mapfile). >>>>>>>>>>>>>> >>>>>>>>>>>>>> What is my next step? >>>>>>>>>>>>>> >>>>>>>>>>>>>> Thanks, >>>>>>>>>>>>>> Colin >>>>>>>>>>>>>> >>>>>>>>>>>>>> --- >>>>>>>>>>>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 >>>>>>>>>>>>>> Room H7.26, Level 7, Building H, Monash University >>>>>>>>>>>>>> >>>> Caulfield >>>> >>>>>>>> 3145, >>>>>>>> >>>>>>>>>>>>>> Australia >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>>> -----Original Message----- >>>>>>>>>>>>>>> From: Cindy Zheng [mailto:zhengc@sdsc.edu] >>>>>>>>>>>>>>> Sent: Thursday, 30 November 2006 11:59 AM >>>>>>>>>>>>>>> To: 'Terrence Martin' >>>>>>>>>>>>>>> Cc: 'JP Navarro'; gin-ops@ggf.org; 'Oscar Koeroo'; >>>>>>>>>>>>>>> >>>> 'Colin >>>> >>>>>>>>>>>>>>> Enticott'; gin- >>>>>>>>>>>>>>> auth@ggf.org >>>>>>>>>>>>>>> Subject: RE: FW: start Savannah run >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> Thank you, Terrence! >>>>>>>>>>>>>>> We'll wait to hear from Colin when Colin finishes >>>>>>>>>>>>>>> registering to gin vo. >>>>>>>>>>>>>>> Cindy >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> -----Original Message----- >>>>>>>>>>>>>>>> From: Terrence Martin >>>>>>>>>>>>>>>> >>>> [mailto:tmartin@physics.ucsd.edu] >>>> >>>>>>>>>>>>>>>> Sent: Wednesday, November 29, 2006 11:36 AM >>>>>>>>>>>>>>>> To: Oscar Koeroo >>>>>>>>>>>>>>>> Cc: zhengc@sdsc.edu; 'JP Navarro'; gin-ops@ggf.org; >>>>>>>>>>>>>>>> >>>> 'Colin >>>> >>>>>>>>>>>>>>>> Enticott'; gin-auth@ggf.org >>>>>>>>>>>>>>>> Subject: Re: FW: start Savannah run >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> Oscar Koeroo wrote: >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> Hi Terrence and Cindy, >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> Getting new users up for registration on the GIN VO >>>>>>>>>>>>>>>>> >>>> is >>>> >>>>>> easy. >>>>>> >>>>>>>>>>>>>>>>> To be >>>>>>>>>>>>>>>>> able to access the secured website and for >>>>>>>>>>>>>>>>> >>>> authentication >>>> >>>>>>>> reasons >>>>>>>> >>>>>>>>>>>>>>>>> during the registration process new users must have >>>>>>>>>>>>>>>>> >>>> their >>>> >>>>>>>>>>>>>>>> certificate >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> loaded and ready in their webbrowser. The VOMS server >>>>>>>>>>>>>>>>> >>>> is >>>> >>>>>>>>>>>>>>>> loaded with >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> all IGTF accredited CAs including the Fermilab kCA. >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> Go to the website: >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> https://kuiken.nikhef.nl:8443/voms/gin.ggf.org/ and >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> apply for a "New user registration". >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> The usual VOMS configuration info is also available. >>>>>>>>>>>>>>>>> >>>> I >>>> >>>>>>>>>>>>>>>> don't know what >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> you'll need to populate a GUMS server. This VOMS >>>>>>>>>>>>>>>>> >>>> server >>>> >>>>>> is as >>>>>> >>>>>>>> any >>>>>>>> >>>>>>>>>>>>>>>>> other so I guess you can use your regular setup. >>>>>>>>>>>>>>>>> In addition to the secured interface I've also made >>>>>>>>>>>>>>>>> >>>>>> available >>>>>> >>>>>>>> a >>>>>>>> >>>>>>>>>>>>>>>>> non-secured way of grabbing a grid-mapfile. >>>>>>>>>>>>>>>>> http://kuiken.nikhef.nl/gin.ggf.org/grid-mapfile >>>>>>>>>>>>>>>>> There is also an RSS-feed pointing to the grid- >>>>>>>>>>>>>>>>> >>>> mapfile >>>> >>>>>> and >>>>>> >>>>>>>>>>>>>>>> the secured >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> interface at >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> http://kuiken.nikhef.nl/gin.ggf.org/feed- >>>>>>>>>>>>>>>> >>>> gin.ggf.org.xml >>>> >>>>>>>>>>>>>>>>> Unfortunately I'm not aware of a clear guide. I do >>>>>>>>>>>>>>>>> >>>> know a >>>> >>>>>>>>>>>>>>>>> guide for >>>>>>>>>>>>>>>>> creating the packed certificate files that go into >>>>>>>>>>>>>>>>> >>>> your >>>> >>>>>>>>>>>>>>>> browser if you >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> start from a two PEM formated files (certificate file >>>>>>>>>>>>>>>>> >>>> + >>>> >>>>>>>>>>>>>>>>> private key >>>>>>>>>>>>>>>>> file) that's at >>>>>>>>>>>>>>>>> >>>> http://certificate.nikhef.nl/info/browser >>>> >>>>>>>>>>>>>>>>> Once a user has passed that stage, the registration >>>>>>>>>>>>>>>>> >>>> for >>>> >>>>>> the >>>>>> >>>>>>>>>>>>>>>> VO is as >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> trivial as any web-forum account registration. >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> I am assuming this user already has a grid cert since >>>>>>>>>>>>>>>> >>>> they >>>> >>>>>>>>>>>>>>>> list a DN so >>>>>>>>>>>>>>>> only VOMS registration is required. Once that is done >>>>>>>>>>>>>>>> >>>>>> either I >>>>>> >>>>>>>>>>>>>>>> run my >>>>>>>>>>>>>>>> update of GUMS manually or in 720/2 minutes on average >>>>>>>>>>>>>>>> >>>> the >>>> >>>>>>>>>>>>>>>> user will be >>>>>>>>>>>>>>>> automatically downloaded into my GUMS database. I >>>>>>>>>>>>>>>> >>>> actually >>>> >>>>>> do >>>>>> >>>>>>>>>>>>>>>> not have >>>>>>>>>>>>>>>> to do anything, but I can speed things up ever so >>>>>>>>>>>>>>>> >>>> slightly >>>> >>>>>> if >>>>>> >>>>>>>> I >>>>>>>> >>>>>>>>>>>>>>>> am in >>>>>>>>>>>>>>>> the office and someone asks me to try refreshing gums. >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> Terrence >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> Oscar >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> Cindy Zheng wrote: >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Sounds right, Terrence. Let me ask Oscar who has >>>>>>>>>>>>>>>>>> >>>> helped >>>> >>>>>> me >>>>>> >>>>>>>>>>>>>>>> with GIN >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> VO before. >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Hi, Oscar, >>>>>>>>>>>>>>>>>> Could you advise Colin what need to be done to be >>>>>>>>>>>>>>>>>> added in GIN VO? >>>>>>>>>>>>>>>>>> I'm also cc'ing to gin-auth list. >>>>>>>>>>>>>>>>>> If there is a guide for potential GIN users, please >>>>>>>>>>>>>>>>>> let me know the url and I can link it to our GINOPS >>>>>>>>>>>>>>>>>> page. >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Thanks, >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Cindy >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> -----Original Message----- >>>>>>>>>>>>>>>>>>> From: Terrence Martin >>>>>>>>>>>>>>>>>>> >>>> [mailto:tmartin@physics.ucsd.edu] >>>> >>>>>>>> Sent: >>>>>>>> >>>>>>>>>>>>>>>>>>> Tuesday, November 28, 2006 3:24 PM >>>>>>>>>>>>>>>>>>> To: zhengc@sdsc.edu >>>>>>>>>>>>>>>>>>> Cc: 'JP Navarro'; gin-ops@ggf.org; 'Colin Enticott' >>>>>>>>>>>>>>>>>>> Subject: Re: FW: start Savannah run >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> The quickest and easiest way for me is to have him >>>>>>>>>>>>>>>>>>> >>>>>> added to >>>>>> >>>>>>>>>>>>>>>>>>> a VO. >>>>>>>>>>>>>>>>>>> How easy is it to add him to the GIN VO? One in >>>>>>>>>>>>>>>>>>> >>>> there I >>>> >>>>>>>>>>>>>>>> can hit my >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> gums reload and he will be able to access UCSD as a >>>>>>>>>>>>>>>>>>> >>>> GIN >>>> >>>>>>>>>>>>>>>>>>> user. Any >>>>>>>>>>>>>>>>>>> other approach requires me hacking his DN into my >>>>>>>>>>>>>>>>>>> >>>> local >>>> >>>>>>>>>>>>>>>> VO which I >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> prefer to avoid and does not help him with any >>>>>>>>>>>>>>>>>>> >>>> other >>>> >>>>>> site. >>>>>> >>>>>>>>>>>>>>>>>>> Terrence >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> Cindy Zheng wrote: >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> Thanks, Terrence, for the quick reply! >>>>>>>>>>>>>>>>>>>> Colin has not been a GIN user. >>>>>>>>>>>>>>>>>>>> What do you think it's the best way to get colin >>>>>>>>>>>>>>>>>>>> >>>>>> access? >>>>>> >>>>>>>>>>>>>>>>>>>> Cindy >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> -----Original Message----- >>>>>>>>>>>>>>>>>>>>> From: Terrence Martin >>>>>>>>>>>>>>>>>>>>> >>>>>> [mailto:tmartin@physics.ucsd.edu] >>>>>> >>>>>>>> Sent: >>>>>>>> >>>>>>>>>>>>>>>>>>>>> Tuesday, November 28, 2006 2:53 PM >>>>>>>>>>>>>>>>>>>>> To: zhengc@sdsc.edu >>>>>>>>>>>>>>>>>>>>> Cc: 'JP Navarro'; gin-ops@ggf.org >>>>>>>>>>>>>>>>>>>>> Subject: Re: FW: start Savannah run >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> We only have a production cluster, but I should >>>>>>>>>>>>>>>>>>>>> >>>> still >>>> >>>>>>>>>>>>>>>> be >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> able to help. >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> I do not seem to have Colin in my GUMS database >>>>>>>>>>>>>>>>>>>>> >>>>>> though >>>>>> >>>>>>>>>>>>>>>> for >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> GIN or any >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> other VO. Should he be downloaded with GIN's >>>>>>>>>>>>>>>>>>>>> >>>> users? >>>> >>>>>>>>>>>>>>>>>>>>> Terrence >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> Cindy Zheng wrote: >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>> Hi, JP and Terrence, >>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>> Could you help Colin to get ready to run >>>>>>>>>>>>>>>>>>>>>> >>>> Savannah >>>> >>>>>>>>>>>>>>>>>>>>>> application on your GIN testbed clusters? >>>>>>>>>>>>>>>>>>>>>> You can find Colin's user info at >>>>>>>>>>>>>>>>>>>>>> http://wiki.pragma- >>>>>>>>>>>>>>>>>>>>>> >>>>>> grid.net/index.php?title=ColinDetails >>>>>> >>>>>>>>>>>>>>>>>>>>>> If you need more info or action from Colin, or >>>>>>>>>>>>>>>>>>>>>> >>>> have >>>> >>>>>>>>>>>>>>>> any questions >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>> for Colin or me, please let us know. >>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>> Thank you very much! >>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>> Cindy >>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>> -----Original Message----- >>>>>>>>>>>>>>>>>>>>>> From: Cindy Zheng [mailto:zhengc@sdsc.edu] Sent: >>>>>>>>>>>>>>>>>>>>>> >>>>>>>> Tuesday, >>>>>>>> >>>>>>>>>>>>>>>>>>>>>> November 28, 2006 2:31 PM >>>>>>>>>>>>>>>>>>>>>> To: 'gin-ops@ggf.org' >>>>>>>>>>>>>>>>>>>>>> Subject: start Savannah run >>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>> Dear all, >>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>> Thanks for all the people involved to help make >>>>>>>>>>>>>>>>>>>>>> TDDFT application run and GIN testbed monitoring >>>>>>>>>>>>>>>>>>>>>> very fruitful experiments! We have learned a lot >>>>>>>>>>>>>>>>>>>>>> >>>> and >>>> >>>>>>>> have >>>>>>>> >>>>>>>>>>>>>>>>>>>>>> presented our learnings at OGF and SC06. >>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>> Let's continue our collaborative effort with our >>>>>>>>>>>>>>>>>>>>>> >>>>>> plan >>>>>> >>>>>>>>>>>>>>>> - start our >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>> next experiment with Savannah >>>>>>>>>>>>>>>>>>>>>> fire simulation - a data-intensive application, >>>>>>>>>>>>>>>>>>>>>> >>>> to >>>> >>>>>>>>>>>>>>>> explore data >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>> related interoperation issues. >>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>> Colin Enticott at Monash University of Australia >>>>>>>>>>>>>>>>>>>>>> is the lead driver. Colin has documented the >>>>>>>>>>>>>>>>>>>>>> introduction and requirements of this >>>>>>>>>>>>>>>>>>>>>> >>>> application at >>>> >>>>>>>>>>>>>>>>>>>>>> http://wiki.pragma- >>>>>>>>>>>>>>>>>>>>>> >>>> grid.net/index.php?title=Savannah >>>> >>>>>>>>>>>>>>>>>>>>>> or go to >>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> http://forge.gridforum.org/sf/wiki/do/viewPage/ >>>>>>>>>>>>>>>>>>>>> projects.gin/wi >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> ki/GinOps >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> click "Savannah" under "Applications", >>>>>>>>>>>>>>>>>>>>> where "first Savannah experiment" is refering to >>>>>>>>>>>>>>>>>>>>> a previous experiment in PRAGMA testbed. The >>>>>>>>>>>>>>>>>>>>> "second Savannah experiment" is the one for GIN >>>>>>>>>>>>>>>>>>>>> >>>>>> testbed. >>>>>> >>>>>>>>>>>>>>>>>>>>> We like to run this application on all Grids in >>>>>>>>>>>>>>>>>>>>> >>>> GIN >>>> >>>>>>>>>>>>>>>> testbed, but >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> in 2 steps. First, we will run it on >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> PRAGMA/TeraGrid/OSG - since >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> these should be relatively easier to do. We like >>>>>>>>>>>>>>>>>>>>> >>>> to >>>> >>>>>> get >>>>>> >>>>>>>>>>>>>>>> this done >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> before the year end. >>>>>>>>>>>>>>>>>>>>> The next step, Colin will work with EGEE and >>>>>>>>>>>>>>>>>>>>> >>>>>> Nordugrid >>>>>> >>>>>>>>>>>>>>>>>>>>> to develop possible solutions, to enable >>>>>>>>>>>>>>>>>>>>> >>>>>> interoperation >>>>>> >>>>>>>>>>>>>>>>>>>>> and to include all 5 Grids in the run. >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> Thanks in advance for your continued help with >>>>>>>>>>>>>>>>>>>>> >>>> this! >>>> >>>>>>>>>>>>>>>>>>>>> Cindy >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>> -- >>>>>>>>>>> gin-auth mailing list >>>>>>>>>>> gin-auth@ogf.org >>>>>>>>>>> http://www.ogf.org/mailman/listinfo/gin-auth >>>>>>>>>>> >>>>>>>>> -- >>>>>>>>> gin-ops mailing list >>>>>>>>> gin-ops@ogf.org >>>>>>>>> http://www.ogf.org/mailman/listinfo/gin-ops >>>>>>>>> >>> >>> >>> >

Thanks JP Navarro, It is working again. Will there be any problems with using 80GB in /home/ginuser? There seems to be 250GB free. Regards, Colin --- Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 Room H7.26, Level 7, Building H, Monash University Caulfield 3145, Australia > -----Original Message----- > From: JP Navarro [mailto:navarro@mcs.anl.gov] > Sent: Thursday, 4 January 2007 3:00 AM > To: Colin Enticott > Cc: gin-auth@ggf.org; gin-ops@ggf.org; 'Terrence Martin'; zhengc@sdsc.edu > Subject: Re: [gin-ops] [gin-auth] start Savannah run > > Colin, > > We didn't have the Monash University CA configured on tg- > grid1.uc.teragrid.org. > This has now been fixed. > > Regards, > > JP Navarro > > On Jan 3, 2007, at 2:13 AM, Colin Enticott wrote: > > > First of all, Happy new year everyone! > > > > Thankyou for your help last year. > > > > I have two quick questions: > > > > I am now receiving a "certificate expired" message from > > tg-grid1.uc.teragrid.org. My certificate still works elsewhere. > > Is it the > > server's certificate? > > > > And on osg-gw-2.t2.ucsd.edu, I need to write ~80GB of data for the > > experiment. Which directory can I use? > > > > Thanks, > > Colin > > > > --- > > Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 > > Room H7.26, Level 7, Building H, Monash University Caulfield 3145, > > Australia > > > > > >> -----Original Message----- > >> From: Terrence Martin [mailto:tmartin@physics.ucsd.edu] > >> Sent: Tuesday, 5 December 2006 5:41 PM > >> To: Colin Enticott > >> Cc: 'Yoshio Tanaka'; D.Bannon@vpac.org; navarro@mcs.anl.gov; gin- > >> auth@ggf.org; gin-ops@ggf.org > >> Subject: Re: [gin-ops] [gin-auth] start Savannah run > >> > >> colin, if you want to try logging into > >> > >> colin@uaf-1.t2.ucsd.edu > >> > >> run > >> > >> source /data/vdt/setup.sh > >> > >> then grab a cert with grid-proxy-init and give it a try. > >> > >> It is the machine that all my users use to submit to my OSG site. > >> > >> Terrence > >> > >> > >> > >> Colin Enticott wrote: > >>> Hi Yoshio, > >>> > >>> I've tried it from 3 servers. On the server I have root access > >>> on, I > >> just > >>> manually synced and I am still having the problem. I am > >>> wondering if > >> the CA > >>> certificate I sent is okay. It's the APAC CA files we use here > >>> on our > >>> servers. > >>> > >>> On the Pragma resources, I have been using my old certificate (as > >> initially > >>> there was teething problems with the new APAC CA). Can you > >>> update your > >>> server with the details below and I'll give it a try: > >>> > >>> http://wiki.pragma-grid.net/index.php?title=ColinDetails > >>> > >>> Thanks, > >>> Colin > >>> > >>> --- > >>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 > >>> Room H7.26, Level 7, Building H, Monash University Caulfield 3145, > >> Australia > >>> > >>> > >>> > >>>> -----Original Message----- > >>>> From: Yoshio Tanaka [mailto:yoshio.tanaka@aist.go.jp] > >>>> Sent: Tuesday, 5 December 2006 4:51 PM > >>>> To: Colin.Enticott@csse.monash.edu.au > >>>> Cc: D.Bannon@vpac.org; tmartin@physics.ucsd.edu; > >>>> navarro@mcs.anl.gov; > >> gin- > >>>> auth@ggf.org; gin-ops@ggf.org; yoshio.tanaka@aist.go.jp > >>>> Subject: Re: [gin-ops] [gin-auth] start Savannah run > >>>> > >>>> > >>>> Hi Colin, > >>>> > >>>> Are you able to submit jobs to PRAGMA machines? > >>>> If yes, the APAC CA on your machine should have no problem. > >>>> > >>>> One point that I would like to confirm is... > >>>> Is the time of your client machine correct? Do you use an NTP > >>>> server > >>>> for synchronize the time? > >>>> > >>>> Thanks, > >>>> > >>>> -- > >>>> Yoshio Tanaka (yoshio.tanaka@aist.go.jp) > >>>> http://ninf.apgrid.org/ > >>>> http://www.apgridpma.org/ > >>>> > >>>> > >>>> From: Colin Enticott <Colin.Enticott@csse.monash.edu.au> > >>>> Subject: RE: [gin-ops] [gin-auth] start Savannah run > >>>> Date: Tue, 05 Dec 2006 16:38:40 +1100 > >>>> Message-ID: <01df01c7182f$9f59a3d0$1e46c282@nail> > >>>> > >>>> > >>>>> Hi Yoshio, > >>>>> > >>>>> I am unable to log in. But below is what JP sent me. Any ideas on > >> what > >>>>> > >>>> it > >>>> > >>>>> means? > >>>>> > >>>>> Doing a Google I find: > >>>>> The error might arise from an expired certificate or when > >>>>> trying to > >>>>> > >>>> restore > >>>> > >>>>> certification expiration date and job are in some state in the > >>>>> Grid > >>>>> execution list. > >>>>> > >>>>> I guess it might be a problem with the APAC CA on your > >>>>> machines? Was > >>>>> > >>>> the CA > >>>> > >>>>> set up previously? Or did you use the ones on my info page? (This > >>>>> > >>>> leaves > >>>> > >>>>> the question if I packaged them correctly). > >>>>> > >>>>> > >>>>> On Fri, 2006-12-01 at 12:34 -0600, JP Navarro wrote: > >>>>> > >>>>> TIME: Thu Nov 30 18:49:42 2006 > >>>>> PID: 9608 -- Notice: 0: GATEKEEPER_ACCT_FD=5 (/var/globus/prews- > >>>>> gram-4.0.1-r3-i1/log/globus-gatekeeper.log) > >>>>> TIME: Thu Nov 30 18:49:42 2006 > >>>>> PID: 9608 -- Notice: 6: Got connection 198.202.88.52 at Thu > >>>>> Nov 30 > >>>>> 18:49:42 2006 > >>>>> > >>>>> Failed reading length 0 > >>>>> GSS authentication failure > >>>>> globus_gss_assist token :3: read failure: Connection closed > >>>>> Failure: GSS failed Major:01090000 Minor:00000000 Token:00000003 > >>>>> > >>>>> TIME: Thu Nov 30 18:49:42 2006 > >>>>> PID: 9608 -- Failure: GSS failed Major:01090000 Minor:00000000 > >>>>> Token:00000003 > >>>>> > >>>>> > >>>>> Colin > >>>>> > >>>>> --- > >>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 > >>>>> Room H7.26, Level 7, Building H, Monash University Caulfield 3145, > >>>>> > >>>> Australia > >>>> > >>>>> > >>>>>> -----Original Message----- > >>>>>> From: Yoshio Tanaka [mailto:yoshio.tanaka@aist.go.jp] > >>>>>> Sent: Tuesday, 5 December 2006 12:51 PM > >>>>>> To: Colin.Enticott@csse.monash.edu.au > >>>>>> Cc: D.Bannon@vpac.org; tmartin@physics.ucsd.edu; > >>>>>> navarro@mcs.anl.gov; > >>>>>> > >>>> gin- > >>>> > >>>>>> auth@ggf.org; gin-ops@ggf.org; yoshio.tanaka@aist.go.jp > >>>>>> Subject: Re: [gin-ops] [gin-auth] start Savannah run > >>>>>> > >>>>>> > >>>>>> Hi Colin, > >>>>>> > >>>>>> If you can login to these machines, see the globus > >>>>>> gatekeeper's log > >>>>>> > >>>> at: > >>>> > >>>>>> ${GLOBUS_LOCATION}/var/globus-gatekeeper.log > >>>>>> > >>>>>> You may find error logs such as no entry in mapfile and > >>>>>> failure in > >>>>>> tracing cert chain. > >>>>>> > >>>>>> Regards, > >>>>>> > >>>>>> -- > >>>>>> Yoshio Tanaka (yoshio.tanaka@aist.go.jp) > >>>>>> http://ninf.apgrid.org/ > >>>>>> http://www.apgridpma.org/ > >>>>>> > >>>>>> From: Colin Enticott <Colin.Enticott@csse.monash.edu.au> > >>>>>> Subject: RE: [gin-ops] [gin-auth] start Savannah run > >>>>>> Date: Tue, 05 Dec 2006 12:24:42 +1100 > >>>>>> Message-ID: <01c001c7180c$24c430e0$1e46c282@nail> > >>>>>> > >>>>>> > >>>>>>> Thanks Yoshio, > >>>>>>> > >>>>>>> So it looks like authentication issues as I can connect to > >>>>>>> port 2119 > >>>>>>> > >>>> on > >>>> > >>>>>> both > >>>>>> > >>>>>>> hosts: > >>>>>>> > >>>>>>> cme@edda$ globusrun -a -r tg-grid1.uc.teragrid.org > >>>>>>> > >>>>>>> GRAM Authentication test failure: connecting to the job manager > >>>>>>> > >>>> failed. > >>>> > >>>>>>> Possible reasons: job terminated, invalid job contact, network > >>>>>>> > >>>> problems, > >>>> > >>>>>> ... > >>>>>> > >>>>>>> cme@edda$ globusrun -a -r osg-gw-2.t2.ucsd.edu > >>>>>>> > >>>>>>> GRAM Authentication test failure: connecting to the job manager > >>>>>>> > >>>> failed. > >>>> > >>>>>>> Possible reasons: job terminated, invalid job contact, network > >>>>>>> > >>>> problems, > >>>> > >>>>>> ... > >>>>>> > >>>>>>> Regards, > >>>>>>> Colin > >>>>>>> > >>>>>>> --- > >>>>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 > >>>>>>> Room H7.26, Level 7, Building H, Monash University Caulfield > >>>>>>> 3145, > >>>>>>> > >>>>>> Australia > >>>>>> > >>>>>>> > >>>>>>>> -----Original Message----- > >>>>>>>> From: Yoshio Tanaka [mailto:yoshio.tanaka@aist.go.jp] > >>>>>>>> Sent: Tuesday, 5 December 2006 12:21 PM > >>>>>>>> To: Colin.Enticott@csse.monash.edu.au > >>>>>>>> Cc: D.Bannon@vpac.org; tmartin@physics.ucsd.edu; > >>>>>>>> > >>>> navarro@mcs.anl.gov; > >>>> > >>>>>> gin- > >>>>>> > >>>>>>>> auth@ggf.org; gin-ops@ggf.org; yoshio.tanaka@aist.go.jp > >>>>>>>> Subject: Re: [gin-ops] [gin-auth] start Savannah run > >>>>>>>> > >>>>>>>> > >>>>>>>> Hi Colin, > >>>>>>>> > >>>>>>>> Please test the authentication by the following command: > >>>>>>>> > >>>>>>>> % globusrun -a -r osg-gw-2.t2.ucsd.edu > >>>>>>>> > >>>>>>>> % globusrun -a -r tg-grid1.uc.teragrid.org > >>>>>>>> > >>>>>>>> Thanks, > >>>>>>>> > >>>>>>>> -- > >>>>>>>> Yoshio Tanaka (yoshio.tanaka@aist.go.jp) > >>>>>>>> http://ninf.apgrid.org/ > >>>>>>>> http://www.apgridpma.org/ > >>>>>>>> > >>>>>>>> > >>>>>>>> From: Colin Enticott <Colin.Enticott@csse.monash.edu.au> > >>>>>>>> Subject: Re: [gin-ops] [gin-auth] start Savannah run > >>>>>>>> Date: Tue, 05 Dec 2006 11:44:05 +1100 > >>>>>>>> Message-ID: <017401c71806$77cf6760$1e46c282@nail> > >>>>>>>> > >>>>>>>> > >>>>>>>>> Thanks David, > >>>>>>>>> > >>>>>>>>> But still the same problem. As you can see, my certificate > >>>>>>>>> > >>>> still > >>>> > >>>>>> works > >>>>>> > >>>>>>>> on > >>>>>>>> > >>>>>>>>> the vpac host and there is definitely no firewall in the way: > >>>>>>>>> > >>>>>>>>> cme@edda$ grid-proxy-init -cert usercert.pem.APACGrid -key > >>>>>>>>> userkey.pem.APACGrid > >>>>>>>>> Your identity: /C=AU/O=APACGrid/OU=Monash University/CN=Colin > >>>>>>>>> > >>>>>> Enticott > >>>>>> > >>>>>>>>> Enter GRID pass phrase for this identity: > >>>>>>>>> Creating proxy ................................... Done > >>>>>>>>> Your proxy is valid until: Tue Dec 5 23:28:47 2006 > >>>>>>>>> cme@edda$ globus-job-run osg-gw-2.t2.ucsd.edu/jobmanager-fork > >>>>>>>>> > >>>>>> /bin/uname > >>>>>> > >>>>>>>> -a > >>>>>>>> > >>>>>>>>> GRAM Job submission failed because the connection to the > >>>>>>>>> server > >>>>>>>>> > >>>>>> failed > >>>>>> > >>>>>>>>> (check host and port) (error code 12) > >>>>>>>>> cme@edda$ globus-job-run tg-grid1.uc.teragrid.org/jobmanager- > >>>>>>>>> > >>>> fork > >>>> > >>>>>>>> /bin/uname > >>>>>>>> > >>>>>>>>> -a > >>>>>>>>> GRAM Job submission failed because the connection to the > >>>>>>>>> server > >>>>>>>>> > >>>>>> failed > >>>>>> > >>>>>>>>> (check host and port) (error code 12) > >>>>>>>>> cme@edda$ globus-job-run ng1.vpac.org/jobmanager-fork /bin/ > >>>>>>>>> uname > >>>>>>>>> > >>>> -a > >>>> > >>>>>>>>> Linux ng1.vpac.org 2.6.16.29-xen #4 SMP Sun Oct 15 13:20:46 > >>>>>>>>> BST > >>>>>>>>> > >>>> 2006 > >>>> > >>>>>>>> i686 > >>>>>>>> > >>>>>>>>> i686 i386 GNU/Linux > >>>>>>>>> cme@edda$ telnet tg-grid1.uc.teragrid.org 2119 > >>>>>>>>> Trying 192.5.198.225... > >>>>>>>>> Connected to tg-grid1.uc.teragrid.org. > >>>>>>>>> Escape character is '^]'. > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> Connection closed by foreign host. > >>>>>>>>> cme@edda$ telnet osg-gw-2.t2.ucsd.edu 2119 > >>>>>>>>> Trying 137.110.141.17... > >>>>>>>>> Connected to osg-gw-2.t2.ucsd.edu. > >>>>>>>>> Escape character is '^]'. > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> Connection closed by foreign host. > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> Any other thoughts from anyone? > >>>>>>>>> > >>>>>>>>> Thanks, > >>>>>>>>> Colin > >>>>>>>>> > >>>>>>>>> --- > >>>>>>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 > >>>>>>>>> Room H7.26, Level 7, Building H, Monash University Caulfield > >>>>>>>>> > >>>> 3145, > >>>> > >>>>>>>> Australia > >>>>>>>> > >>>>>>>>> > >>>>>>>>>> -----Original Message----- > >>>>>>>>>> From: David Bannon [mailto:D.Bannon@vpac.org] > >>>>>>>>>> Sent: Monday, 4 December 2006 6:08 PM > >>>>>>>>>> To: JP Navarro > >>>>>>>>>> Cc: Colin Enticott; gin-auth@ggf.org; gin-ops@ggf.org; > >>>>>>>>>> > >>>> 'Terrence > >>>> > >>>>>>>> Martin' > >>>>>>>> > >>>>>>>>>> Subject: Re: [gin-auth] start Savannah run > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> Colin, you can run as a Gin user on any of the VPAC machines, > >>>>>>>>>> > >>>> my > >>>> > >>>>>> be > >>>>>> > >>>>>>>>>> easier to debug.... > >>>>>>>>>> > >>>>>>>>>> David > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> On Fri, 2006-12-01 at 12:34 -0600, JP Navarro wrote: > >>>>>>>>>> > >>>>>>>>>>> Colin, > >>>>>>>>>>> > >>>>>>>>>>> The error in the logs is below. Not sure what it means. > >>>>>>>>>>> > >>>> Could > >>>> > >>>>>> you > >>>>>> > >>>>>>>>>>> try this > >>>>>>>>>>> test again from your SDSC TeraGrid account so we can rule > >>>>>>>>>>> > >>>> out > >>>> > >>>>>>>>>>> software and > >>>>>>>>>>> firewall issues? > >>>>>>>>>>> > >>>>>>>>>>> Thanks, > >>>>>>>>>>> > >>>>>>>>>>> JP > >>>>>>>>>>> > >>>>>>>>>>> TIME: Thu Nov 30 18:49:42 2006 > >>>>>>>>>>> PID: 9608 -- Notice: 0: GATEKEEPER_ACCT_FD=5 > >>>>>>>>>>> > >>>>>> (/var/globus/prews- > >>>>>> > >>>>>>>>>>> gram-4.0.1-r3-i1/log/globus-gatekeeper.log) > >>>>>>>>>>> TIME: Thu Nov 30 18:49:42 2006 > >>>>>>>>>>> PID: 9608 -- Notice: 6: Got connection 198.202.88.52 at > >>>>>>>>>>> > >>>> Thu > >>>> > >>>>>> Nov 30 > >>>>>> > >>>>>>>>>>> 18:49:42 2006 > >>>>>>>>>>> > >>>>>>>>>>> Failed reading length 0 > >>>>>>>>>>> GSS authentication failure > >>>>>>>>>>> globus_gss_assist token :3: read failure: Connection > >>>>>>>>>>> > >>>> closed > >>>> > >>>>>>>>>>> Failure: GSS failed Major:01090000 Minor:00000000 > >>>>>>>>>>> > >>>> Token:00000003 > >>>> > >>>>>>>>>>> TIME: Thu Nov 30 18:49:42 2006 > >>>>>>>>>>> PID: 9608 -- Failure: GSS failed Major:01090000 > >>>>>>>>>>> > >>>> Minor:00000000 > >>>> > >>>>>>>>>>> Token:00000003 > >>>>>>>>>>> > >>>>>>>>>>> > >>>>>>>>>>> > >>>>>>>>>>> On Nov 30, 2006, at 7:05 PM, Colin Enticott wrote: > >>>>>>>>>>> > >>>>>>>>>>> > >>>>>>>>>>>> Thanks JP, > >>>>>>>>>>>> > >>>>>>>>>>>> But I am running into some problems. I've tried both from > >>>>>>>>>>>> > >>>> our > >>>> > >>>>>>>>>>>> server and > >>>>>>>>>>>> rocks-52 and this is what I get: > >>>>>>>>>>>> [cme@rocks-52 ~]$ globus-job-run tg-grid1.uc.teragrid.org/ > >>>>>>>>>>>> jobmanager-fork > >>>>>>>>>>>> /bin/uname -a > >>>>>>>>>>>> GRAM Job submission failed because the connection to the > >>>>>>>>>>>> > >>>>>> server > >>>>>> > >>>>>>>> failed > >>>>>>>> > >>>>>>>>>>>> (check host and port) (error code 12) > >>>>>>>>>>>> [cme@rocks-52 ~]$ grid-proxy-info > >>>>>>>>>>>> subject : /C=AU/O=APACGrid/OU=Monash University/CN=Colin > >>>>>>>>>>>> Enticott/CN=1087048434 > >>>>>>>>>>>> issuer : /C=AU/O=APACGrid/OU=Monash University/CN=Colin > >>>>>>>>>>>> > >>>>>> Enticott > >>>>>> > >>>>>>>>>>>> identity : /C=AU/O=APACGrid/OU=Monash University/CN=Colin > >>>>>>>>>>>> > >>>>>> Enticott > >>>>>> > >>>>>>>>>>>> type : Proxy draft (pre-RFC) compliant impersonation > >>>>>>>>>>>> > >>>> proxy > >>>> > >>>>>>>>>>>> strength : 512 bits > >>>>>>>>>>>> path : /home/cme/globus_proxy.APACGrid > >>>>>>>>>>>> timeleft : 836:30:26 (34.8 days) > >>>>>>>>>>>> [cme@rocks-52 ~]$ ssh tg-grid1.uc.teragrid.org > >>>>>>>>>>>> Warning: Permanently added 'tg-grid1.uc.teragrid.org' > >>>>>>>>>>>> > >>>> (RSA) to > >>>> > >>>>>> the > >>>>>> > >>>>>>>>>>>> list of > >>>>>>>>>>>> known hosts. > >>>>>>>>>>>> Permission denied (external- > >>>>>>>>>>>> > >>>>>>>> keyx,gssapi,publickey,gssapi,hostbased). > >>>>>>>> > >>>>>>>>>>>> [cme@rocks-52 ~]$ > >>>>>>>>>>>> > >>>>>>>>>>>> That is the certificate that I registered with. I also > >>>>>>>>>>>> > >>>> tried > >>>> > >>>>>> the > >>>>>> > >>>>>>>>>>>> ssh key > >>>>>>>>>>>> pair I put up on the pragma wiki. > >>>>>>>>>>>> > >>>>>>>>>>>> Any thoughts? > >>>>>>>>>>>> > >>>>>>>>>>>> Thanks, > >>>>>>>>>>>> Colin > >>>>>>>>>>>> > >>>>>>>>>>>> --- > >>>>>>>>>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 > >>>>>>>>>>>> Room H7.26, Level 7, Building H, Monash University > >>>>>>>>>>>> > >>>> Caulfield > >>>> > >>>>>> 3145, > >>>>>> > >>>>>>>>>>>> Australia > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>>> -----Original Message----- > >>>>>>>>>>>>> From: JP Navarro [mailto:navarro@mcs.anl.gov] > >>>>>>>>>>>>> Sent: Friday, 1 December 2006 2:47 AM > >>>>>>>>>>>>> To: Colin Enticott > >>>>>>>>>>>>> Cc: zhengc@sdsc.edu; 'Terrence Martin'; gin-ops@ggf.org; > >>>>>>>>>>>>> > >>>>>> 'Oscar > >>>>>> > >>>>>>>>>>>>> Koeroo'; > >>>>>>>>>>>>> gin-auth@ggf.org > >>>>>>>>>>>>> Subject: Re: start Savannah run > >>>>>>>>>>>>> > >>>>>>>>>>>>> Colin, > >>>>>>>>>>>>> > >>>>>>>>>>>>> You should be set to go on the UC/ANL TeraGrid cluster. > >>>>>>>>>>>>> > >>>>>>>>>>>>> GT4 Pre-WS GRAM: tg-grid1.uc.teragrid.org:2119 > >>>>>>>>>>>>> GT4 WS GRAM: tg-grid1.uc.teragrid.org:8443 (FORK, > >>>>>>>>>>>>> > >>>> PBS) > >>>> > >>>>>>>>>>>>> GT4 GridFTP: tg-gridftp.uc.teragrid.org:2811 > >>>>>>>>>>>>> > >>>>>>>>>>>>> Regards, > >>>>>>>>>>>>> > >>>>>>>>>>>>> JP > >>>>>>>>>>>>> > >>>>>>>>>>>>> On Nov 30, 2006, at 2:43 AM, Colin Enticott wrote: > >>>>>>>>>>>>> > >>>>>>>>>>>>> > >>>>>>>>>>>>>> Thankyou everyone. > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> I am now registered on the GIN VO (well, I appear here: > >>>>>>>>>>>>>> http://kuiken.nikhef.nl/gin.ggf.org/grid-mapfile). > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> What is my next step? > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> Thanks, > >>>>>>>>>>>>>> Colin > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> --- > >>>>>>>>>>>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 > >>>>>>>>>>>>>> Room H7.26, Level 7, Building H, Monash University > >>>>>>>>>>>>>> > >>>> Caulfield > >>>> > >>>>>>>> 3145, > >>>>>>>> > >>>>>>>>>>>>>> Australia > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> > >>>>>>>>>>>>>>> -----Original Message----- > >>>>>>>>>>>>>>> From: Cindy Zheng [mailto:zhengc@sdsc.edu] > >>>>>>>>>>>>>>> Sent: Thursday, 30 November 2006 11:59 AM > >>>>>>>>>>>>>>> To: 'Terrence Martin' > >>>>>>>>>>>>>>> Cc: 'JP Navarro'; gin-ops@ggf.org; 'Oscar Koeroo'; > >>>>>>>>>>>>>>> > >>>> 'Colin > >>>> > >>>>>>>>>>>>>>> Enticott'; gin- > >>>>>>>>>>>>>>> auth@ggf.org > >>>>>>>>>>>>>>> Subject: RE: FW: start Savannah run > >>>>>>>>>>>>>>> > >>>>>>>>>>>>>>> Thank you, Terrence! > >>>>>>>>>>>>>>> We'll wait to hear from Colin when Colin finishes > >>>>>>>>>>>>>>> registering to gin vo. > >>>>>>>>>>>>>>> Cindy > >>>>>>>>>>>>>>> > >>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> -----Original Message----- > >>>>>>>>>>>>>>>> From: Terrence Martin > >>>>>>>>>>>>>>>> > >>>> [mailto:tmartin@physics.ucsd.edu] > >>>> > >>>>>>>>>>>>>>>> Sent: Wednesday, November 29, 2006 11:36 AM > >>>>>>>>>>>>>>>> To: Oscar Koeroo > >>>>>>>>>>>>>>>> Cc: zhengc@sdsc.edu; 'JP Navarro'; gin-ops@ggf.org; > >>>>>>>>>>>>>>>> > >>>> 'Colin > >>>> > >>>>>>>>>>>>>>>> Enticott'; gin-auth@ggf.org > >>>>>>>>>>>>>>>> Subject: Re: FW: start Savannah run > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> Oscar Koeroo wrote: > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> Hi Terrence and Cindy, > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> Getting new users up for registration on the GIN VO > >>>>>>>>>>>>>>>>> > >>>> is > >>>> > >>>>>> easy. > >>>>>> > >>>>>>>>>>>>>>>>> To be > >>>>>>>>>>>>>>>>> able to access the secured website and for > >>>>>>>>>>>>>>>>> > >>>> authentication > >>>> > >>>>>>>> reasons > >>>>>>>> > >>>>>>>>>>>>>>>>> during the registration process new users must have > >>>>>>>>>>>>>>>>> > >>>> their > >>>> > >>>>>>>>>>>>>>>> certificate > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> loaded and ready in their webbrowser. The VOMS server > >>>>>>>>>>>>>>>>> > >>>> is > >>>> > >>>>>>>>>>>>>>>> loaded with > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> all IGTF accredited CAs including the Fermilab kCA. > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> Go to the website: > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> https://kuiken.nikhef.nl:8443/voms/gin.ggf.org/ and > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> apply for a "New user registration". > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> The usual VOMS configuration info is also available. > >>>>>>>>>>>>>>>>> > >>>> I > >>>> > >>>>>>>>>>>>>>>> don't know what > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> you'll need to populate a GUMS server. This VOMS > >>>>>>>>>>>>>>>>> > >>>> server > >>>> > >>>>>> is as > >>>>>> > >>>>>>>> any > >>>>>>>> > >>>>>>>>>>>>>>>>> other so I guess you can use your regular setup. > >>>>>>>>>>>>>>>>> In addition to the secured interface I've also made > >>>>>>>>>>>>>>>>> > >>>>>> available > >>>>>> > >>>>>>>> a > >>>>>>>> > >>>>>>>>>>>>>>>>> non-secured way of grabbing a grid-mapfile. > >>>>>>>>>>>>>>>>> http://kuiken.nikhef.nl/gin.ggf.org/grid-mapfile > >>>>>>>>>>>>>>>>> There is also an RSS-feed pointing to the grid- > >>>>>>>>>>>>>>>>> > >>>> mapfile > >>>> > >>>>>> and > >>>>>> > >>>>>>>>>>>>>>>> the secured > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> interface at > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> http://kuiken.nikhef.nl/gin.ggf.org/feed- > >>>>>>>>>>>>>>>> > >>>> gin.ggf.org.xml > >>>> > >>>>>>>>>>>>>>>>> Unfortunately I'm not aware of a clear guide. I do > >>>>>>>>>>>>>>>>> > >>>> know a > >>>> > >>>>>>>>>>>>>>>>> guide for > >>>>>>>>>>>>>>>>> creating the packed certificate files that go into > >>>>>>>>>>>>>>>>> > >>>> your > >>>> > >>>>>>>>>>>>>>>> browser if you > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> start from a two PEM formated files (certificate file > >>>>>>>>>>>>>>>>> > >>>> + > >>>> > >>>>>>>>>>>>>>>>> private key > >>>>>>>>>>>>>>>>> file) that's at > >>>>>>>>>>>>>>>>> > >>>> http://certificate.nikhef.nl/info/browser > >>>> > >>>>>>>>>>>>>>>>> Once a user has passed that stage, the registration > >>>>>>>>>>>>>>>>> > >>>> for > >>>> > >>>>>> the > >>>>>> > >>>>>>>>>>>>>>>> VO is as > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> trivial as any web-forum account registration. > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> I am assuming this user already has a grid cert since > >>>>>>>>>>>>>>>> > >>>> they > >>>> > >>>>>>>>>>>>>>>> list a DN so > >>>>>>>>>>>>>>>> only VOMS registration is required. Once that is done > >>>>>>>>>>>>>>>> > >>>>>> either I > >>>>>> > >>>>>>>>>>>>>>>> run my > >>>>>>>>>>>>>>>> update of GUMS manually or in 720/2 minutes on average > >>>>>>>>>>>>>>>> > >>>> the > >>>> > >>>>>>>>>>>>>>>> user will be > >>>>>>>>>>>>>>>> automatically downloaded into my GUMS database. I > >>>>>>>>>>>>>>>> > >>>> actually > >>>> > >>>>>> do > >>>>>> > >>>>>>>>>>>>>>>> not have > >>>>>>>>>>>>>>>> to do anything, but I can speed things up ever so > >>>>>>>>>>>>>>>> > >>>> slightly > >>>> > >>>>>> if > >>>>>> > >>>>>>>> I > >>>>>>>> > >>>>>>>>>>>>>>>> am in > >>>>>>>>>>>>>>>> the office and someone asks me to try refreshing gums. > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> Terrence > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> Oscar > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> Cindy Zheng wrote: > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>> Sounds right, Terrence. Let me ask Oscar who has > >>>>>>>>>>>>>>>>>> > >>>> helped > >>>> > >>>>>> me > >>>>>> > >>>>>>>>>>>>>>>> with GIN > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>> VO before. > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>> Hi, Oscar, > >>>>>>>>>>>>>>>>>> Could you advise Colin what need to be done to be > >>>>>>>>>>>>>>>>>> added in GIN VO? > >>>>>>>>>>>>>>>>>> I'm also cc'ing to gin-auth list. > >>>>>>>>>>>>>>>>>> If there is a guide for potential GIN users, please > >>>>>>>>>>>>>>>>>> let me know the url and I can link it to our GINOPS > >>>>>>>>>>>>>>>>>> page. > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>> Thanks, > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>> Cindy > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> -----Original Message----- > >>>>>>>>>>>>>>>>>>> From: Terrence Martin > >>>>>>>>>>>>>>>>>>> > >>>> [mailto:tmartin@physics.ucsd.edu] > >>>> > >>>>>>>> Sent: > >>>>>>>> > >>>>>>>>>>>>>>>>>>> Tuesday, November 28, 2006 3:24 PM > >>>>>>>>>>>>>>>>>>> To: zhengc@sdsc.edu > >>>>>>>>>>>>>>>>>>> Cc: 'JP Navarro'; gin-ops@ggf.org; 'Colin Enticott' > >>>>>>>>>>>>>>>>>>> Subject: Re: FW: start Savannah run > >>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> The quickest and easiest way for me is to have him > >>>>>>>>>>>>>>>>>>> > >>>>>> added to > >>>>>> > >>>>>>>>>>>>>>>>>>> a VO. > >>>>>>>>>>>>>>>>>>> How easy is it to add him to the GIN VO? One in > >>>>>>>>>>>>>>>>>>> > >>>> there I > >>>> > >>>>>>>>>>>>>>>> can hit my > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> gums reload and he will be able to access UCSD as a > >>>>>>>>>>>>>>>>>>> > >>>> GIN > >>>> > >>>>>>>>>>>>>>>>>>> user. Any > >>>>>>>>>>>>>>>>>>> other approach requires me hacking his DN into my > >>>>>>>>>>>>>>>>>>> > >>>> local > >>>> > >>>>>>>>>>>>>>>> VO which I > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> prefer to avoid and does not help him with any > >>>>>>>>>>>>>>>>>>> > >>>> other > >>>> > >>>>>> site. > >>>>>> > >>>>>>>>>>>>>>>>>>> Terrence > >>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> Cindy Zheng wrote: > >>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> Thanks, Terrence, for the quick reply! > >>>>>>>>>>>>>>>>>>>> Colin has not been a GIN user. > >>>>>>>>>>>>>>>>>>>> What do you think it's the best way to get colin > >>>>>>>>>>>>>>>>>>>> > >>>>>> access? > >>>>>> > >>>>>>>>>>>>>>>>>>>> Cindy > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>> -----Original Message----- > >>>>>>>>>>>>>>>>>>>>> From: Terrence Martin > >>>>>>>>>>>>>>>>>>>>> > >>>>>> [mailto:tmartin@physics.ucsd.edu] > >>>>>> > >>>>>>>> Sent: > >>>>>>>> > >>>>>>>>>>>>>>>>>>>>> Tuesday, November 28, 2006 2:53 PM > >>>>>>>>>>>>>>>>>>>>> To: zhengc@sdsc.edu > >>>>>>>>>>>>>>>>>>>>> Cc: 'JP Navarro'; gin-ops@ggf.org > >>>>>>>>>>>>>>>>>>>>> Subject: Re: FW: start Savannah run > >>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>> We only have a production cluster, but I should > >>>>>>>>>>>>>>>>>>>>> > >>>> still > >>>> > >>>>>>>>>>>>>>>> be > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> able to help. > >>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>> I do not seem to have Colin in my GUMS database > >>>>>>>>>>>>>>>>>>>>> > >>>>>> though > >>>>>> > >>>>>>>>>>>>>>>> for > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> GIN or any > >>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>> other VO. Should he be downloaded with GIN's > >>>>>>>>>>>>>>>>>>>>> > >>>> users? > >>>> > >>>>>>>>>>>>>>>>>>>>> Terrence > >>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>> Cindy Zheng wrote: > >>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>> Hi, JP and Terrence, > >>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>> Could you help Colin to get ready to run > >>>>>>>>>>>>>>>>>>>>>> > >>>> Savannah > >>>> > >>>>>>>>>>>>>>>>>>>>>> application on your GIN testbed clusters? > >>>>>>>>>>>>>>>>>>>>>> You can find Colin's user info at > >>>>>>>>>>>>>>>>>>>>>> http://wiki.pragma- > >>>>>>>>>>>>>>>>>>>>>> > >>>>>> grid.net/index.php?title=ColinDetails > >>>>>> > >>>>>>>>>>>>>>>>>>>>>> If you need more info or action from Colin, or > >>>>>>>>>>>>>>>>>>>>>> > >>>> have > >>>> > >>>>>>>>>>>>>>>> any questions > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>> for Colin or me, please let us know. > >>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>> Thank you very much! > >>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>> Cindy > >>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>> -----Original Message----- > >>>>>>>>>>>>>>>>>>>>>> From: Cindy Zheng [mailto:zhengc@sdsc.edu] Sent: > >>>>>>>>>>>>>>>>>>>>>> > >>>>>>>> Tuesday, > >>>>>>>> > >>>>>>>>>>>>>>>>>>>>>> November 28, 2006 2:31 PM > >>>>>>>>>>>>>>>>>>>>>> To: 'gin-ops@ggf.org' > >>>>>>>>>>>>>>>>>>>>>> Subject: start Savannah run > >>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>> Dear all, > >>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>> Thanks for all the people involved to help make > >>>>>>>>>>>>>>>>>>>>>> TDDFT application run and GIN testbed monitoring > >>>>>>>>>>>>>>>>>>>>>> very fruitful experiments! We have learned a lot > >>>>>>>>>>>>>>>>>>>>>> > >>>> and > >>>> > >>>>>>>> have > >>>>>>>> > >>>>>>>>>>>>>>>>>>>>>> presented our learnings at OGF and SC06. > >>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>> Let's continue our collaborative effort with our > >>>>>>>>>>>>>>>>>>>>>> > >>>>>> plan > >>>>>> > >>>>>>>>>>>>>>>> - start our > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>> next experiment with Savannah > >>>>>>>>>>>>>>>>>>>>>> fire simulation - a data-intensive application, > >>>>>>>>>>>>>>>>>>>>>> > >>>> to > >>>> > >>>>>>>>>>>>>>>> explore data > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>> related interoperation issues. > >>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>> Colin Enticott at Monash University of Australia > >>>>>>>>>>>>>>>>>>>>>> is the lead driver. Colin has documented the > >>>>>>>>>>>>>>>>>>>>>> introduction and requirements of this > >>>>>>>>>>>>>>>>>>>>>> > >>>> application at > >>>> > >>>>>>>>>>>>>>>>>>>>>> http://wiki.pragma- > >>>>>>>>>>>>>>>>>>>>>> > >>>> grid.net/index.php?title=Savannah > >>>> > >>>>>>>>>>>>>>>>>>>>>> or go to > >>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>> http://forge.gridforum.org/sf/wiki/do/viewPage/ > >>>>>>>>>>>>>>>>>>>>> projects.gin/wi > >>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> ki/GinOps > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>> click "Savannah" under "Applications", > >>>>>>>>>>>>>>>>>>>>> where "first Savannah experiment" is refering to > >>>>>>>>>>>>>>>>>>>>> a previous experiment in PRAGMA testbed. The > >>>>>>>>>>>>>>>>>>>>> "second Savannah experiment" is the one for GIN > >>>>>>>>>>>>>>>>>>>>> > >>>>>> testbed. > >>>>>> > >>>>>>>>>>>>>>>>>>>>> We like to run this application on all Grids in > >>>>>>>>>>>>>>>>>>>>> > >>>> GIN > >>>> > >>>>>>>>>>>>>>>> testbed, but > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>> in 2 steps. First, we will run it on > >>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> PRAGMA/TeraGrid/OSG - since > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>> these should be relatively easier to do. We like > >>>>>>>>>>>>>>>>>>>>> > >>>> to > >>>> > >>>>>> get > >>>>>> > >>>>>>>>>>>>>>>> this done > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>> before the year end. > >>>>>>>>>>>>>>>>>>>>> The next step, Colin will work with EGEE and > >>>>>>>>>>>>>>>>>>>>> > >>>>>> Nordugrid > >>>>>> > >>>>>>>>>>>>>>>>>>>>> to develop possible solutions, to enable > >>>>>>>>>>>>>>>>>>>>> > >>>>>> interoperation > >>>>>> > >>>>>>>>>>>>>>>>>>>>> and to include all 5 Grids in the run. > >>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>> Thanks in advance for your continued help with > >>>>>>>>>>>>>>>>>>>>> > >>>> this! > >>>> > >>>>>>>>>>>>>>>>>>>>> Cindy > >>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>> -- > >>>>>>>>>>> gin-auth mailing list > >>>>>>>>>>> gin-auth@ogf.org > >>>>>>>>>>> http://www.ogf.org/mailman/listinfo/gin-auth > >>>>>>>>>>> > >>>>>>>>> -- > >>>>>>>>> gin-ops mailing list > >>>>>>>>> gin-ops@ogf.org > >>>>>>>>> http://www.ogf.org/mailman/listinfo/gin-ops > >>>>>>>>> > >>> > >>> > >>> > >

Colin, There are two file-systems worth considering depending on your requirements. $TG_CLUSTER_SCRATCH (/disks/scratchgpfs1/ginuser) ~1 TB currently available High-performance parallel file-systems Currently not purged, but recommend you don't keep files there long term Not backed up $TG_CLUSTER_HOME (/home/ginuser) ~250G free as you noted Low performance NFS file-system Permanent space, but also request not be used for long term storage of large data sets Backed up A typical use case is to place programs, scripts, etc in $TG_CLUSTER_HOME, and input and intermediate data files in $TG_CLUSTER_SCRATCH. Final run results can be copied from $TG_CLUSTER_SCRATCH into permanent storage (like the TeraGrid's SRB), or copied to $TG_CLUSTER_HOME for backup. Regards, JP On Jan 3, 2007, at 6:12 PM, Colin Enticott wrote:
Thanks JP Navarro,
It is working again. Will there be any problems with using 80GB in /home/ginuser? There seems to be 250GB free.
Regards, Colin
--- Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 Room H7.26, Level 7, Building H, Monash University Caulfield 3145, Australia
-----Original Message----- From: JP Navarro [mailto:navarro@mcs.anl.gov] Sent: Thursday, 4 January 2007 3:00 AM To: Colin Enticott Cc: gin-auth@ggf.org; gin-ops@ggf.org; 'Terrence Martin'; zhengc@sdsc.edu Subject: Re: [gin-ops] [gin-auth] start Savannah run
Colin,
We didn't have the Monash University CA configured on tg- grid1.uc.teragrid.org. This has now been fixed.
Regards,
JP Navarro
On Jan 3, 2007, at 2:13 AM, Colin Enticott wrote:
First of all, Happy new year everyone!
Thankyou for your help last year.
I have two quick questions:
I am now receiving a "certificate expired" message from tg-grid1.uc.teragrid.org. My certificate still works elsewhere. Is it the server's certificate?
And on osg-gw-2.t2.ucsd.edu, I need to write ~80GB of data for the experiment. Which directory can I use?
Thanks, Colin
--- Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 Room H7.26, Level 7, Building H, Monash University Caulfield 3145, Australia
-----Original Message----- From: Terrence Martin [mailto:tmartin@physics.ucsd.edu] Sent: Tuesday, 5 December 2006 5:41 PM To: Colin Enticott Cc: 'Yoshio Tanaka'; D.Bannon@vpac.org; navarro@mcs.anl.gov; gin- auth@ggf.org; gin-ops@ggf.org Subject: Re: [gin-ops] [gin-auth] start Savannah run
colin, if you want to try logging into
colin@uaf-1.t2.ucsd.edu
run
source /data/vdt/setup.sh
then grab a cert with grid-proxy-init and give it a try.
It is the machine that all my users use to submit to my OSG site.
Terrence
Hi Yoshio,
I've tried it from 3 servers. On the server I have root access on, I just manually synced and I am still having the problem. I am wondering if
Colin Enticott wrote: the CA
certificate I sent is okay. It's the APAC CA files we use here on our servers.
On the Pragma resources, I have been using my old certificate (as initially there was teething problems with the new APAC CA). Can you update your server with the details below and I'll give it a try:
http://wiki.pragma-grid.net/index.php?title=ColinDetails
Thanks, Colin
--- Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 Room H7.26, Level 7, Building H, Monash University Caulfield 3145, Australia
-----Original Message----- From: Yoshio Tanaka [mailto:yoshio.tanaka@aist.go.jp] Sent: Tuesday, 5 December 2006 4:51 PM To: Colin.Enticott@csse.monash.edu.au Cc: D.Bannon@vpac.org; tmartin@physics.ucsd.edu; navarro@mcs.anl.gov; gin- auth@ggf.org; gin-ops@ggf.org; yoshio.tanaka@aist.go.jp Subject: Re: [gin-ops] [gin-auth] start Savannah run
Hi Colin,
Are you able to submit jobs to PRAGMA machines? If yes, the APAC CA on your machine should have no problem.
One point that I would like to confirm is... Is the time of your client machine correct? Do you use an NTP server for synchronize the time?
Thanks,
-- Yoshio Tanaka (yoshio.tanaka@aist.go.jp) http://ninf.apgrid.org/ http://www.apgridpma.org/
From: Colin Enticott <Colin.Enticott@csse.monash.edu.au> Subject: RE: [gin-ops] [gin-auth] start Savannah run Date: Tue, 05 Dec 2006 16:38:40 +1100 Message-ID: <01df01c7182f$9f59a3d0$1e46c282@nail>
> Hi Yoshio, > > I am unable to log in. But below is what JP sent me. Any > ideas on what > it
> means? > > Doing a Google I find: > The error might arise from an expired certificate or when > trying to > restore
> certification expiration date and job are in some state in the > Grid > execution list. > > I guess it might be a problem with the APAC CA on your > machines? Was > the CA
> set up previously? Or did you use the ones on my info page? > (This > leaves
> the question if I packaged them correctly). > > > On Fri, 2006-12-01 at 12:34 -0600, JP Navarro wrote: > > TIME: Thu Nov 30 18:49:42 2006 > PID: 9608 -- Notice: 0: GATEKEEPER_ACCT_FD=5 (/var/globus/ > prews- > gram-4.0.1-r3-i1/log/globus-gatekeeper.log) > TIME: Thu Nov 30 18:49:42 2006 > PID: 9608 -- Notice: 6: Got connection 198.202.88.52 at Thu > Nov 30 > 18:49:42 2006 > > Failed reading length 0 > GSS authentication failure > globus_gss_assist token :3: read failure: Connection closed > Failure: GSS failed Major:01090000 Minor:00000000 Token:00000003 > > TIME: Thu Nov 30 18:49:42 2006 > PID: 9608 -- Failure: GSS failed Major:01090000 Minor:00000000 > Token:00000003 > > > Colin > > --- > Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 > Room H7.26, Level 7, Building H, Monash University Caulfield > 3145, > Australia
> >> -----Original Message----- >> From: Yoshio Tanaka [mailto:yoshio.tanaka@aist.go.jp] >> Sent: Tuesday, 5 December 2006 12:51 PM >> To: Colin.Enticott@csse.monash.edu.au >> Cc: D.Bannon@vpac.org; tmartin@physics.ucsd.edu; >> navarro@mcs.anl.gov; >> gin-
>> auth@ggf.org; gin-ops@ggf.org; yoshio.tanaka@aist.go.jp >> Subject: Re: [gin-ops] [gin-auth] start Savannah run >> >> >> Hi Colin, >> >> If you can login to these machines, see the globus >> gatekeeper's log >> at:
>> ${GLOBUS_LOCATION}/var/globus-gatekeeper.log >> >> You may find error logs such as no entry in mapfile and >> failure in >> tracing cert chain. >> >> Regards, >> >> -- >> Yoshio Tanaka (yoshio.tanaka@aist.go.jp) >> http://ninf.apgrid.org/ >> http://www.apgridpma.org/ >> >> From: Colin Enticott <Colin.Enticott@csse.monash.edu.au> >> Subject: RE: [gin-ops] [gin-auth] start Savannah run >> Date: Tue, 05 Dec 2006 12:24:42 +1100 >> Message-ID: <01c001c7180c$24c430e0$1e46c282@nail> >> >> >>> Thanks Yoshio, >>> >>> So it looks like authentication issues as I can connect to >>> port 2119 >>> on
>> both >> >>> hosts: >>> >>> cme@edda$ globusrun -a -r tg-grid1.uc.teragrid.org >>> >>> GRAM Authentication test failure: connecting to the job >>> manager >>> failed.
>>> Possible reasons: job terminated, invalid job contact, network >>> problems,
>> ... >> >>> cme@edda$ globusrun -a -r osg-gw-2.t2.ucsd.edu >>> >>> GRAM Authentication test failure: connecting to the job >>> manager >>> failed.
>>> Possible reasons: job terminated, invalid job contact, network >>> problems,
>> ... >> >>> Regards, >>> Colin >>> >>> --- >>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 >>> Room H7.26, Level 7, Building H, Monash University Caulfield >>> 3145, >>> >> Australia >> >>> >>>> -----Original Message----- >>>> From: Yoshio Tanaka [mailto:yoshio.tanaka@aist.go.jp] >>>> Sent: Tuesday, 5 December 2006 12:21 PM >>>> To: Colin.Enticott@csse.monash.edu.au >>>> Cc: D.Bannon@vpac.org; tmartin@physics.ucsd.edu; >>>> navarro@mcs.anl.gov;
>> gin- >> >>>> auth@ggf.org; gin-ops@ggf.org; yoshio.tanaka@aist.go.jp >>>> Subject: Re: [gin-ops] [gin-auth] start Savannah run >>>> >>>> >>>> Hi Colin, >>>> >>>> Please test the authentication by the following command: >>>> >>>> % globusrun -a -r osg-gw-2.t2.ucsd.edu >>>> >>>> % globusrun -a -r tg-grid1.uc.teragrid.org >>>> >>>> Thanks, >>>> >>>> -- >>>> Yoshio Tanaka (yoshio.tanaka@aist.go.jp) >>>> http://ninf.apgrid.org/ >>>> http://www.apgridpma.org/ >>>> >>>> >>>> From: Colin Enticott <Colin.Enticott@csse.monash.edu.au> >>>> Subject: Re: [gin-ops] [gin-auth] start Savannah run >>>> Date: Tue, 05 Dec 2006 11:44:05 +1100 >>>> Message-ID: <017401c71806$77cf6760$1e46c282@nail> >>>> >>>> >>>>> Thanks David, >>>>> >>>>> But still the same problem. As you can see, my certificate >>>>> still
>> works >> >>>> on >>>> >>>>> the vpac host and there is definitely no firewall in the >>>>> way: >>>>> >>>>> cme@edda$ grid-proxy-init -cert usercert.pem.APACGrid -key >>>>> userkey.pem.APACGrid >>>>> Your identity: /C=AU/O=APACGrid/OU=Monash University/ >>>>> CN=Colin >>>>> >> Enticott >> >>>>> Enter GRID pass phrase for this identity: >>>>> Creating proxy ................................... Done >>>>> Your proxy is valid until: Tue Dec 5 23:28:47 2006 >>>>> cme@edda$ globus-job-run osg-gw-2.t2.ucsd.edu/jobmanager- >>>>> fork >>>>> >> /bin/uname >> >>>> -a >>>> >>>>> GRAM Job submission failed because the connection to the >>>>> server >>>>> >> failed >> >>>>> (check host and port) (error code 12) >>>>> cme@edda$ globus-job-run tg-grid1.uc.teragrid.org/ >>>>> jobmanager- >>>>> fork
>>>> /bin/uname >>>> >>>>> -a >>>>> GRAM Job submission failed because the connection to the >>>>> server >>>>> >> failed >> >>>>> (check host and port) (error code 12) >>>>> cme@edda$ globus-job-run ng1.vpac.org/jobmanager-fork /bin/ >>>>> uname >>>>> -a
>>>>> Linux ng1.vpac.org 2.6.16.29-xen #4 SMP Sun Oct 15 13:20:46 >>>>> BST >>>>> 2006
>>>> i686 >>>> >>>>> i686 i386 GNU/Linux >>>>> cme@edda$ telnet tg-grid1.uc.teragrid.org 2119 >>>>> Trying 192.5.198.225... >>>>> Connected to tg-grid1.uc.teragrid.org. >>>>> Escape character is '^]'. >>>>> >>>>> >>>>> Connection closed by foreign host. >>>>> cme@edda$ telnet osg-gw-2.t2.ucsd.edu 2119 >>>>> Trying 137.110.141.17... >>>>> Connected to osg-gw-2.t2.ucsd.edu. >>>>> Escape character is '^]'. >>>>> >>>>> >>>>> Connection closed by foreign host. >>>>> >>>>> >>>>> Any other thoughts from anyone? >>>>> >>>>> Thanks, >>>>> Colin >>>>> >>>>> --- >>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 >>>>> Room H7.26, Level 7, Building H, Monash University Caulfield >>>>> 3145,
>>>> Australia >>>> >>>>> >>>>>> -----Original Message----- >>>>>> From: David Bannon [mailto:D.Bannon@vpac.org] >>>>>> Sent: Monday, 4 December 2006 6:08 PM >>>>>> To: JP Navarro >>>>>> Cc: Colin Enticott; gin-auth@ggf.org; gin-ops@ggf.org; >>>>>> 'Terrence
>>>> Martin' >>>> >>>>>> Subject: Re: [gin-auth] start Savannah run >>>>>> >>>>>> >>>>>> Colin, you can run as a Gin user on any of the VPAC >>>>>> machines, >>>>>> my
>> be >> >>>>>> easier to debug.... >>>>>> >>>>>> David >>>>>> >>>>>> >>>>>> On Fri, 2006-12-01 at 12:34 -0600, JP Navarro wrote: >>>>>> >>>>>>> Colin, >>>>>>> >>>>>>> The error in the logs is below. Not sure what it means. >>>>>>> Could
>> you >> >>>>>>> try this >>>>>>> test again from your SDSC TeraGrid account so we can rule >>>>>>> out
>>>>>>> software and >>>>>>> firewall issues? >>>>>>> >>>>>>> Thanks, >>>>>>> >>>>>>> JP >>>>>>> >>>>>>> TIME: Thu Nov 30 18:49:42 2006 >>>>>>> PID: 9608 -- Notice: 0: GATEKEEPER_ACCT_FD=5 >>>>>>> >> (/var/globus/prews- >> >>>>>>> gram-4.0.1-r3-i1/log/globus-gatekeeper.log) >>>>>>> TIME: Thu Nov 30 18:49:42 2006 >>>>>>> PID: 9608 -- Notice: 6: Got connection 198.202.88.52 at >>>>>>> Thu
>> Nov 30 >> >>>>>>> 18:49:42 2006 >>>>>>> >>>>>>> Failed reading length 0 >>>>>>> GSS authentication failure >>>>>>> globus_gss_assist token :3: read failure: Connection >>>>>>> closed
>>>>>>> Failure: GSS failed Major:01090000 Minor:00000000 >>>>>>> Token:00000003
>>>>>>> TIME: Thu Nov 30 18:49:42 2006 >>>>>>> PID: 9608 -- Failure: GSS failed Major:01090000 >>>>>>> Minor:00000000
>>>>>>> Token:00000003 >>>>>>> >>>>>>> >>>>>>> >>>>>>> On Nov 30, 2006, at 7:05 PM, Colin Enticott wrote: >>>>>>> >>>>>>> >>>>>>>> Thanks JP, >>>>>>>> >>>>>>>> But I am running into some problems. I've tried both >>>>>>>> from >>>>>>>> our
>>>>>>>> server and >>>>>>>> rocks-52 and this is what I get: >>>>>>>> [cme@rocks-52 ~]$ globus-job-run tg- >>>>>>>> grid1.uc.teragrid.org/ >>>>>>>> jobmanager-fork >>>>>>>> /bin/uname -a >>>>>>>> GRAM Job submission failed because the connection to the >>>>>>>> >> server >> >>>> failed >>>> >>>>>>>> (check host and port) (error code 12) >>>>>>>> [cme@rocks-52 ~]$ grid-proxy-info >>>>>>>> subject : /C=AU/O=APACGrid/OU=Monash University/CN=Colin >>>>>>>> Enticott/CN=1087048434 >>>>>>>> issuer : /C=AU/O=APACGrid/OU=Monash University/CN=Colin >>>>>>>> >> Enticott >> >>>>>>>> identity : /C=AU/O=APACGrid/OU=Monash University/CN=Colin >>>>>>>> >> Enticott >> >>>>>>>> type : Proxy draft (pre-RFC) compliant impersonation >>>>>>>> proxy
>>>>>>>> strength : 512 bits >>>>>>>> path : /home/cme/globus_proxy.APACGrid >>>>>>>> timeleft : 836:30:26 (34.8 days) >>>>>>>> [cme@rocks-52 ~]$ ssh tg-grid1.uc.teragrid.org >>>>>>>> Warning: Permanently added 'tg-grid1.uc.teragrid.org' >>>>>>>> (RSA) to
>> the >> >>>>>>>> list of >>>>>>>> known hosts. >>>>>>>> Permission denied (external- >>>>>>>> >>>> keyx,gssapi,publickey,gssapi,hostbased). >>>> >>>>>>>> [cme@rocks-52 ~]$ >>>>>>>> >>>>>>>> That is the certificate that I registered with. I also >>>>>>>> tried
>> the >> >>>>>>>> ssh key >>>>>>>> pair I put up on the pragma wiki. >>>>>>>> >>>>>>>> Any thoughts? >>>>>>>> >>>>>>>> Thanks, >>>>>>>> Colin >>>>>>>> >>>>>>>> --- >>>>>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 >>>>>>>> Room H7.26, Level 7, Building H, Monash University >>>>>>>> Caulfield
>> 3145, >> >>>>>>>> Australia >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>>> -----Original Message----- >>>>>>>>> From: JP Navarro [mailto:navarro@mcs.anl.gov] >>>>>>>>> Sent: Friday, 1 December 2006 2:47 AM >>>>>>>>> To: Colin Enticott >>>>>>>>> Cc: zhengc@sdsc.edu; 'Terrence Martin'; gin-ops@ggf.org; >>>>>>>>> >> 'Oscar >> >>>>>>>>> Koeroo'; >>>>>>>>> gin-auth@ggf.org >>>>>>>>> Subject: Re: start Savannah run >>>>>>>>> >>>>>>>>> Colin, >>>>>>>>> >>>>>>>>> You should be set to go on the UC/ANL TeraGrid cluster. >>>>>>>>> >>>>>>>>> GT4 Pre-WS GRAM: tg-grid1.uc.teragrid.org:2119 >>>>>>>>> GT4 WS GRAM: tg-grid1.uc.teragrid.org:8443 (FORK, >>>>>>>>> PBS)
>>>>>>>>> GT4 GridFTP: tg-gridftp.uc.teragrid.org:2811 >>>>>>>>> >>>>>>>>> Regards, >>>>>>>>> >>>>>>>>> JP >>>>>>>>> >>>>>>>>> On Nov 30, 2006, at 2:43 AM, Colin Enticott wrote: >>>>>>>>> >>>>>>>>> >>>>>>>>>> Thankyou everyone. >>>>>>>>>> >>>>>>>>>> I am now registered on the GIN VO (well, I appear here: >>>>>>>>>> http://kuiken.nikhef.nl/gin.ggf.org/grid-mapfile). >>>>>>>>>> >>>>>>>>>> What is my next step? >>>>>>>>>> >>>>>>>>>> Thanks, >>>>>>>>>> Colin >>>>>>>>>> >>>>>>>>>> --- >>>>>>>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 >>>>>>>>>> 2215 >>>>>>>>>> Room H7.26, Level 7, Building H, Monash University >>>>>>>>>> Caulfield
>>>> 3145, >>>> >>>>>>>>>> Australia >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>>>>>>> -----Original Message----- >>>>>>>>>>> From: Cindy Zheng [mailto:zhengc@sdsc.edu] >>>>>>>>>>> Sent: Thursday, 30 November 2006 11:59 AM >>>>>>>>>>> To: 'Terrence Martin' >>>>>>>>>>> Cc: 'JP Navarro'; gin-ops@ggf.org; 'Oscar Koeroo'; >>>>>>>>>>> 'Colin
>>>>>>>>>>> Enticott'; gin- >>>>>>>>>>> auth@ggf.org >>>>>>>>>>> Subject: RE: FW: start Savannah run >>>>>>>>>>> >>>>>>>>>>> Thank you, Terrence! >>>>>>>>>>> We'll wait to hear from Colin when Colin finishes >>>>>>>>>>> registering to gin vo. >>>>>>>>>>> Cindy >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>>> -----Original Message----- >>>>>>>>>>>> From: Terrence Martin >>>>>>>>>>>> [mailto:tmartin@physics.ucsd.edu]
>>>>>>>>>>>> Sent: Wednesday, November 29, 2006 11:36 AM >>>>>>>>>>>> To: Oscar Koeroo >>>>>>>>>>>> Cc: zhengc@sdsc.edu; 'JP Navarro'; gin-ops@ggf.org; >>>>>>>>>>>> 'Colin
>>>>>>>>>>>> Enticott'; gin-auth@ggf.org >>>>>>>>>>>> Subject: Re: FW: start Savannah run >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> Oscar Koeroo wrote: >>>>>>>>>>>> >>>>>>>>>>>>> Hi Terrence and Cindy, >>>>>>>>>>>>> >>>>>>>>>>>>> Getting new users up for registration on the GIN VO >>>>>>>>>>>>> is
>> easy. >> >>>>>>>>>>>>> To be >>>>>>>>>>>>> able to access the secured website and for >>>>>>>>>>>>> authentication
>>>> reasons >>>> >>>>>>>>>>>>> during the registration process new users must have >>>>>>>>>>>>> their
>>>>>>>>>>>> certificate >>>>>>>>>>>> >>>>>>>>>>>>> loaded and ready in their webbrowser. The VOMS >>>>>>>>>>>>> server >>>>>>>>>>>>> is
>>>>>>>>>>>> loaded with >>>>>>>>>>>> >>>>>>>>>>>>> all IGTF accredited CAs including the Fermilab kCA. >>>>>>>>>>>>> >>>>>>>>>>>>> Go to the website: >>>>>>>>>>>>> >>>>>>>>>>>> https://kuiken.nikhef.nl:8443/voms/gin.ggf.org/ and >>>>>>>>>>>> >>>>>>>>>>>>> apply for a "New user registration". >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>> The usual VOMS configuration info is also available. >>>>>>>>>>>>> I
>>>>>>>>>>>> don't know what >>>>>>>>>>>> >>>>>>>>>>>>> you'll need to populate a GUMS server. This VOMS >>>>>>>>>>>>> server
>> is as >> >>>> any >>>> >>>>>>>>>>>>> other so I guess you can use your regular setup. >>>>>>>>>>>>> In addition to the secured interface I've also made >>>>>>>>>>>>> >> available >> >>>> a >>>> >>>>>>>>>>>>> non-secured way of grabbing a grid-mapfile. >>>>>>>>>>>>> http://kuiken.nikhef.nl/gin.ggf.org/grid-mapfile >>>>>>>>>>>>> There is also an RSS-feed pointing to the grid- >>>>>>>>>>>>> mapfile
>> and >> >>>>>>>>>>>> the secured >>>>>>>>>>>> >>>>>>>>>>>>> interface at >>>>>>>>>>>>> >>>>>>>>>>>> http://kuiken.nikhef.nl/gin.ggf.org/feed- >>>>>>>>>>>> gin.ggf.org.xml
>>>>>>>>>>>>> Unfortunately I'm not aware of a clear guide. I do >>>>>>>>>>>>> know a
>>>>>>>>>>>>> guide for >>>>>>>>>>>>> creating the packed certificate files that go into >>>>>>>>>>>>> your
>>>>>>>>>>>> browser if you >>>>>>>>>>>> >>>>>>>>>>>>> start from a two PEM formated files (certificate >>>>>>>>>>>>> file >>>>>>>>>>>>> +
>>>>>>>>>>>>> private key >>>>>>>>>>>>> file) that's at >>>>>>>>>>>>> http://certificate.nikhef.nl/info/browser
>>>>>>>>>>>>> Once a user has passed that stage, the registration >>>>>>>>>>>>> for
>> the >> >>>>>>>>>>>> VO is as >>>>>>>>>>>> >>>>>>>>>>>>> trivial as any web-forum account registration. >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>> I am assuming this user already has a grid cert since >>>>>>>>>>>> they
>>>>>>>>>>>> list a DN so >>>>>>>>>>>> only VOMS registration is required. Once that is done >>>>>>>>>>>> >> either I >> >>>>>>>>>>>> run my >>>>>>>>>>>> update of GUMS manually or in 720/2 minutes on >>>>>>>>>>>> average >>>>>>>>>>>> the
>>>>>>>>>>>> user will be >>>>>>>>>>>> automatically downloaded into my GUMS database. I >>>>>>>>>>>> actually
>> do >> >>>>>>>>>>>> not have >>>>>>>>>>>> to do anything, but I can speed things up ever so >>>>>>>>>>>> slightly
>> if >> >>>> I >>>> >>>>>>>>>>>> am in >>>>>>>>>>>> the office and someone asks me to try refreshing >>>>>>>>>>>> gums. >>>>>>>>>>>> >>>>>>>>>>>> Terrence >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>>> Oscar >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>> Cindy Zheng wrote: >>>>>>>>>>>>> >>>>>>>>>>>>>> Sounds right, Terrence. Let me ask Oscar who has >>>>>>>>>>>>>> helped
>> me >> >>>>>>>>>>>> with GIN >>>>>>>>>>>> >>>>>>>>>>>>>> VO before. >>>>>>>>>>>>>> >>>>>>>>>>>>>> Hi, Oscar, >>>>>>>>>>>>>> Could you advise Colin what need to be done to be >>>>>>>>>>>>>> added in GIN VO? >>>>>>>>>>>>>> I'm also cc'ing to gin-auth list. >>>>>>>>>>>>>> If there is a guide for potential GIN users, please >>>>>>>>>>>>>> let me know the url and I can link it to our GINOPS >>>>>>>>>>>>>> page. >>>>>>>>>>>>>> >>>>>>>>>>>>>> Thanks, >>>>>>>>>>>>>> >>>>>>>>>>>>>> Cindy >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>>> -----Original Message----- >>>>>>>>>>>>>>> From: Terrence Martin >>>>>>>>>>>>>>> [mailto:tmartin@physics.ucsd.edu]
>>>> Sent: >>>> >>>>>>>>>>>>>>> Tuesday, November 28, 2006 3:24 PM >>>>>>>>>>>>>>> To: zhengc@sdsc.edu >>>>>>>>>>>>>>> Cc: 'JP Navarro'; gin-ops@ggf.org; 'Colin >>>>>>>>>>>>>>> Enticott' >>>>>>>>>>>>>>> Subject: Re: FW: start Savannah run >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> The quickest and easiest way for me is to have him >>>>>>>>>>>>>>> >> added to >> >>>>>>>>>>>>>>> a VO. >>>>>>>>>>>>>>> How easy is it to add him to the GIN VO? One in >>>>>>>>>>>>>>> there I
>>>>>>>>>>>> can hit my >>>>>>>>>>>> >>>>>>>>>>>>>>> gums reload and he will be able to access UCSD >>>>>>>>>>>>>>> as a >>>>>>>>>>>>>>> GIN
>>>>>>>>>>>>>>> user. Any >>>>>>>>>>>>>>> other approach requires me hacking his DN into my >>>>>>>>>>>>>>> local
>>>>>>>>>>>> VO which I >>>>>>>>>>>> >>>>>>>>>>>>>>> prefer to avoid and does not help him with any >>>>>>>>>>>>>>> other
>> site. >> >>>>>>>>>>>>>>> Terrence >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> Cindy Zheng wrote: >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> Thanks, Terrence, for the quick reply! >>>>>>>>>>>>>>>> Colin has not been a GIN user. >>>>>>>>>>>>>>>> What do you think it's the best way to get colin >>>>>>>>>>>>>>>> >> access? >> >>>>>>>>>>>>>>>> Cindy >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> -----Original Message----- >>>>>>>>>>>>>>>>> From: Terrence Martin >>>>>>>>>>>>>>>>> >> [mailto:tmartin@physics.ucsd.edu] >> >>>> Sent: >>>> >>>>>>>>>>>>>>>>> Tuesday, November 28, 2006 2:53 PM >>>>>>>>>>>>>>>>> To: zhengc@sdsc.edu >>>>>>>>>>>>>>>>> Cc: 'JP Navarro'; gin-ops@ggf.org >>>>>>>>>>>>>>>>> Subject: Re: FW: start Savannah run >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> We only have a production cluster, but I should >>>>>>>>>>>>>>>>> still
>>>>>>>>>>>> be >>>>>>>>>>>> >>>>>>>>>>>>>>> able to help. >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> I do not seem to have Colin in my GUMS database >>>>>>>>>>>>>>>>> >> though >> >>>>>>>>>>>> for >>>>>>>>>>>> >>>>>>>>>>>>>>> GIN or any >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> other VO. Should he be downloaded with GIN's >>>>>>>>>>>>>>>>> users?
>>>>>>>>>>>>>>>>> Terrence >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> Cindy Zheng wrote: >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Hi, JP and Terrence, >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Could you help Colin to get ready to run >>>>>>>>>>>>>>>>>> Savannah
>>>>>>>>>>>>>>>>>> application on your GIN testbed clusters? >>>>>>>>>>>>>>>>>> You can find Colin's user info at >>>>>>>>>>>>>>>>>> http://wiki.pragma- >>>>>>>>>>>>>>>>>> >> grid.net/index.php?title=ColinDetails >> >>>>>>>>>>>>>>>>>> If you need more info or action from Colin, or >>>>>>>>>>>>>>>>>> have
>>>>>>>>>>>> any questions >>>>>>>>>>>> >>>>>>>>>>>>>>>>>> for Colin or me, please let us know. >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Thank you very much! >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Cindy >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> -----Original Message----- >>>>>>>>>>>>>>>>>> From: Cindy Zheng [mailto:zhengc@sdsc.edu] >>>>>>>>>>>>>>>>>> Sent: >>>>>>>>>>>>>>>>>> >>>> Tuesday, >>>> >>>>>>>>>>>>>>>>>> November 28, 2006 2:31 PM >>>>>>>>>>>>>>>>>> To: 'gin-ops@ggf.org' >>>>>>>>>>>>>>>>>> Subject: start Savannah run >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Dear all, >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Thanks for all the people involved to help make >>>>>>>>>>>>>>>>>> TDDFT application run and GIN testbed >>>>>>>>>>>>>>>>>> monitoring >>>>>>>>>>>>>>>>>> very fruitful experiments! We have learned a >>>>>>>>>>>>>>>>>> lot >>>>>>>>>>>>>>>>>> and
>>>> have >>>> >>>>>>>>>>>>>>>>>> presented our learnings at OGF and SC06. >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Let's continue our collaborative effort with >>>>>>>>>>>>>>>>>> our >>>>>>>>>>>>>>>>>> >> plan >> >>>>>>>>>>>> - start our >>>>>>>>>>>> >>>>>>>>>>>>>>>>>> next experiment with Savannah >>>>>>>>>>>>>>>>>> fire simulation - a data-intensive application, >>>>>>>>>>>>>>>>>> to
>>>>>>>>>>>> explore data >>>>>>>>>>>> >>>>>>>>>>>>>>>>>> related interoperation issues. >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Colin Enticott at Monash University of >>>>>>>>>>>>>>>>>> Australia >>>>>>>>>>>>>>>>>> is the lead driver. Colin has documented the >>>>>>>>>>>>>>>>>> introduction and requirements of this >>>>>>>>>>>>>>>>>> application at
>>>>>>>>>>>>>>>>>> http://wiki.pragma- >>>>>>>>>>>>>>>>>> grid.net/index.php?title=Savannah
>>>>>>>>>>>>>>>>>> or go to >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> http://forge.gridforum.org/sf/wiki/do/viewPage/ >>>>>>>>>>>>>>>>> projects.gin/wi >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> ki/GinOps >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> click "Savannah" under "Applications", >>>>>>>>>>>>>>>>> where "first Savannah experiment" is refering to >>>>>>>>>>>>>>>>> a previous experiment in PRAGMA testbed. The >>>>>>>>>>>>>>>>> "second Savannah experiment" is the one for GIN >>>>>>>>>>>>>>>>> >> testbed. >> >>>>>>>>>>>>>>>>> We like to run this application on all Grids in >>>>>>>>>>>>>>>>> GIN
>>>>>>>>>>>> testbed, but >>>>>>>>>>>> >>>>>>>>>>>>>>>>> in 2 steps. First, we will run it on >>>>>>>>>>>>>>>>> >>>>>>>>>>>> PRAGMA/TeraGrid/OSG - since >>>>>>>>>>>> >>>>>>>>>>>>>>>>> these should be relatively easier to do. We like >>>>>>>>>>>>>>>>> to
>> get >> >>>>>>>>>>>> this done >>>>>>>>>>>> >>>>>>>>>>>>>>>>> before the year end. >>>>>>>>>>>>>>>>> The next step, Colin will work with EGEE and >>>>>>>>>>>>>>>>> >> Nordugrid >> >>>>>>>>>>>>>>>>> to develop possible solutions, to enable >>>>>>>>>>>>>>>>> >> interoperation >> >>>>>>>>>>>>>>>>> and to include all 5 Grids in the run. >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> Thanks in advance for your continued help with >>>>>>>>>>>>>>>>> this!
>>>>>>>>>>>>>>>>> Cindy >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>> -- >>>>>>> gin-auth mailing list >>>>>>> gin-auth@ogf.org >>>>>>> http://www.ogf.org/mailman/listinfo/gin-auth >>>>>>> >>>>> -- >>>>> gin-ops mailing list >>>>> gin-ops@ogf.org >>>>> http://www.ogf.org/mailman/listinfo/gin-ops >>>>>

Hi JP Navarro, The same problem has happened again. Output from gt2.4: $ globusrun -a -r globus.infotech.monash.edu.au GRAM Authentication test successful $ globusrun -a -r tg-grid1.uc.teragrid.org GRAM Authentication test failure: authentication failed: GSS Major Status: Authentication Failed GSS Minor Status Error Chain: init.c:499: globus_gss_assist_init_sec_context_async: Error during context initialization init_sec_context.c:171: gss_init_sec_context: SSLv3 handshake problems globus_i_gsi_gss_utils.c:888: globus_i_gsi_gss_handshake: Unable to verify remote side's credentials globus_i_gsi_gss_utils.c:854: globus_i_gsi_gss_handshake: SSLv3 handshake problems: Couldn't do ssl handshake OpenSSL Error: s3_pkt.c:1046: in library: SSL routines, function SSL3_READ_BYTES: sslv3 alert certificate expired I recently renewed my APAC certificate, but it should be the same. globus.infotech.monash.edu.au worked without change. Help! Regards, Colin --- Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 Room H7.26, Level 7, Building H, Monash University Caulfield 3145, Australia > -----Original Message----- > From: JP Navarro [mailto:navarro@mcs.anl.gov] > Sent: Thursday, 4 January 2007 3:00 AM > To: Colin Enticott > Cc: gin-auth@ggf.org; gin-ops@ggf.org; 'Terrence Martin'; zhengc@sdsc.edu > Subject: Re: [gin-ops] [gin-auth] start Savannah run > > Colin, > > We didn't have the Monash University CA configured on tg- > grid1.uc.teragrid.org. > This has now been fixed. > > Regards, > > JP Navarro > > On Jan 3, 2007, at 2:13 AM, Colin Enticott wrote: > > > First of all, Happy new year everyone! > > > > Thankyou for your help last year. > > > > I have two quick questions: > > > > I am now receiving a "certificate expired" message from > > tg-grid1.uc.teragrid.org. My certificate still works elsewhere. > > Is it the > > server's certificate? > > > > And on osg-gw-2.t2.ucsd.edu, I need to write ~80GB of data for the > > experiment. Which directory can I use? > > > > Thanks, > > Colin > > > > --- > > Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 > > Room H7.26, Level 7, Building H, Monash University Caulfield 3145, > > Australia > > > > > >> -----Original Message----- > >> From: Terrence Martin [mailto:tmartin@physics.ucsd.edu] > >> Sent: Tuesday, 5 December 2006 5:41 PM > >> To: Colin Enticott > >> Cc: 'Yoshio Tanaka'; D.Bannon@vpac.org; navarro@mcs.anl.gov; gin- > >> auth@ggf.org; gin-ops@ggf.org > >> Subject: Re: [gin-ops] [gin-auth] start Savannah run > >> > >> colin, if you want to try logging into > >> > >> colin@uaf-1.t2.ucsd.edu > >> > >> run > >> > >> source /data/vdt/setup.sh > >> > >> then grab a cert with grid-proxy-init and give it a try. > >> > >> It is the machine that all my users use to submit to my OSG site. > >> > >> Terrence > >> > >> > >> > >> Colin Enticott wrote: > >>> Hi Yoshio, > >>> > >>> I've tried it from 3 servers. On the server I have root access > >>> on, I > >> just > >>> manually synced and I am still having the problem. I am > >>> wondering if > >> the CA > >>> certificate I sent is okay. It's the APAC CA files we use here > >>> on our > >>> servers. > >>> > >>> On the Pragma resources, I have been using my old certificate (as > >> initially > >>> there was teething problems with the new APAC CA). Can you > >>> update your > >>> server with the details below and I'll give it a try: > >>> > >>> http://wiki.pragma-grid.net/index.php?title=ColinDetails > >>> > >>> Thanks, > >>> Colin > >>> > >>> --- > >>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 > >>> Room H7.26, Level 7, Building H, Monash University Caulfield 3145, > >> Australia > >>> > >>> > >>> > >>>> -----Original Message----- > >>>> From: Yoshio Tanaka [mailto:yoshio.tanaka@aist.go.jp] > >>>> Sent: Tuesday, 5 December 2006 4:51 PM > >>>> To: Colin.Enticott@csse.monash.edu.au > >>>> Cc: D.Bannon@vpac.org; tmartin@physics.ucsd.edu; > >>>> navarro@mcs.anl.gov; > >> gin- > >>>> auth@ggf.org; gin-ops@ggf.org; yoshio.tanaka@aist.go.jp > >>>> Subject: Re: [gin-ops] [gin-auth] start Savannah run > >>>> > >>>> > >>>> Hi Colin, > >>>> > >>>> Are you able to submit jobs to PRAGMA machines? > >>>> If yes, the APAC CA on your machine should have no problem. > >>>> > >>>> One point that I would like to confirm is... > >>>> Is the time of your client machine correct? Do you use an NTP > >>>> server > >>>> for synchronize the time? > >>>> > >>>> Thanks, > >>>> > >>>> -- > >>>> Yoshio Tanaka (yoshio.tanaka@aist.go.jp) > >>>> http://ninf.apgrid.org/ > >>>> http://www.apgridpma.org/ > >>>> > >>>> > >>>> From: Colin Enticott <Colin.Enticott@csse.monash.edu.au> > >>>> Subject: RE: [gin-ops] [gin-auth] start Savannah run > >>>> Date: Tue, 05 Dec 2006 16:38:40 +1100 > >>>> Message-ID: <01df01c7182f$9f59a3d0$1e46c282@nail> > >>>> > >>>> > >>>>> Hi Yoshio, > >>>>> > >>>>> I am unable to log in. But below is what JP sent me. Any ideas on > >> what > >>>>> > >>>> it > >>>> > >>>>> means? > >>>>> > >>>>> Doing a Google I find: > >>>>> The error might arise from an expired certificate or when > >>>>> trying to > >>>>> > >>>> restore > >>>> > >>>>> certification expiration date and job are in some state in the > >>>>> Grid > >>>>> execution list. > >>>>> > >>>>> I guess it might be a problem with the APAC CA on your > >>>>> machines? Was > >>>>> > >>>> the CA > >>>> > >>>>> set up previously? Or did you use the ones on my info page? (This > >>>>> > >>>> leaves > >>>> > >>>>> the question if I packaged them correctly). > >>>>> > >>>>> > >>>>> On Fri, 2006-12-01 at 12:34 -0600, JP Navarro wrote: > >>>>> > >>>>> TIME: Thu Nov 30 18:49:42 2006 > >>>>> PID: 9608 -- Notice: 0: GATEKEEPER_ACCT_FD=5 (/var/globus/prews- > >>>>> gram-4.0.1-r3-i1/log/globus-gatekeeper.log) > >>>>> TIME: Thu Nov 30 18:49:42 2006 > >>>>> PID: 9608 -- Notice: 6: Got connection 198.202.88.52 at Thu > >>>>> Nov 30 > >>>>> 18:49:42 2006 > >>>>> > >>>>> Failed reading length 0 > >>>>> GSS authentication failure > >>>>> globus_gss_assist token :3: read failure: Connection closed > >>>>> Failure: GSS failed Major:01090000 Minor:00000000 Token:00000003 > >>>>> > >>>>> TIME: Thu Nov 30 18:49:42 2006 > >>>>> PID: 9608 -- Failure: GSS failed Major:01090000 Minor:00000000 > >>>>> Token:00000003 > >>>>> > >>>>> > >>>>> Colin > >>>>> > >>>>> --- > >>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 > >>>>> Room H7.26, Level 7, Building H, Monash University Caulfield 3145, > >>>>> > >>>> Australia > >>>> > >>>>> > >>>>>> -----Original Message----- > >>>>>> From: Yoshio Tanaka [mailto:yoshio.tanaka@aist.go.jp] > >>>>>> Sent: Tuesday, 5 December 2006 12:51 PM > >>>>>> To: Colin.Enticott@csse.monash.edu.au > >>>>>> Cc: D.Bannon@vpac.org; tmartin@physics.ucsd.edu; > >>>>>> navarro@mcs.anl.gov; > >>>>>> > >>>> gin- > >>>> > >>>>>> auth@ggf.org; gin-ops@ggf.org; yoshio.tanaka@aist.go.jp > >>>>>> Subject: Re: [gin-ops] [gin-auth] start Savannah run > >>>>>> > >>>>>> > >>>>>> Hi Colin, > >>>>>> > >>>>>> If you can login to these machines, see the globus > >>>>>> gatekeeper's log > >>>>>> > >>>> at: > >>>> > >>>>>> ${GLOBUS_LOCATION}/var/globus-gatekeeper.log > >>>>>> > >>>>>> You may find error logs such as no entry in mapfile and > >>>>>> failure in > >>>>>> tracing cert chain. > >>>>>> > >>>>>> Regards, > >>>>>> > >>>>>> -- > >>>>>> Yoshio Tanaka (yoshio.tanaka@aist.go.jp) > >>>>>> http://ninf.apgrid.org/ > >>>>>> http://www.apgridpma.org/ > >>>>>> > >>>>>> From: Colin Enticott <Colin.Enticott@csse.monash.edu.au> > >>>>>> Subject: RE: [gin-ops] [gin-auth] start Savannah run > >>>>>> Date: Tue, 05 Dec 2006 12:24:42 +1100 > >>>>>> Message-ID: <01c001c7180c$24c430e0$1e46c282@nail> > >>>>>> > >>>>>> > >>>>>>> Thanks Yoshio, > >>>>>>> > >>>>>>> So it looks like authentication issues as I can connect to > >>>>>>> port 2119 > >>>>>>> > >>>> on > >>>> > >>>>>> both > >>>>>> > >>>>>>> hosts: > >>>>>>> > >>>>>>> cme@edda$ globusrun -a -r tg-grid1.uc.teragrid.org > >>>>>>> > >>>>>>> GRAM Authentication test failure: connecting to the job manager > >>>>>>> > >>>> failed. > >>>> > >>>>>>> Possible reasons: job terminated, invalid job contact, network > >>>>>>> > >>>> problems, > >>>> > >>>>>> ... > >>>>>> > >>>>>>> cme@edda$ globusrun -a -r osg-gw-2.t2.ucsd.edu > >>>>>>> > >>>>>>> GRAM Authentication test failure: connecting to the job manager > >>>>>>> > >>>> failed. > >>>> > >>>>>>> Possible reasons: job terminated, invalid job contact, network > >>>>>>> > >>>> problems, > >>>> > >>>>>> ... > >>>>>> > >>>>>>> Regards, > >>>>>>> Colin > >>>>>>> > >>>>>>> --- > >>>>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 > >>>>>>> Room H7.26, Level 7, Building H, Monash University Caulfield > >>>>>>> 3145, > >>>>>>> > >>>>>> Australia > >>>>>> > >>>>>>> > >>>>>>>> -----Original Message----- > >>>>>>>> From: Yoshio Tanaka [mailto:yoshio.tanaka@aist.go.jp] > >>>>>>>> Sent: Tuesday, 5 December 2006 12:21 PM > >>>>>>>> To: Colin.Enticott@csse.monash.edu.au > >>>>>>>> Cc: D.Bannon@vpac.org; tmartin@physics.ucsd.edu; > >>>>>>>> > >>>> navarro@mcs.anl.gov; > >>>> > >>>>>> gin- > >>>>>> > >>>>>>>> auth@ggf.org; gin-ops@ggf.org; yoshio.tanaka@aist.go.jp > >>>>>>>> Subject: Re: [gin-ops] [gin-auth] start Savannah run > >>>>>>>> > >>>>>>>> > >>>>>>>> Hi Colin, > >>>>>>>> > >>>>>>>> Please test the authentication by the following command: > >>>>>>>> > >>>>>>>> % globusrun -a -r osg-gw-2.t2.ucsd.edu > >>>>>>>> > >>>>>>>> % globusrun -a -r tg-grid1.uc.teragrid.org > >>>>>>>> > >>>>>>>> Thanks, > >>>>>>>> > >>>>>>>> -- > >>>>>>>> Yoshio Tanaka (yoshio.tanaka@aist.go.jp) > >>>>>>>> http://ninf.apgrid.org/ > >>>>>>>> http://www.apgridpma.org/ > >>>>>>>> > >>>>>>>> > >>>>>>>> From: Colin Enticott <Colin.Enticott@csse.monash.edu.au> > >>>>>>>> Subject: Re: [gin-ops] [gin-auth] start Savannah run > >>>>>>>> Date: Tue, 05 Dec 2006 11:44:05 +1100 > >>>>>>>> Message-ID: <017401c71806$77cf6760$1e46c282@nail> > >>>>>>>> > >>>>>>>> > >>>>>>>>> Thanks David, > >>>>>>>>> > >>>>>>>>> But still the same problem. As you can see, my certificate > >>>>>>>>> > >>>> still > >>>> > >>>>>> works > >>>>>> > >>>>>>>> on > >>>>>>>> > >>>>>>>>> the vpac host and there is definitely no firewall in the way: > >>>>>>>>> > >>>>>>>>> cme@edda$ grid-proxy-init -cert usercert.pem.APACGrid -key > >>>>>>>>> userkey.pem.APACGrid > >>>>>>>>> Your identity: /C=AU/O=APACGrid/OU=Monash University/CN=Colin > >>>>>>>>> > >>>>>> Enticott > >>>>>> > >>>>>>>>> Enter GRID pass phrase for this identity: > >>>>>>>>> Creating proxy ................................... Done > >>>>>>>>> Your proxy is valid until: Tue Dec 5 23:28:47 2006 > >>>>>>>>> cme@edda$ globus-job-run osg-gw-2.t2.ucsd.edu/jobmanager-fork > >>>>>>>>> > >>>>>> /bin/uname > >>>>>> > >>>>>>>> -a > >>>>>>>> > >>>>>>>>> GRAM Job submission failed because the connection to the > >>>>>>>>> server > >>>>>>>>> > >>>>>> failed > >>>>>> > >>>>>>>>> (check host and port) (error code 12) > >>>>>>>>> cme@edda$ globus-job-run tg-grid1.uc.teragrid.org/jobmanager- > >>>>>>>>> > >>>> fork > >>>> > >>>>>>>> /bin/uname > >>>>>>>> > >>>>>>>>> -a > >>>>>>>>> GRAM Job submission failed because the connection to the > >>>>>>>>> server > >>>>>>>>> > >>>>>> failed > >>>>>> > >>>>>>>>> (check host and port) (error code 12) > >>>>>>>>> cme@edda$ globus-job-run ng1.vpac.org/jobmanager-fork /bin/ > >>>>>>>>> uname > >>>>>>>>> > >>>> -a > >>>> > >>>>>>>>> Linux ng1.vpac.org 2.6.16.29-xen #4 SMP Sun Oct 15 13:20:46 > >>>>>>>>> BST > >>>>>>>>> > >>>> 2006 > >>>> > >>>>>>>> i686 > >>>>>>>> > >>>>>>>>> i686 i386 GNU/Linux > >>>>>>>>> cme@edda$ telnet tg-grid1.uc.teragrid.org 2119 > >>>>>>>>> Trying 192.5.198.225... > >>>>>>>>> Connected to tg-grid1.uc.teragrid.org. > >>>>>>>>> Escape character is '^]'. > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> Connection closed by foreign host. > >>>>>>>>> cme@edda$ telnet osg-gw-2.t2.ucsd.edu 2119 > >>>>>>>>> Trying 137.110.141.17... > >>>>>>>>> Connected to osg-gw-2.t2.ucsd.edu. > >>>>>>>>> Escape character is '^]'. > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> Connection closed by foreign host. > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> Any other thoughts from anyone? > >>>>>>>>> > >>>>>>>>> Thanks, > >>>>>>>>> Colin > >>>>>>>>> > >>>>>>>>> --- > >>>>>>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 > >>>>>>>>> Room H7.26, Level 7, Building H, Monash University Caulfield > >>>>>>>>> > >>>> 3145, > >>>> > >>>>>>>> Australia > >>>>>>>> > >>>>>>>>> > >>>>>>>>>> -----Original Message----- > >>>>>>>>>> From: David Bannon [mailto:D.Bannon@vpac.org] > >>>>>>>>>> Sent: Monday, 4 December 2006 6:08 PM > >>>>>>>>>> To: JP Navarro > >>>>>>>>>> Cc: Colin Enticott; gin-auth@ggf.org; gin-ops@ggf.org; > >>>>>>>>>> > >>>> 'Terrence > >>>> > >>>>>>>> Martin' > >>>>>>>> > >>>>>>>>>> Subject: Re: [gin-auth] start Savannah run > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> Colin, you can run as a Gin user on any of the VPAC machines, > >>>>>>>>>> > >>>> my > >>>> > >>>>>> be > >>>>>> > >>>>>>>>>> easier to debug.... > >>>>>>>>>> > >>>>>>>>>> David > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> On Fri, 2006-12-01 at 12:34 -0600, JP Navarro wrote: > >>>>>>>>>> > >>>>>>>>>>> Colin, > >>>>>>>>>>> > >>>>>>>>>>> The error in the logs is below. Not sure what it means. > >>>>>>>>>>> > >>>> Could > >>>> > >>>>>> you > >>>>>> > >>>>>>>>>>> try this > >>>>>>>>>>> test again from your SDSC TeraGrid account so we can rule > >>>>>>>>>>> > >>>> out > >>>> > >>>>>>>>>>> software and > >>>>>>>>>>> firewall issues? > >>>>>>>>>>> > >>>>>>>>>>> Thanks, > >>>>>>>>>>> > >>>>>>>>>>> JP > >>>>>>>>>>> > >>>>>>>>>>> TIME: Thu Nov 30 18:49:42 2006 > >>>>>>>>>>> PID: 9608 -- Notice: 0: GATEKEEPER_ACCT_FD=5 > >>>>>>>>>>> > >>>>>> (/var/globus/prews- > >>>>>> > >>>>>>>>>>> gram-4.0.1-r3-i1/log/globus-gatekeeper.log) > >>>>>>>>>>> TIME: Thu Nov 30 18:49:42 2006 > >>>>>>>>>>> PID: 9608 -- Notice: 6: Got connection 198.202.88.52 at > >>>>>>>>>>> > >>>> Thu > >>>> > >>>>>> Nov 30 > >>>>>> > >>>>>>>>>>> 18:49:42 2006 > >>>>>>>>>>> > >>>>>>>>>>> Failed reading length 0 > >>>>>>>>>>> GSS authentication failure > >>>>>>>>>>> globus_gss_assist token :3: read failure: Connection > >>>>>>>>>>> > >>>> closed > >>>> > >>>>>>>>>>> Failure: GSS failed Major:01090000 Minor:00000000 > >>>>>>>>>>> > >>>> Token:00000003 > >>>> > >>>>>>>>>>> TIME: Thu Nov 30 18:49:42 2006 > >>>>>>>>>>> PID: 9608 -- Failure: GSS failed Major:01090000 > >>>>>>>>>>> > >>>> Minor:00000000 > >>>> > >>>>>>>>>>> Token:00000003 > >>>>>>>>>>> > >>>>>>>>>>> > >>>>>>>>>>> > >>>>>>>>>>> On Nov 30, 2006, at 7:05 PM, Colin Enticott wrote: > >>>>>>>>>>> > >>>>>>>>>>> > >>>>>>>>>>>> Thanks JP, > >>>>>>>>>>>> > >>>>>>>>>>>> But I am running into some problems. I've tried both from > >>>>>>>>>>>> > >>>> our > >>>> > >>>>>>>>>>>> server and > >>>>>>>>>>>> rocks-52 and this is what I get: > >>>>>>>>>>>> [cme@rocks-52 ~]$ globus-job-run tg-grid1.uc.teragrid.org/ > >>>>>>>>>>>> jobmanager-fork > >>>>>>>>>>>> /bin/uname -a > >>>>>>>>>>>> GRAM Job submission failed because the connection to the > >>>>>>>>>>>> > >>>>>> server > >>>>>> > >>>>>>>> failed > >>>>>>>> > >>>>>>>>>>>> (check host and port) (error code 12) > >>>>>>>>>>>> [cme@rocks-52 ~]$ grid-proxy-info > >>>>>>>>>>>> subject : /C=AU/O=APACGrid/OU=Monash University/CN=Colin > >>>>>>>>>>>> Enticott/CN=1087048434 > >>>>>>>>>>>> issuer : /C=AU/O=APACGrid/OU=Monash University/CN=Colin > >>>>>>>>>>>> > >>>>>> Enticott > >>>>>> > >>>>>>>>>>>> identity : /C=AU/O=APACGrid/OU=Monash University/CN=Colin > >>>>>>>>>>>> > >>>>>> Enticott > >>>>>> > >>>>>>>>>>>> type : Proxy draft (pre-RFC) compliant impersonation > >>>>>>>>>>>> > >>>> proxy > >>>> > >>>>>>>>>>>> strength : 512 bits > >>>>>>>>>>>> path : /home/cme/globus_proxy.APACGrid > >>>>>>>>>>>> timeleft : 836:30:26 (34.8 days) > >>>>>>>>>>>> [cme@rocks-52 ~]$ ssh tg-grid1.uc.teragrid.org > >>>>>>>>>>>> Warning: Permanently added 'tg-grid1.uc.teragrid.org' > >>>>>>>>>>>> > >>>> (RSA) to > >>>> > >>>>>> the > >>>>>> > >>>>>>>>>>>> list of > >>>>>>>>>>>> known hosts. > >>>>>>>>>>>> Permission denied (external- > >>>>>>>>>>>> > >>>>>>>> keyx,gssapi,publickey,gssapi,hostbased). > >>>>>>>> > >>>>>>>>>>>> [cme@rocks-52 ~]$ > >>>>>>>>>>>> > >>>>>>>>>>>> That is the certificate that I registered with. I also > >>>>>>>>>>>> > >>>> tried > >>>> > >>>>>> the > >>>>>> > >>>>>>>>>>>> ssh key > >>>>>>>>>>>> pair I put up on the pragma wiki. > >>>>>>>>>>>> > >>>>>>>>>>>> Any thoughts? > >>>>>>>>>>>> > >>>>>>>>>>>> Thanks, > >>>>>>>>>>>> Colin > >>>>>>>>>>>> > >>>>>>>>>>>> --- > >>>>>>>>>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 > >>>>>>>>>>>> Room H7.26, Level 7, Building H, Monash University > >>>>>>>>>>>> > >>>> Caulfield > >>>> > >>>>>> 3145, > >>>>>> > >>>>>>>>>>>> Australia > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>>> -----Original Message----- > >>>>>>>>>>>>> From: JP Navarro [mailto:navarro@mcs.anl.gov] > >>>>>>>>>>>>> Sent: Friday, 1 December 2006 2:47 AM > >>>>>>>>>>>>> To: Colin Enticott > >>>>>>>>>>>>> Cc: zhengc@sdsc.edu; 'Terrence Martin'; gin-ops@ggf.org; > >>>>>>>>>>>>> > >>>>>> 'Oscar > >>>>>> > >>>>>>>>>>>>> Koeroo'; > >>>>>>>>>>>>> gin-auth@ggf.org > >>>>>>>>>>>>> Subject: Re: start Savannah run > >>>>>>>>>>>>> > >>>>>>>>>>>>> Colin, > >>>>>>>>>>>>> > >>>>>>>>>>>>> You should be set to go on the UC/ANL TeraGrid cluster. > >>>>>>>>>>>>> > >>>>>>>>>>>>> GT4 Pre-WS GRAM: tg-grid1.uc.teragrid.org:2119 > >>>>>>>>>>>>> GT4 WS GRAM: tg-grid1.uc.teragrid.org:8443 (FORK, > >>>>>>>>>>>>> > >>>> PBS) > >>>> > >>>>>>>>>>>>> GT4 GridFTP: tg-gridftp.uc.teragrid.org:2811 > >>>>>>>>>>>>> > >>>>>>>>>>>>> Regards, > >>>>>>>>>>>>> > >>>>>>>>>>>>> JP > >>>>>>>>>>>>> > >>>>>>>>>>>>> On Nov 30, 2006, at 2:43 AM, Colin Enticott wrote: > >>>>>>>>>>>>> > >>>>>>>>>>>>> > >>>>>>>>>>>>>> Thankyou everyone. > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> I am now registered on the GIN VO (well, I appear here: > >>>>>>>>>>>>>> http://kuiken.nikhef.nl/gin.ggf.org/grid-mapfile). > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> What is my next step? > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> Thanks, > >>>>>>>>>>>>>> Colin > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> --- > >>>>>>>>>>>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 > >>>>>>>>>>>>>> Room H7.26, Level 7, Building H, Monash University > >>>>>>>>>>>>>> > >>>> Caulfield > >>>> > >>>>>>>> 3145, > >>>>>>>> > >>>>>>>>>>>>>> Australia > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> > >>>>>>>>>>>>>> > >>>>>>>>>>>>>>> -----Original Message----- > >>>>>>>>>>>>>>> From: Cindy Zheng [mailto:zhengc@sdsc.edu] > >>>>>>>>>>>>>>> Sent: Thursday, 30 November 2006 11:59 AM > >>>>>>>>>>>>>>> To: 'Terrence Martin' > >>>>>>>>>>>>>>> Cc: 'JP Navarro'; gin-ops@ggf.org; 'Oscar Koeroo'; > >>>>>>>>>>>>>>> > >>>> 'Colin > >>>> > >>>>>>>>>>>>>>> Enticott'; gin- > >>>>>>>>>>>>>>> auth@ggf.org > >>>>>>>>>>>>>>> Subject: RE: FW: start Savannah run > >>>>>>>>>>>>>>> > >>>>>>>>>>>>>>> Thank you, Terrence! > >>>>>>>>>>>>>>> We'll wait to hear from Colin when Colin finishes > >>>>>>>>>>>>>>> registering to gin vo. > >>>>>>>>>>>>>>> Cindy > >>>>>>>>>>>>>>> > >>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> -----Original Message----- > >>>>>>>>>>>>>>>> From: Terrence Martin > >>>>>>>>>>>>>>>> > >>>> [mailto:tmartin@physics.ucsd.edu] > >>>> > >>>>>>>>>>>>>>>> Sent: Wednesday, November 29, 2006 11:36 AM > >>>>>>>>>>>>>>>> To: Oscar Koeroo > >>>>>>>>>>>>>>>> Cc: zhengc@sdsc.edu; 'JP Navarro'; gin-ops@ggf.org; > >>>>>>>>>>>>>>>> > >>>> 'Colin > >>>> > >>>>>>>>>>>>>>>> Enticott'; gin-auth@ggf.org > >>>>>>>>>>>>>>>> Subject: Re: FW: start Savannah run > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> Oscar Koeroo wrote: > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> Hi Terrence and Cindy, > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> Getting new users up for registration on the GIN VO > >>>>>>>>>>>>>>>>> > >>>> is > >>>> > >>>>>> easy. > >>>>>> > >>>>>>>>>>>>>>>>> To be > >>>>>>>>>>>>>>>>> able to access the secured website and for > >>>>>>>>>>>>>>>>> > >>>> authentication > >>>> > >>>>>>>> reasons > >>>>>>>> > >>>>>>>>>>>>>>>>> during the registration process new users must have > >>>>>>>>>>>>>>>>> > >>>> their > >>>> > >>>>>>>>>>>>>>>> certificate > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> loaded and ready in their webbrowser. The VOMS server > >>>>>>>>>>>>>>>>> > >>>> is > >>>> > >>>>>>>>>>>>>>>> loaded with > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> all IGTF accredited CAs including the Fermilab kCA. > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> Go to the website: > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> https://kuiken.nikhef.nl:8443/voms/gin.ggf.org/ and > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> apply for a "New user registration". > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> The usual VOMS configuration info is also available. > >>>>>>>>>>>>>>>>> > >>>> I > >>>> > >>>>>>>>>>>>>>>> don't know what > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> you'll need to populate a GUMS server. This VOMS > >>>>>>>>>>>>>>>>> > >>>> server > >>>> > >>>>>> is as > >>>>>> > >>>>>>>> any > >>>>>>>> > >>>>>>>>>>>>>>>>> other so I guess you can use your regular setup. > >>>>>>>>>>>>>>>>> In addition to the secured interface I've also made > >>>>>>>>>>>>>>>>> > >>>>>> available > >>>>>> > >>>>>>>> a > >>>>>>>> > >>>>>>>>>>>>>>>>> non-secured way of grabbing a grid-mapfile. > >>>>>>>>>>>>>>>>> http://kuiken.nikhef.nl/gin.ggf.org/grid-mapfile > >>>>>>>>>>>>>>>>> There is also an RSS-feed pointing to the grid- > >>>>>>>>>>>>>>>>> > >>>> mapfile > >>>> > >>>>>> and > >>>>>> > >>>>>>>>>>>>>>>> the secured > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> interface at > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> http://kuiken.nikhef.nl/gin.ggf.org/feed- > >>>>>>>>>>>>>>>> > >>>> gin.ggf.org.xml > >>>> > >>>>>>>>>>>>>>>>> Unfortunately I'm not aware of a clear guide. I do > >>>>>>>>>>>>>>>>> > >>>> know a > >>>> > >>>>>>>>>>>>>>>>> guide for > >>>>>>>>>>>>>>>>> creating the packed certificate files that go into > >>>>>>>>>>>>>>>>> > >>>> your > >>>> > >>>>>>>>>>>>>>>> browser if you > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> start from a two PEM formated files (certificate file > >>>>>>>>>>>>>>>>> > >>>> + > >>>> > >>>>>>>>>>>>>>>>> private key > >>>>>>>>>>>>>>>>> file) that's at > >>>>>>>>>>>>>>>>> > >>>> http://certificate.nikhef.nl/info/browser > >>>> > >>>>>>>>>>>>>>>>> Once a user has passed that stage, the registration > >>>>>>>>>>>>>>>>> > >>>> for > >>>> > >>>>>> the > >>>>>> > >>>>>>>>>>>>>>>> VO is as > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> trivial as any web-forum account registration. > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> I am assuming this user already has a grid cert since > >>>>>>>>>>>>>>>> > >>>> they > >>>> > >>>>>>>>>>>>>>>> list a DN so > >>>>>>>>>>>>>>>> only VOMS registration is required. Once that is done > >>>>>>>>>>>>>>>> > >>>>>> either I > >>>>>> > >>>>>>>>>>>>>>>> run my > >>>>>>>>>>>>>>>> update of GUMS manually or in 720/2 minutes on average > >>>>>>>>>>>>>>>> > >>>> the > >>>> > >>>>>>>>>>>>>>>> user will be > >>>>>>>>>>>>>>>> automatically downloaded into my GUMS database. I > >>>>>>>>>>>>>>>> > >>>> actually > >>>> > >>>>>> do > >>>>>> > >>>>>>>>>>>>>>>> not have > >>>>>>>>>>>>>>>> to do anything, but I can speed things up ever so > >>>>>>>>>>>>>>>> > >>>> slightly > >>>> > >>>>>> if > >>>>>> > >>>>>>>> I > >>>>>>>> > >>>>>>>>>>>>>>>> am in > >>>>>>>>>>>>>>>> the office and someone asks me to try refreshing gums. > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> Terrence > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> Oscar > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>> Cindy Zheng wrote: > >>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>> Sounds right, Terrence. Let me ask Oscar who has > >>>>>>>>>>>>>>>>>> > >>>> helped > >>>> > >>>>>> me > >>>>>> > >>>>>>>>>>>>>>>> with GIN > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>> VO before. > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>> Hi, Oscar, > >>>>>>>>>>>>>>>>>> Could you advise Colin what need to be done to be > >>>>>>>>>>>>>>>>>> added in GIN VO? > >>>>>>>>>>>>>>>>>> I'm also cc'ing to gin-auth list. > >>>>>>>>>>>>>>>>>> If there is a guide for potential GIN users, please > >>>>>>>>>>>>>>>>>> let me know the url and I can link it to our GINOPS > >>>>>>>>>>>>>>>>>> page. > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>> Thanks, > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>> Cindy > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> -----Original Message----- > >>>>>>>>>>>>>>>>>>> From: Terrence Martin > >>>>>>>>>>>>>>>>>>> > >>>> [mailto:tmartin@physics.ucsd.edu] > >>>> > >>>>>>>> Sent: > >>>>>>>> > >>>>>>>>>>>>>>>>>>> Tuesday, November 28, 2006 3:24 PM > >>>>>>>>>>>>>>>>>>> To: zhengc@sdsc.edu > >>>>>>>>>>>>>>>>>>> Cc: 'JP Navarro'; gin-ops@ggf.org; 'Colin Enticott' > >>>>>>>>>>>>>>>>>>> Subject: Re: FW: start Savannah run > >>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> The quickest and easiest way for me is to have him > >>>>>>>>>>>>>>>>>>> > >>>>>> added to > >>>>>> > >>>>>>>>>>>>>>>>>>> a VO. > >>>>>>>>>>>>>>>>>>> How easy is it to add him to the GIN VO? One in > >>>>>>>>>>>>>>>>>>> > >>>> there I > >>>> > >>>>>>>>>>>>>>>> can hit my > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> gums reload and he will be able to access UCSD as a > >>>>>>>>>>>>>>>>>>> > >>>> GIN > >>>> > >>>>>>>>>>>>>>>>>>> user. Any > >>>>>>>>>>>>>>>>>>> other approach requires me hacking his DN into my > >>>>>>>>>>>>>>>>>>> > >>>> local > >>>> > >>>>>>>>>>>>>>>> VO which I > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> prefer to avoid and does not help him with any > >>>>>>>>>>>>>>>>>>> > >>>> other > >>>> > >>>>>> site. > >>>>>> > >>>>>>>>>>>>>>>>>>> Terrence > >>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> Cindy Zheng wrote: > >>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> Thanks, Terrence, for the quick reply! > >>>>>>>>>>>>>>>>>>>> Colin has not been a GIN user. > >>>>>>>>>>>>>>>>>>>> What do you think it's the best way to get colin > >>>>>>>>>>>>>>>>>>>> > >>>>>> access? > >>>>>> > >>>>>>>>>>>>>>>>>>>> Cindy > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>> -----Original Message----- > >>>>>>>>>>>>>>>>>>>>> From: Terrence Martin > >>>>>>>>>>>>>>>>>>>>> > >>>>>> [mailto:tmartin@physics.ucsd.edu] > >>>>>> > >>>>>>>> Sent: > >>>>>>>> > >>>>>>>>>>>>>>>>>>>>> Tuesday, November 28, 2006 2:53 PM > >>>>>>>>>>>>>>>>>>>>> To: zhengc@sdsc.edu > >>>>>>>>>>>>>>>>>>>>> Cc: 'JP Navarro'; gin-ops@ggf.org > >>>>>>>>>>>>>>>>>>>>> Subject: Re: FW: start Savannah run > >>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>> We only have a production cluster, but I should > >>>>>>>>>>>>>>>>>>>>> > >>>> still > >>>> > >>>>>>>>>>>>>>>> be > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> able to help. > >>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>> I do not seem to have Colin in my GUMS database > >>>>>>>>>>>>>>>>>>>>> > >>>>>> though > >>>>>> > >>>>>>>>>>>>>>>> for > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>> GIN or any > >>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>> other VO. Should he be downloaded with GIN's > >>>>>>>>>>>>>>>>>>>>> > >>>> users? > >>>> > >>>>>>>>>>>>>>>>>>>>> Terrence > >>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>> Cindy Zheng wrote: > >>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>> Hi, JP and Terrence, > >>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>> Could you help Colin to get ready to run > >>>>>>>>>>>>>>>>>>>>>> > >>>> Savannah > >>>> > >>>>>>>>>>>>>>>>>>>>>> application on your GIN testbed clusters? > >>>>>>>>>>>>>>>>>>>>>> You can find Colin's user info at > >>>>>>>>>>>>>>>>>>>>>> http://wiki.pragma- > >>>>>>>>>>>>>>>>>>>>>> > >>>>>> grid.net/index.php?title=ColinDetails > >>>>>> > >>>>>>>>>>>>>>>>>>>>>> If you need more info or action from Colin, or > >>>>>>>>>>>>>>>>>>>>>> > >>>> have > >>>> > >>>>>>>>>>>>>>>> any questions > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>> for Colin or me, please let us know. > >>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>> Thank you very much! > >>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>> Cindy > >>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>> -----Original Message----- > >>>>>>>>>>>>>>>>>>>>>> From: Cindy Zheng [mailto:zhengc@sdsc.edu] Sent: > >>>>>>>>>>>>>>>>>>>>>> > >>>>>>>> Tuesday, > >>>>>>>> > >>>>>>>>>>>>>>>>>>>>>> November 28, 2006 2:31 PM > >>>>>>>>>>>>>>>>>>>>>> To: 'gin-ops@ggf.org' > >>>>>>>>>>>>>>>>>>>>>> Subject: start Savannah run > >>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>> Dear all, > >>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>> Thanks for all the people involved to help make > >>>>>>>>>>>>>>>>>>>>>> TDDFT application run and GIN testbed monitoring > >>>>>>>>>>>>>>>>>>>>>> very fruitful experiments! We have learned a lot > >>>>>>>>>>>>>>>>>>>>>> > >>>> and > >>>> > >>>>>>>> have > >>>>>>>> > >>>>>>>>>>>>>>>>>>>>>> presented our learnings at OGF and SC06. > >>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>> Let's continue our collaborative effort with our > >>>>>>>>>>>>>>>>>>>>>> > >>>>>> plan > >>>>>> > >>>>>>>>>>>>>>>> - start our > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>> next experiment with Savannah > >>>>>>>>>>>>>>>>>>>>>> fire simulation - a data-intensive application, > >>>>>>>>>>>>>>>>>>>>>> > >>>> to > >>>> > >>>>>>>>>>>>>>>> explore data > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>> related interoperation issues. > >>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>> Colin Enticott at Monash University of Australia > >>>>>>>>>>>>>>>>>>>>>> is the lead driver. Colin has documented the > >>>>>>>>>>>>>>>>>>>>>> introduction and requirements of this > >>>>>>>>>>>>>>>>>>>>>> > >>>> application at > >>>> > >>>>>>>>>>>>>>>>>>>>>> http://wiki.pragma- > >>>>>>>>>>>>>>>>>>>>>> > >>>> grid.net/index.php?title=Savannah > >>>> > >>>>>>>>>>>>>>>>>>>>>> or go to > >>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>> http://forge.gridforum.org/sf/wiki/do/viewPage/ > >>>>>>>>>>>>>>>>>>>>> projects.gin/wi > >>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> ki/GinOps > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>> click "Savannah" under "Applications", > >>>>>>>>>>>>>>>>>>>>> where "first Savannah experiment" is refering to > >>>>>>>>>>>>>>>>>>>>> a previous experiment in PRAGMA testbed. The > >>>>>>>>>>>>>>>>>>>>> "second Savannah experiment" is the one for GIN > >>>>>>>>>>>>>>>>>>>>> > >>>>>> testbed. > >>>>>> > >>>>>>>>>>>>>>>>>>>>> We like to run this application on all Grids in > >>>>>>>>>>>>>>>>>>>>> > >>>> GIN > >>>> > >>>>>>>>>>>>>>>> testbed, but > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>> in 2 steps. First, we will run it on > >>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>> PRAGMA/TeraGrid/OSG - since > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>> these should be relatively easier to do. We like > >>>>>>>>>>>>>>>>>>>>> > >>>> to > >>>> > >>>>>> get > >>>>>> > >>>>>>>>>>>>>>>> this done > >>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>> before the year end. > >>>>>>>>>>>>>>>>>>>>> The next step, Colin will work with EGEE and > >>>>>>>>>>>>>>>>>>>>> > >>>>>> Nordugrid > >>>>>> > >>>>>>>>>>>>>>>>>>>>> to develop possible solutions, to enable > >>>>>>>>>>>>>>>>>>>>> > >>>>>> interoperation > >>>>>> > >>>>>>>>>>>>>>>>>>>>> and to include all 5 Grids in the run. > >>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>> Thanks in advance for your continued help with > >>>>>>>>>>>>>>>>>>>>> > >>>> this! > >>>> > >>>>>>>>>>>>>>>>>>>>> Cindy > >>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>> -- > >>>>>>>>>>> gin-auth mailing list > >>>>>>>>>>> gin-auth@ogf.org > >>>>>>>>>>> http://www.ogf.org/mailman/listinfo/gin-auth > >>>>>>>>>>> > >>>>>>>>> -- > >>>>>>>>> gin-ops mailing list > >>>>>>>>> gin-ops@ogf.org > >>>>>>>>> http://www.ogf.org/mailman/listinfo/gin-ops > >>>>>>>>> > >>> > >>> > >>> > >

Hi, Here are my 2cts worth: According to the SSL message (through Globus) it seems as if there is something wrong on the teragrid side with: - NTP, sounds stupid, but it may very well have such an error message as a result - The CA that Colin uses is not installed at the TeraGrid host - Out of date CAs, I dunno if the CA has roled over in the past months but this might be an issue - The fetch-crl client is out of date, disabling the used CA of Colin at the TeraGrid host which could result in such a message Oscar Colin Enticott wrote:
Hi JP Navarro,
The same problem has happened again. Output from gt2.4:
$ globusrun -a -r globus.infotech.monash.edu.au
GRAM Authentication test successful $ globusrun -a -r tg-grid1.uc.teragrid.org
GRAM Authentication test failure: authentication failed: GSS Major Status: Authentication Failed GSS Minor Status Error Chain:
init.c:499: globus_gss_assist_init_sec_context_async: Error during context initialization init_sec_context.c:171: gss_init_sec_context: SSLv3 handshake problems globus_i_gsi_gss_utils.c:888: globus_i_gsi_gss_handshake: Unable to verify remote side's credentials globus_i_gsi_gss_utils.c:854: globus_i_gsi_gss_handshake: SSLv3 handshake problems: Couldn't do ssl handshake OpenSSL Error: s3_pkt.c:1046: in library: SSL routines, function SSL3_READ_BYTES: sslv3 alert certificate expired
I recently renewed my APAC certificate, but it should be the same. globus.infotech.monash.edu.au worked without change.
Help!
Regards, Colin
--- Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 Room H7.26, Level 7, Building H, Monash University Caulfield 3145, Australia
-----Original Message----- From: JP Navarro [mailto:navarro@mcs.anl.gov] Sent: Thursday, 4 January 2007 3:00 AM To: Colin Enticott Cc: gin-auth@ggf.org; gin-ops@ggf.org; 'Terrence Martin'; zhengc@sdsc.edu Subject: Re: [gin-ops] [gin-auth] start Savannah run
Colin,
We didn't have the Monash University CA configured on tg- grid1.uc.teragrid.org. This has now been fixed.
Regards,
JP Navarro
On Jan 3, 2007, at 2:13 AM, Colin Enticott wrote:
First of all, Happy new year everyone!
Thankyou for your help last year.
I have two quick questions:
I am now receiving a "certificate expired" message from tg-grid1.uc.teragrid.org. My certificate still works elsewhere. Is it the server's certificate?
And on osg-gw-2.t2.ucsd.edu, I need to write ~80GB of data for the experiment. Which directory can I use?
Thanks, Colin
--- Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 Room H7.26, Level 7, Building H, Monash University Caulfield 3145, Australia
-----Original Message----- From: Terrence Martin [mailto:tmartin@physics.ucsd.edu] Sent: Tuesday, 5 December 2006 5:41 PM To: Colin Enticott Cc: 'Yoshio Tanaka'; D.Bannon@vpac.org; navarro@mcs.anl.gov; gin- auth@ggf.org; gin-ops@ggf.org Subject: Re: [gin-ops] [gin-auth] start Savannah run
colin, if you want to try logging into
colin@uaf-1.t2.ucsd.edu
run
source /data/vdt/setup.sh
then grab a cert with grid-proxy-init and give it a try.
It is the machine that all my users use to submit to my OSG site.
Terrence
Hi Yoshio,
I've tried it from 3 servers. On the server I have root access on, I just manually synced and I am still having the problem. I am wondering if
Colin Enticott wrote: the CA
certificate I sent is okay. It's the APAC CA files we use here on our servers.
On the Pragma resources, I have been using my old certificate (as initially there was teething problems with the new APAC CA). Can you update your server with the details below and I'll give it a try:
http://wiki.pragma-grid.net/index.php?title=ColinDetails
Thanks, Colin
--- Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 Room H7.26, Level 7, Building H, Monash University Caulfield 3145, Australia
-----Original Message----- From: Yoshio Tanaka [mailto:yoshio.tanaka@aist.go.jp] Sent: Tuesday, 5 December 2006 4:51 PM To: Colin.Enticott@csse.monash.edu.au Cc: D.Bannon@vpac.org; tmartin@physics.ucsd.edu; navarro@mcs.anl.gov; gin- auth@ggf.org; gin-ops@ggf.org; yoshio.tanaka@aist.go.jp Subject: Re: [gin-ops] [gin-auth] start Savannah run
Hi Colin,
Are you able to submit jobs to PRAGMA machines? If yes, the APAC CA on your machine should have no problem.
One point that I would like to confirm is... Is the time of your client machine correct? Do you use an NTP server for synchronize the time?
Thanks,
-- Yoshio Tanaka (yoshio.tanaka@aist.go.jp) http://ninf.apgrid.org/ http://www.apgridpma.org/
From: Colin Enticott <Colin.Enticott@csse.monash.edu.au> Subject: RE: [gin-ops] [gin-auth] start Savannah run Date: Tue, 05 Dec 2006 16:38:40 +1100 Message-ID: <01df01c7182f$9f59a3d0$1e46c282@nail>
> Hi Yoshio, > > I am unable to log in. But below is what JP sent me. Any ideas on what it
> means? > > Doing a Google I find: > The error might arise from an expired certificate or when > trying to > restore
> certification expiration date and job are in some state in the > Grid > execution list. > > I guess it might be a problem with the APAC CA on your > machines? Was > the CA
> set up previously? Or did you use the ones on my info page? (This > leaves
> the question if I packaged them correctly). > > > On Fri, 2006-12-01 at 12:34 -0600, JP Navarro wrote: > > TIME: Thu Nov 30 18:49:42 2006 > PID: 9608 -- Notice: 0: GATEKEEPER_ACCT_FD=5 (/var/globus/prews- > gram-4.0.1-r3-i1/log/globus-gatekeeper.log) > TIME: Thu Nov 30 18:49:42 2006 > PID: 9608 -- Notice: 6: Got connection 198.202.88.52 at Thu > Nov 30 > 18:49:42 2006 > > Failed reading length 0 > GSS authentication failure > globus_gss_assist token :3: read failure: Connection closed > Failure: GSS failed Major:01090000 Minor:00000000 Token:00000003 > > TIME: Thu Nov 30 18:49:42 2006 > PID: 9608 -- Failure: GSS failed Major:01090000 Minor:00000000 > Token:00000003 > > > Colin > > --- > Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 > Room H7.26, Level 7, Building H, Monash University Caulfield 3145, > Australia
>> -----Original Message----- >> From: Yoshio Tanaka [mailto:yoshio.tanaka@aist.go.jp] >> Sent: Tuesday, 5 December 2006 12:51 PM >> To: Colin.Enticott@csse.monash.edu.au >> Cc: D.Bannon@vpac.org; tmartin@physics.ucsd.edu; >> navarro@mcs.anl.gov; >> gin-
>> auth@ggf.org; gin-ops@ggf.org; yoshio.tanaka@aist.go.jp >> Subject: Re: [gin-ops] [gin-auth] start Savannah run >> >> >> Hi Colin, >> >> If you can login to these machines, see the globus >> gatekeeper's log >> at:
>> ${GLOBUS_LOCATION}/var/globus-gatekeeper.log >> >> You may find error logs such as no entry in mapfile and >> failure in >> tracing cert chain. >> >> Regards, >> >> -- >> Yoshio Tanaka (yoshio.tanaka@aist.go.jp) >> http://ninf.apgrid.org/ >> http://www.apgridpma.org/ >> >> From: Colin Enticott <Colin.Enticott@csse.monash.edu.au> >> Subject: RE: [gin-ops] [gin-auth] start Savannah run >> Date: Tue, 05 Dec 2006 12:24:42 +1100 >> Message-ID: <01c001c7180c$24c430e0$1e46c282@nail> >> >> >>> Thanks Yoshio, >>> >>> So it looks like authentication issues as I can connect to >>> port 2119 >>> on
>> both >> >>> hosts: >>> >>> cme@edda$ globusrun -a -r tg-grid1.uc.teragrid.org >>> >>> GRAM Authentication test failure: connecting to the job manager >>> failed.
>>> Possible reasons: job terminated, invalid job contact, network >>> problems,
>> ... >> >>> cme@edda$ globusrun -a -r osg-gw-2.t2.ucsd.edu >>> >>> GRAM Authentication test failure: connecting to the job manager >>> failed.
>>> Possible reasons: job terminated, invalid job contact, network >>> problems,
>> ... >> >>> Regards, >>> Colin >>> >>> --- >>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 >>> Room H7.26, Level 7, Building H, Monash University Caulfield >>> 3145, >>> >> Australia >> >>>> -----Original Message----- >>>> From: Yoshio Tanaka [mailto:yoshio.tanaka@aist.go.jp] >>>> Sent: Tuesday, 5 December 2006 12:21 PM >>>> To: Colin.Enticott@csse.monash.edu.au >>>> Cc: D.Bannon@vpac.org; tmartin@physics.ucsd.edu; >>>> navarro@mcs.anl.gov;
>> gin- >> >>>> auth@ggf.org; gin-ops@ggf.org; yoshio.tanaka@aist.go.jp >>>> Subject: Re: [gin-ops] [gin-auth] start Savannah run >>>> >>>> >>>> Hi Colin, >>>> >>>> Please test the authentication by the following command: >>>> >>>> % globusrun -a -r osg-gw-2.t2.ucsd.edu >>>> >>>> % globusrun -a -r tg-grid1.uc.teragrid.org >>>> >>>> Thanks, >>>> >>>> -- >>>> Yoshio Tanaka (yoshio.tanaka@aist.go.jp) >>>> http://ninf.apgrid.org/ >>>> http://www.apgridpma.org/ >>>> >>>> >>>> From: Colin Enticott <Colin.Enticott@csse.monash.edu.au> >>>> Subject: Re: [gin-ops] [gin-auth] start Savannah run >>>> Date: Tue, 05 Dec 2006 11:44:05 +1100 >>>> Message-ID: <017401c71806$77cf6760$1e46c282@nail> >>>> >>>> >>>>> Thanks David, >>>>> >>>>> But still the same problem. As you can see, my certificate >>>>> still
>> works >> >>>> on >>>> >>>>> the vpac host and there is definitely no firewall in the way: >>>>> >>>>> cme@edda$ grid-proxy-init -cert usercert.pem.APACGrid -key >>>>> userkey.pem.APACGrid >>>>> Your identity: /C=AU/O=APACGrid/OU=Monash University/CN=Colin >>>>> >> Enticott >> >>>>> Enter GRID pass phrase for this identity: >>>>> Creating proxy ................................... Done >>>>> Your proxy is valid until: Tue Dec 5 23:28:47 2006 >>>>> cme@edda$ globus-job-run osg-gw-2.t2.ucsd.edu/jobmanager-fork >>>>> >> /bin/uname >> >>>> -a >>>> >>>>> GRAM Job submission failed because the connection to the >>>>> server >>>>> >> failed >> >>>>> (check host and port) (error code 12) >>>>> cme@edda$ globus-job-run tg-grid1.uc.teragrid.org/jobmanager- >>>>> fork
>>>> /bin/uname >>>> >>>>> -a >>>>> GRAM Job submission failed because the connection to the >>>>> server >>>>> >> failed >> >>>>> (check host and port) (error code 12) >>>>> cme@edda$ globus-job-run ng1.vpac.org/jobmanager-fork /bin/ >>>>> uname >>>>> -a
>>>>> Linux ng1.vpac.org 2.6.16.29-xen #4 SMP Sun Oct 15 13:20:46 >>>>> BST >>>>> 2006
>>>> i686 >>>> >>>>> i686 i386 GNU/Linux >>>>> cme@edda$ telnet tg-grid1.uc.teragrid.org 2119 >>>>> Trying 192.5.198.225... >>>>> Connected to tg-grid1.uc.teragrid.org. >>>>> Escape character is '^]'. >>>>> >>>>> >>>>> Connection closed by foreign host. >>>>> cme@edda$ telnet osg-gw-2.t2.ucsd.edu 2119 >>>>> Trying 137.110.141.17... >>>>> Connected to osg-gw-2.t2.ucsd.edu. >>>>> Escape character is '^]'. >>>>> >>>>> >>>>> Connection closed by foreign host. >>>>> >>>>> >>>>> Any other thoughts from anyone? >>>>> >>>>> Thanks, >>>>> Colin >>>>> >>>>> --- >>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 >>>>> Room H7.26, Level 7, Building H, Monash University Caulfield >>>>> 3145,
>>>> Australia >>>> >>>>>> -----Original Message----- >>>>>> From: David Bannon [mailto:D.Bannon@vpac.org] >>>>>> Sent: Monday, 4 December 2006 6:08 PM >>>>>> To: JP Navarro >>>>>> Cc: Colin Enticott; gin-auth@ggf.org; gin-ops@ggf.org; >>>>>> 'Terrence
>>>> Martin' >>>> >>>>>> Subject: Re: [gin-auth] start Savannah run >>>>>> >>>>>> >>>>>> Colin, you can run as a Gin user on any of the VPAC machines, >>>>>> my
>> be >> >>>>>> easier to debug.... >>>>>> >>>>>> David >>>>>> >>>>>> >>>>>> On Fri, 2006-12-01 at 12:34 -0600, JP Navarro wrote: >>>>>> >>>>>>> Colin, >>>>>>> >>>>>>> The error in the logs is below. Not sure what it means. >>>>>>> Could
>> you >> >>>>>>> try this >>>>>>> test again from your SDSC TeraGrid account so we can rule >>>>>>> out
>>>>>>> software and >>>>>>> firewall issues? >>>>>>> >>>>>>> Thanks, >>>>>>> >>>>>>> JP >>>>>>> >>>>>>> TIME: Thu Nov 30 18:49:42 2006 >>>>>>> PID: 9608 -- Notice: 0: GATEKEEPER_ACCT_FD=5 >>>>>>> >> (/var/globus/prews- >> >>>>>>> gram-4.0.1-r3-i1/log/globus-gatekeeper.log) >>>>>>> TIME: Thu Nov 30 18:49:42 2006 >>>>>>> PID: 9608 -- Notice: 6: Got connection 198.202.88.52 at >>>>>>> Thu
>> Nov 30 >> >>>>>>> 18:49:42 2006 >>>>>>> >>>>>>> Failed reading length 0 >>>>>>> GSS authentication failure >>>>>>> globus_gss_assist token :3: read failure: Connection >>>>>>> closed
>>>>>>> Failure: GSS failed Major:01090000 Minor:00000000 >>>>>>> Token:00000003
>>>>>>> TIME: Thu Nov 30 18:49:42 2006 >>>>>>> PID: 9608 -- Failure: GSS failed Major:01090000 >>>>>>> Minor:00000000
>>>>>>> Token:00000003 >>>>>>> >>>>>>> >>>>>>> >>>>>>> On Nov 30, 2006, at 7:05 PM, Colin Enticott wrote: >>>>>>> >>>>>>> >>>>>>>> Thanks JP, >>>>>>>> >>>>>>>> But I am running into some problems. I've tried both from >>>>>>>> our
>>>>>>>> server and >>>>>>>> rocks-52 and this is what I get: >>>>>>>> [cme@rocks-52 ~]$ globus-job-run tg-grid1.uc.teragrid.org/ >>>>>>>> jobmanager-fork >>>>>>>> /bin/uname -a >>>>>>>> GRAM Job submission failed because the connection to the >>>>>>>> >> server >> >>>> failed >>>> >>>>>>>> (check host and port) (error code 12) >>>>>>>> [cme@rocks-52 ~]$ grid-proxy-info >>>>>>>> subject : /C=AU/O=APACGrid/OU=Monash University/CN=Colin >>>>>>>> Enticott/CN=1087048434 >>>>>>>> issuer : /C=AU/O=APACGrid/OU=Monash University/CN=Colin >>>>>>>> >> Enticott >> >>>>>>>> identity : /C=AU/O=APACGrid/OU=Monash University/CN=Colin >>>>>>>> >> Enticott >> >>>>>>>> type : Proxy draft (pre-RFC) compliant impersonation >>>>>>>> proxy
>>>>>>>> strength : 512 bits >>>>>>>> path : /home/cme/globus_proxy.APACGrid >>>>>>>> timeleft : 836:30:26 (34.8 days) >>>>>>>> [cme@rocks-52 ~]$ ssh tg-grid1.uc.teragrid.org >>>>>>>> Warning: Permanently added 'tg-grid1.uc.teragrid.org' >>>>>>>> (RSA) to
>> the >> >>>>>>>> list of >>>>>>>> known hosts. >>>>>>>> Permission denied (external- >>>>>>>> >>>> keyx,gssapi,publickey,gssapi,hostbased). >>>> >>>>>>>> [cme@rocks-52 ~]$ >>>>>>>> >>>>>>>> That is the certificate that I registered with. I also >>>>>>>> tried
>> the >> >>>>>>>> ssh key >>>>>>>> pair I put up on the pragma wiki. >>>>>>>> >>>>>>>> Any thoughts? >>>>>>>> >>>>>>>> Thanks, >>>>>>>> Colin >>>>>>>> >>>>>>>> --- >>>>>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 >>>>>>>> Room H7.26, Level 7, Building H, Monash University >>>>>>>> Caulfield
>> 3145, >> >>>>>>>> Australia >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>>> -----Original Message----- >>>>>>>>> From: JP Navarro [mailto:navarro@mcs.anl.gov] >>>>>>>>> Sent: Friday, 1 December 2006 2:47 AM >>>>>>>>> To: Colin Enticott >>>>>>>>> Cc: zhengc@sdsc.edu; 'Terrence Martin'; gin-ops@ggf.org; >>>>>>>>> >> 'Oscar >> >>>>>>>>> Koeroo'; >>>>>>>>> gin-auth@ggf.org >>>>>>>>> Subject: Re: start Savannah run >>>>>>>>> >>>>>>>>> Colin, >>>>>>>>> >>>>>>>>> You should be set to go on the UC/ANL TeraGrid cluster. >>>>>>>>> >>>>>>>>> GT4 Pre-WS GRAM: tg-grid1.uc.teragrid.org:2119 >>>>>>>>> GT4 WS GRAM: tg-grid1.uc.teragrid.org:8443 (FORK, >>>>>>>>> PBS)
>>>>>>>>> GT4 GridFTP: tg-gridftp.uc.teragrid.org:2811 >>>>>>>>> >>>>>>>>> Regards, >>>>>>>>> >>>>>>>>> JP >>>>>>>>> >>>>>>>>> On Nov 30, 2006, at 2:43 AM, Colin Enticott wrote: >>>>>>>>> >>>>>>>>> >>>>>>>>>> Thankyou everyone. >>>>>>>>>> >>>>>>>>>> I am now registered on the GIN VO (well, I appear here: >>>>>>>>>> http://kuiken.nikhef.nl/gin.ggf.org/grid-mapfile). >>>>>>>>>> >>>>>>>>>> What is my next step? >>>>>>>>>> >>>>>>>>>> Thanks, >>>>>>>>>> Colin >>>>>>>>>> >>>>>>>>>> --- >>>>>>>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 >>>>>>>>>> Room H7.26, Level 7, Building H, Monash University >>>>>>>>>> Caulfield
>>>> 3145, >>>> >>>>>>>>>> Australia >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>>>>>>> -----Original Message----- >>>>>>>>>>> From: Cindy Zheng [mailto:zhengc@sdsc.edu] >>>>>>>>>>> Sent: Thursday, 30 November 2006 11:59 AM >>>>>>>>>>> To: 'Terrence Martin' >>>>>>>>>>> Cc: 'JP Navarro'; gin-ops@ggf.org; 'Oscar Koeroo'; >>>>>>>>>>> 'Colin
>>>>>>>>>>> Enticott'; gin- >>>>>>>>>>> auth@ggf.org >>>>>>>>>>> Subject: RE: FW: start Savannah run >>>>>>>>>>> >>>>>>>>>>> Thank you, Terrence! >>>>>>>>>>> We'll wait to hear from Colin when Colin finishes >>>>>>>>>>> registering to gin vo. >>>>>>>>>>> Cindy >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>>> -----Original Message----- >>>>>>>>>>>> From: Terrence Martin >>>>>>>>>>>> [mailto:tmartin@physics.ucsd.edu]
>>>>>>>>>>>> Sent: Wednesday, November 29, 2006 11:36 AM >>>>>>>>>>>> To: Oscar Koeroo >>>>>>>>>>>> Cc: zhengc@sdsc.edu; 'JP Navarro'; gin-ops@ggf.org; >>>>>>>>>>>> 'Colin
>>>>>>>>>>>> Enticott'; gin-auth@ggf.org >>>>>>>>>>>> Subject: Re: FW: start Savannah run >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> Oscar Koeroo wrote: >>>>>>>>>>>> >>>>>>>>>>>>> Hi Terrence and Cindy, >>>>>>>>>>>>> >>>>>>>>>>>>> Getting new users up for registration on the GIN VO >>>>>>>>>>>>> is
>> easy. >> >>>>>>>>>>>>> To be >>>>>>>>>>>>> able to access the secured website and for >>>>>>>>>>>>> authentication
>>>> reasons >>>> >>>>>>>>>>>>> during the registration process new users must have >>>>>>>>>>>>> their
>>>>>>>>>>>> certificate >>>>>>>>>>>> >>>>>>>>>>>>> loaded and ready in their webbrowser. The VOMS server >>>>>>>>>>>>> is
>>>>>>>>>>>> loaded with >>>>>>>>>>>> >>>>>>>>>>>>> all IGTF accredited CAs including the Fermilab kCA. >>>>>>>>>>>>> >>>>>>>>>>>>> Go to the website: >>>>>>>>>>>>> >>>>>>>>>>>> https://kuiken.nikhef.nl:8443/voms/gin.ggf.org/ and >>>>>>>>>>>> >>>>>>>>>>>>> apply for a "New user registration". >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>> The usual VOMS configuration info is also available. >>>>>>>>>>>>> I
>>>>>>>>>>>> don't know what >>>>>>>>>>>> >>>>>>>>>>>>> you'll need to populate a GUMS server. This VOMS >>>>>>>>>>>>> server
>> is as >> >>>> any >>>> >>>>>>>>>>>>> other so I guess you can use your regular setup. >>>>>>>>>>>>> In addition to the secured interface I've also made >>>>>>>>>>>>> >> available >> >>>> a >>>> >>>>>>>>>>>>> non-secured way of grabbing a grid-mapfile. >>>>>>>>>>>>> http://kuiken.nikhef.nl/gin.ggf.org/grid-mapfile >>>>>>>>>>>>> There is also an RSS-feed pointing to the grid- >>>>>>>>>>>>> mapfile
>> and >> >>>>>>>>>>>> the secured >>>>>>>>>>>> >>>>>>>>>>>>> interface at >>>>>>>>>>>>> >>>>>>>>>>>> http://kuiken.nikhef.nl/gin.ggf.org/feed- >>>>>>>>>>>> gin.ggf.org.xml
>>>>>>>>>>>>> Unfortunately I'm not aware of a clear guide. I do >>>>>>>>>>>>> know a
>>>>>>>>>>>>> guide for >>>>>>>>>>>>> creating the packed certificate files that go into >>>>>>>>>>>>> your
>>>>>>>>>>>> browser if you >>>>>>>>>>>> >>>>>>>>>>>>> start from a two PEM formated files (certificate file >>>>>>>>>>>>> +
>>>>>>>>>>>>> private key >>>>>>>>>>>>> file) that's at >>>>>>>>>>>>> http://certificate.nikhef.nl/info/browser
>>>>>>>>>>>>> Once a user has passed that stage, the registration >>>>>>>>>>>>> for
>> the >> >>>>>>>>>>>> VO is as >>>>>>>>>>>> >>>>>>>>>>>>> trivial as any web-forum account registration. >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>> I am assuming this user already has a grid cert since >>>>>>>>>>>> they
>>>>>>>>>>>> list a DN so >>>>>>>>>>>> only VOMS registration is required. Once that is done >>>>>>>>>>>> >> either I >> >>>>>>>>>>>> run my >>>>>>>>>>>> update of GUMS manually or in 720/2 minutes on average >>>>>>>>>>>> the
>>>>>>>>>>>> user will be >>>>>>>>>>>> automatically downloaded into my GUMS database. I >>>>>>>>>>>> actually
>> do >> >>>>>>>>>>>> not have >>>>>>>>>>>> to do anything, but I can speed things up ever so >>>>>>>>>>>> slightly
>> if >> >>>> I >>>> >>>>>>>>>>>> am in >>>>>>>>>>>> the office and someone asks me to try refreshing gums. >>>>>>>>>>>> >>>>>>>>>>>> Terrence >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>>> Oscar >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>> Cindy Zheng wrote: >>>>>>>>>>>>> >>>>>>>>>>>>>> Sounds right, Terrence. Let me ask Oscar who has >>>>>>>>>>>>>> helped
>> me >> >>>>>>>>>>>> with GIN >>>>>>>>>>>> >>>>>>>>>>>>>> VO before. >>>>>>>>>>>>>> >>>>>>>>>>>>>> Hi, Oscar, >>>>>>>>>>>>>> Could you advise Colin what need to be done to be >>>>>>>>>>>>>> added in GIN VO? >>>>>>>>>>>>>> I'm also cc'ing to gin-auth list. >>>>>>>>>>>>>> If there is a guide for potential GIN users, please >>>>>>>>>>>>>> let me know the url and I can link it to our GINOPS >>>>>>>>>>>>>> page. >>>>>>>>>>>>>> >>>>>>>>>>>>>> Thanks, >>>>>>>>>>>>>> >>>>>>>>>>>>>> Cindy >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>>> -----Original Message----- >>>>>>>>>>>>>>> From: Terrence Martin >>>>>>>>>>>>>>> [mailto:tmartin@physics.ucsd.edu]
>>>> Sent: >>>> >>>>>>>>>>>>>>> Tuesday, November 28, 2006 3:24 PM >>>>>>>>>>>>>>> To: zhengc@sdsc.edu >>>>>>>>>>>>>>> Cc: 'JP Navarro'; gin-ops@ggf.org; 'Colin Enticott' >>>>>>>>>>>>>>> Subject: Re: FW: start Savannah run >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> The quickest and easiest way for me is to have him >>>>>>>>>>>>>>> >> added to >> >>>>>>>>>>>>>>> a VO. >>>>>>>>>>>>>>> How easy is it to add him to the GIN VO? One in >>>>>>>>>>>>>>> there I
>>>>>>>>>>>> can hit my >>>>>>>>>>>> >>>>>>>>>>>>>>> gums reload and he will be able to access UCSD as a >>>>>>>>>>>>>>> GIN
>>>>>>>>>>>>>>> user. Any >>>>>>>>>>>>>>> other approach requires me hacking his DN into my >>>>>>>>>>>>>>> local
>>>>>>>>>>>> VO which I >>>>>>>>>>>> >>>>>>>>>>>>>>> prefer to avoid and does not help him with any >>>>>>>>>>>>>>> other
>> site. >> >>>>>>>>>>>>>>> Terrence >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> Cindy Zheng wrote: >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> Thanks, Terrence, for the quick reply! >>>>>>>>>>>>>>>> Colin has not been a GIN user. >>>>>>>>>>>>>>>> What do you think it's the best way to get colin >>>>>>>>>>>>>>>> >> access? >> >>>>>>>>>>>>>>>> Cindy >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> -----Original Message----- >>>>>>>>>>>>>>>>> From: Terrence Martin >>>>>>>>>>>>>>>>> >> [mailto:tmartin@physics.ucsd.edu] >> >>>> Sent: >>>> >>>>>>>>>>>>>>>>> Tuesday, November 28, 2006 2:53 PM >>>>>>>>>>>>>>>>> To: zhengc@sdsc.edu >>>>>>>>>>>>>>>>> Cc: 'JP Navarro'; gin-ops@ggf.org >>>>>>>>>>>>>>>>> Subject: Re: FW: start Savannah run >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> We only have a production cluster, but I should >>>>>>>>>>>>>>>>> still
>>>>>>>>>>>> be >>>>>>>>>>>> >>>>>>>>>>>>>>> able to help. >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> I do not seem to have Colin in my GUMS database >>>>>>>>>>>>>>>>> >> though >> >>>>>>>>>>>> for >>>>>>>>>>>> >>>>>>>>>>>>>>> GIN or any >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> other VO. Should he be downloaded with GIN's >>>>>>>>>>>>>>>>> users?
>>>>>>>>>>>>>>>>> Terrence >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> Cindy Zheng wrote: >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Hi, JP and Terrence, >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Could you help Colin to get ready to run >>>>>>>>>>>>>>>>>> Savannah
>>>>>>>>>>>>>>>>>> application on your GIN testbed clusters? >>>>>>>>>>>>>>>>>> You can find Colin's user info at >>>>>>>>>>>>>>>>>> http://wiki.pragma- >>>>>>>>>>>>>>>>>> >> grid.net/index.php?title=ColinDetails >> >>>>>>>>>>>>>>>>>> If you need more info or action from Colin, or >>>>>>>>>>>>>>>>>> have
>>>>>>>>>>>> any questions >>>>>>>>>>>> >>>>>>>>>>>>>>>>>> for Colin or me, please let us know. >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Thank you very much! >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Cindy >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> -----Original Message----- >>>>>>>>>>>>>>>>>> From: Cindy Zheng [mailto:zhengc@sdsc.edu] Sent: >>>>>>>>>>>>>>>>>> >>>> Tuesday, >>>> >>>>>>>>>>>>>>>>>> November 28, 2006 2:31 PM >>>>>>>>>>>>>>>>>> To: 'gin-ops@ggf.org' >>>>>>>>>>>>>>>>>> Subject: start Savannah run >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Dear all, >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Thanks for all the people involved to help make >>>>>>>>>>>>>>>>>> TDDFT application run and GIN testbed monitoring >>>>>>>>>>>>>>>>>> very fruitful experiments! We have learned a lot >>>>>>>>>>>>>>>>>> and
>>>> have >>>> >>>>>>>>>>>>>>>>>> presented our learnings at OGF and SC06. >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Let's continue our collaborative effort with our >>>>>>>>>>>>>>>>>> >> plan >> >>>>>>>>>>>> - start our >>>>>>>>>>>> >>>>>>>>>>>>>>>>>> next experiment with Savannah >>>>>>>>>>>>>>>>>> fire simulation - a data-intensive application, >>>>>>>>>>>>>>>>>> to
>>>>>>>>>>>> explore data >>>>>>>>>>>> >>>>>>>>>>>>>>>>>> related interoperation issues. >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Colin Enticott at Monash University of Australia >>>>>>>>>>>>>>>>>> is the lead driver. Colin has documented the >>>>>>>>>>>>>>>>>> introduction and requirements of this >>>>>>>>>>>>>>>>>> application at
>>>>>>>>>>>>>>>>>> http://wiki.pragma- >>>>>>>>>>>>>>>>>> grid.net/index.php?title=Savannah
>>>>>>>>>>>>>>>>>> or go to >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> http://forge.gridforum.org/sf/wiki/do/viewPage/ >>>>>>>>>>>>>>>>> projects.gin/wi >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> ki/GinOps >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> click "Savannah" under "Applications", >>>>>>>>>>>>>>>>> where "first Savannah experiment" is refering to >>>>>>>>>>>>>>>>> a previous experiment in PRAGMA testbed. The >>>>>>>>>>>>>>>>> "second Savannah experiment" is the one for GIN >>>>>>>>>>>>>>>>> >> testbed. >> >>>>>>>>>>>>>>>>> We like to run this application on all Grids in >>>>>>>>>>>>>>>>> GIN
>>>>>>>>>>>> testbed, but >>>>>>>>>>>> >>>>>>>>>>>>>>>>> in 2 steps. First, we will run it on >>>>>>>>>>>>>>>>> >>>>>>>>>>>> PRAGMA/TeraGrid/OSG - since >>>>>>>>>>>> >>>>>>>>>>>>>>>>> these should be relatively easier to do. We like >>>>>>>>>>>>>>>>> to
>> get >> >>>>>>>>>>>> this done >>>>>>>>>>>> >>>>>>>>>>>>>>>>> before the year end. >>>>>>>>>>>>>>>>> The next step, Colin will work with EGEE and >>>>>>>>>>>>>>>>> >> Nordugrid >> >>>>>>>>>>>>>>>>> to develop possible solutions, to enable >>>>>>>>>>>>>>>>> >> interoperation >> >>>>>>>>>>>>>>>>> and to include all 5 Grids in the run. >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> Thanks in advance for your continued help with >>>>>>>>>>>>>>>>> this!
>>>>>>>>>>>>>>>>> Cindy >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>> -- >>>>>>> gin-auth mailing list >>>>>>> gin-auth@ogf.org >>>>>>> http://www.ogf.org/mailman/listinfo/gin-auth >>>>>>> >>>>> -- >>>>> gin-ops mailing list >>>>> gin-ops@ogf.org >>>>> http://www.ogf.org/mailman/listinfo/gin-ops >>>>>
-- gin-ops mailing list gin-ops@ogf.org http://www.ogf.org/mailman/listinfo/gin-ops

Colin, Sorry about that. The CRL had expired. I've now configured it to automatically update so this should no longer be a problem. Regards, JP Navarro ------------------------------------------------------------------------ ------ John-Paul Navarro (630) 252-1233 navarro@mcs.anl.gov http://www.mcs.anl.gov/ ~navarro TeraGrid Software Integration Univ of Chicago/Argonne Nat. Lab. GPG: 4EA9 C86B C0F0 113D 6306 98B7 3649 D6CB EFA8 4133 On Feb 4, 2007, at 11:19 PM, Colin Enticott wrote:
Hi JP Navarro,
The same problem has happened again. Output from gt2.4:
$ globusrun -a -r globus.infotech.monash.edu.au
GRAM Authentication test successful $ globusrun -a -r tg-grid1.uc.teragrid.org
GRAM Authentication test failure: authentication failed: GSS Major Status: Authentication Failed GSS Minor Status Error Chain:
init.c:499: globus_gss_assist_init_sec_context_async: Error during context initialization init_sec_context.c:171: gss_init_sec_context: SSLv3 handshake problems globus_i_gsi_gss_utils.c:888: globus_i_gsi_gss_handshake: Unable to verify remote side's credentials globus_i_gsi_gss_utils.c:854: globus_i_gsi_gss_handshake: SSLv3 handshake problems: Couldn't do ssl handshake OpenSSL Error: s3_pkt.c:1046: in library: SSL routines, function SSL3_READ_BYTES: sslv3 alert certificate expired
I recently renewed my APAC certificate, but it should be the same. globus.infotech.monash.edu.au worked without change.
Help!
Regards, Colin
--- Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 Room H7.26, Level 7, Building H, Monash University Caulfield 3145, Australia
-----Original Message----- From: JP Navarro [mailto:navarro@mcs.anl.gov] Sent: Thursday, 4 January 2007 3:00 AM To: Colin Enticott Cc: gin-auth@ggf.org; gin-ops@ggf.org; 'Terrence Martin'; zhengc@sdsc.edu Subject: Re: [gin-ops] [gin-auth] start Savannah run
Colin,
We didn't have the Monash University CA configured on tg- grid1.uc.teragrid.org. This has now been fixed.
Regards,
JP Navarro
On Jan 3, 2007, at 2:13 AM, Colin Enticott wrote:
First of all, Happy new year everyone!
Thankyou for your help last year.
I have two quick questions:
I am now receiving a "certificate expired" message from tg-grid1.uc.teragrid.org. My certificate still works elsewhere. Is it the server's certificate?
And on osg-gw-2.t2.ucsd.edu, I need to write ~80GB of data for the experiment. Which directory can I use?
Thanks, Colin
--- Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 Room H7.26, Level 7, Building H, Monash University Caulfield 3145, Australia
-----Original Message----- From: Terrence Martin [mailto:tmartin@physics.ucsd.edu] Sent: Tuesday, 5 December 2006 5:41 PM To: Colin Enticott Cc: 'Yoshio Tanaka'; D.Bannon@vpac.org; navarro@mcs.anl.gov; gin- auth@ggf.org; gin-ops@ggf.org Subject: Re: [gin-ops] [gin-auth] start Savannah run
colin, if you want to try logging into
colin@uaf-1.t2.ucsd.edu
run
source /data/vdt/setup.sh
then grab a cert with grid-proxy-init and give it a try.
It is the machine that all my users use to submit to my OSG site.
Terrence
Hi Yoshio,
I've tried it from 3 servers. On the server I have root access on, I just manually synced and I am still having the problem. I am wondering if
Colin Enticott wrote: the CA
certificate I sent is okay. It's the APAC CA files we use here on our servers.
On the Pragma resources, I have been using my old certificate (as initially there was teething problems with the new APAC CA). Can you update your server with the details below and I'll give it a try:
http://wiki.pragma-grid.net/index.php?title=ColinDetails
Thanks, Colin
--- Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 Room H7.26, Level 7, Building H, Monash University Caulfield 3145, Australia
-----Original Message----- From: Yoshio Tanaka [mailto:yoshio.tanaka@aist.go.jp] Sent: Tuesday, 5 December 2006 4:51 PM To: Colin.Enticott@csse.monash.edu.au Cc: D.Bannon@vpac.org; tmartin@physics.ucsd.edu; navarro@mcs.anl.gov; gin- auth@ggf.org; gin-ops@ggf.org; yoshio.tanaka@aist.go.jp Subject: Re: [gin-ops] [gin-auth] start Savannah run
Hi Colin,
Are you able to submit jobs to PRAGMA machines? If yes, the APAC CA on your machine should have no problem.
One point that I would like to confirm is... Is the time of your client machine correct? Do you use an NTP server for synchronize the time?
Thanks,
-- Yoshio Tanaka (yoshio.tanaka@aist.go.jp) http://ninf.apgrid.org/ http://www.apgridpma.org/
From: Colin Enticott <Colin.Enticott@csse.monash.edu.au> Subject: RE: [gin-ops] [gin-auth] start Savannah run Date: Tue, 05 Dec 2006 16:38:40 +1100 Message-ID: <01df01c7182f$9f59a3d0$1e46c282@nail>
> Hi Yoshio, > > I am unable to log in. But below is what JP sent me. Any > ideas on what > it
> means? > > Doing a Google I find: > The error might arise from an expired certificate or when > trying to > restore
> certification expiration date and job are in some state in the > Grid > execution list. > > I guess it might be a problem with the APAC CA on your > machines? Was > the CA
> set up previously? Or did you use the ones on my info page? > (This > leaves
> the question if I packaged them correctly). > > > On Fri, 2006-12-01 at 12:34 -0600, JP Navarro wrote: > > TIME: Thu Nov 30 18:49:42 2006 > PID: 9608 -- Notice: 0: GATEKEEPER_ACCT_FD=5 (/var/globus/ > prews- > gram-4.0.1-r3-i1/log/globus-gatekeeper.log) > TIME: Thu Nov 30 18:49:42 2006 > PID: 9608 -- Notice: 6: Got connection 198.202.88.52 at Thu > Nov 30 > 18:49:42 2006 > > Failed reading length 0 > GSS authentication failure > globus_gss_assist token :3: read failure: Connection closed > Failure: GSS failed Major:01090000 Minor:00000000 Token:00000003 > > TIME: Thu Nov 30 18:49:42 2006 > PID: 9608 -- Failure: GSS failed Major:01090000 Minor:00000000 > Token:00000003 > > > Colin > > --- > Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 > Room H7.26, Level 7, Building H, Monash University Caulfield > 3145, > Australia
> >> -----Original Message----- >> From: Yoshio Tanaka [mailto:yoshio.tanaka@aist.go.jp] >> Sent: Tuesday, 5 December 2006 12:51 PM >> To: Colin.Enticott@csse.monash.edu.au >> Cc: D.Bannon@vpac.org; tmartin@physics.ucsd.edu; >> navarro@mcs.anl.gov; >> gin-
>> auth@ggf.org; gin-ops@ggf.org; yoshio.tanaka@aist.go.jp >> Subject: Re: [gin-ops] [gin-auth] start Savannah run >> >> >> Hi Colin, >> >> If you can login to these machines, see the globus >> gatekeeper's log >> at:
>> ${GLOBUS_LOCATION}/var/globus-gatekeeper.log >> >> You may find error logs such as no entry in mapfile and >> failure in >> tracing cert chain. >> >> Regards, >> >> -- >> Yoshio Tanaka (yoshio.tanaka@aist.go.jp) >> http://ninf.apgrid.org/ >> http://www.apgridpma.org/ >> >> From: Colin Enticott <Colin.Enticott@csse.monash.edu.au> >> Subject: RE: [gin-ops] [gin-auth] start Savannah run >> Date: Tue, 05 Dec 2006 12:24:42 +1100 >> Message-ID: <01c001c7180c$24c430e0$1e46c282@nail> >> >> >>> Thanks Yoshio, >>> >>> So it looks like authentication issues as I can connect to >>> port 2119 >>> on
>> both >> >>> hosts: >>> >>> cme@edda$ globusrun -a -r tg-grid1.uc.teragrid.org >>> >>> GRAM Authentication test failure: connecting to the job >>> manager >>> failed.
>>> Possible reasons: job terminated, invalid job contact, network >>> problems,
>> ... >> >>> cme@edda$ globusrun -a -r osg-gw-2.t2.ucsd.edu >>> >>> GRAM Authentication test failure: connecting to the job >>> manager >>> failed.
>>> Possible reasons: job terminated, invalid job contact, network >>> problems,
>> ... >> >>> Regards, >>> Colin >>> >>> --- >>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 >>> Room H7.26, Level 7, Building H, Monash University Caulfield >>> 3145, >>> >> Australia >> >>> >>>> -----Original Message----- >>>> From: Yoshio Tanaka [mailto:yoshio.tanaka@aist.go.jp] >>>> Sent: Tuesday, 5 December 2006 12:21 PM >>>> To: Colin.Enticott@csse.monash.edu.au >>>> Cc: D.Bannon@vpac.org; tmartin@physics.ucsd.edu; >>>> navarro@mcs.anl.gov;
>> gin- >> >>>> auth@ggf.org; gin-ops@ggf.org; yoshio.tanaka@aist.go.jp >>>> Subject: Re: [gin-ops] [gin-auth] start Savannah run >>>> >>>> >>>> Hi Colin, >>>> >>>> Please test the authentication by the following command: >>>> >>>> % globusrun -a -r osg-gw-2.t2.ucsd.edu >>>> >>>> % globusrun -a -r tg-grid1.uc.teragrid.org >>>> >>>> Thanks, >>>> >>>> -- >>>> Yoshio Tanaka (yoshio.tanaka@aist.go.jp) >>>> http://ninf.apgrid.org/ >>>> http://www.apgridpma.org/ >>>> >>>> >>>> From: Colin Enticott <Colin.Enticott@csse.monash.edu.au> >>>> Subject: Re: [gin-ops] [gin-auth] start Savannah run >>>> Date: Tue, 05 Dec 2006 11:44:05 +1100 >>>> Message-ID: <017401c71806$77cf6760$1e46c282@nail> >>>> >>>> >>>>> Thanks David, >>>>> >>>>> But still the same problem. As you can see, my certificate >>>>> still
>> works >> >>>> on >>>> >>>>> the vpac host and there is definitely no firewall in the >>>>> way: >>>>> >>>>> cme@edda$ grid-proxy-init -cert usercert.pem.APACGrid -key >>>>> userkey.pem.APACGrid >>>>> Your identity: /C=AU/O=APACGrid/OU=Monash University/ >>>>> CN=Colin >>>>> >> Enticott >> >>>>> Enter GRID pass phrase for this identity: >>>>> Creating proxy ................................... Done >>>>> Your proxy is valid until: Tue Dec 5 23:28:47 2006 >>>>> cme@edda$ globus-job-run osg-gw-2.t2.ucsd.edu/jobmanager- >>>>> fork >>>>> >> /bin/uname >> >>>> -a >>>> >>>>> GRAM Job submission failed because the connection to the >>>>> server >>>>> >> failed >> >>>>> (check host and port) (error code 12) >>>>> cme@edda$ globus-job-run tg-grid1.uc.teragrid.org/ >>>>> jobmanager- >>>>> fork
>>>> /bin/uname >>>> >>>>> -a >>>>> GRAM Job submission failed because the connection to the >>>>> server >>>>> >> failed >> >>>>> (check host and port) (error code 12) >>>>> cme@edda$ globus-job-run ng1.vpac.org/jobmanager-fork /bin/ >>>>> uname >>>>> -a
>>>>> Linux ng1.vpac.org 2.6.16.29-xen #4 SMP Sun Oct 15 13:20:46 >>>>> BST >>>>> 2006
>>>> i686 >>>> >>>>> i686 i386 GNU/Linux >>>>> cme@edda$ telnet tg-grid1.uc.teragrid.org 2119 >>>>> Trying 192.5.198.225... >>>>> Connected to tg-grid1.uc.teragrid.org. >>>>> Escape character is '^]'. >>>>> >>>>> >>>>> Connection closed by foreign host. >>>>> cme@edda$ telnet osg-gw-2.t2.ucsd.edu 2119 >>>>> Trying 137.110.141.17... >>>>> Connected to osg-gw-2.t2.ucsd.edu. >>>>> Escape character is '^]'. >>>>> >>>>> >>>>> Connection closed by foreign host. >>>>> >>>>> >>>>> Any other thoughts from anyone? >>>>> >>>>> Thanks, >>>>> Colin >>>>> >>>>> --- >>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 >>>>> Room H7.26, Level 7, Building H, Monash University Caulfield >>>>> 3145,
>>>> Australia >>>> >>>>> >>>>>> -----Original Message----- >>>>>> From: David Bannon [mailto:D.Bannon@vpac.org] >>>>>> Sent: Monday, 4 December 2006 6:08 PM >>>>>> To: JP Navarro >>>>>> Cc: Colin Enticott; gin-auth@ggf.org; gin-ops@ggf.org; >>>>>> 'Terrence
>>>> Martin' >>>> >>>>>> Subject: Re: [gin-auth] start Savannah run >>>>>> >>>>>> >>>>>> Colin, you can run as a Gin user on any of the VPAC >>>>>> machines, >>>>>> my
>> be >> >>>>>> easier to debug.... >>>>>> >>>>>> David >>>>>> >>>>>> >>>>>> On Fri, 2006-12-01 at 12:34 -0600, JP Navarro wrote: >>>>>> >>>>>>> Colin, >>>>>>> >>>>>>> The error in the logs is below. Not sure what it means. >>>>>>> Could
>> you >> >>>>>>> try this >>>>>>> test again from your SDSC TeraGrid account so we can rule >>>>>>> out
>>>>>>> software and >>>>>>> firewall issues? >>>>>>> >>>>>>> Thanks, >>>>>>> >>>>>>> JP >>>>>>> >>>>>>> TIME: Thu Nov 30 18:49:42 2006 >>>>>>> PID: 9608 -- Notice: 0: GATEKEEPER_ACCT_FD=5 >>>>>>> >> (/var/globus/prews- >> >>>>>>> gram-4.0.1-r3-i1/log/globus-gatekeeper.log) >>>>>>> TIME: Thu Nov 30 18:49:42 2006 >>>>>>> PID: 9608 -- Notice: 6: Got connection 198.202.88.52 at >>>>>>> Thu
>> Nov 30 >> >>>>>>> 18:49:42 2006 >>>>>>> >>>>>>> Failed reading length 0 >>>>>>> GSS authentication failure >>>>>>> globus_gss_assist token :3: read failure: Connection >>>>>>> closed
>>>>>>> Failure: GSS failed Major:01090000 Minor:00000000 >>>>>>> Token:00000003
>>>>>>> TIME: Thu Nov 30 18:49:42 2006 >>>>>>> PID: 9608 -- Failure: GSS failed Major:01090000 >>>>>>> Minor:00000000
>>>>>>> Token:00000003 >>>>>>> >>>>>>> >>>>>>> >>>>>>> On Nov 30, 2006, at 7:05 PM, Colin Enticott wrote: >>>>>>> >>>>>>> >>>>>>>> Thanks JP, >>>>>>>> >>>>>>>> But I am running into some problems. I've tried both >>>>>>>> from >>>>>>>> our
>>>>>>>> server and >>>>>>>> rocks-52 and this is what I get: >>>>>>>> [cme@rocks-52 ~]$ globus-job-run tg- >>>>>>>> grid1.uc.teragrid.org/ >>>>>>>> jobmanager-fork >>>>>>>> /bin/uname -a >>>>>>>> GRAM Job submission failed because the connection to the >>>>>>>> >> server >> >>>> failed >>>> >>>>>>>> (check host and port) (error code 12) >>>>>>>> [cme@rocks-52 ~]$ grid-proxy-info >>>>>>>> subject : /C=AU/O=APACGrid/OU=Monash University/CN=Colin >>>>>>>> Enticott/CN=1087048434 >>>>>>>> issuer : /C=AU/O=APACGrid/OU=Monash University/CN=Colin >>>>>>>> >> Enticott >> >>>>>>>> identity : /C=AU/O=APACGrid/OU=Monash University/CN=Colin >>>>>>>> >> Enticott >> >>>>>>>> type : Proxy draft (pre-RFC) compliant impersonation >>>>>>>> proxy
>>>>>>>> strength : 512 bits >>>>>>>> path : /home/cme/globus_proxy.APACGrid >>>>>>>> timeleft : 836:30:26 (34.8 days) >>>>>>>> [cme@rocks-52 ~]$ ssh tg-grid1.uc.teragrid.org >>>>>>>> Warning: Permanently added 'tg-grid1.uc.teragrid.org' >>>>>>>> (RSA) to
>> the >> >>>>>>>> list of >>>>>>>> known hosts. >>>>>>>> Permission denied (external- >>>>>>>> >>>> keyx,gssapi,publickey,gssapi,hostbased). >>>> >>>>>>>> [cme@rocks-52 ~]$ >>>>>>>> >>>>>>>> That is the certificate that I registered with. I also >>>>>>>> tried
>> the >> >>>>>>>> ssh key >>>>>>>> pair I put up on the pragma wiki. >>>>>>>> >>>>>>>> Any thoughts? >>>>>>>> >>>>>>>> Thanks, >>>>>>>> Colin >>>>>>>> >>>>>>>> --- >>>>>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 >>>>>>>> Room H7.26, Level 7, Building H, Monash University >>>>>>>> Caulfield
>> 3145, >> >>>>>>>> Australia >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>>> -----Original Message----- >>>>>>>>> From: JP Navarro [mailto:navarro@mcs.anl.gov] >>>>>>>>> Sent: Friday, 1 December 2006 2:47 AM >>>>>>>>> To: Colin Enticott >>>>>>>>> Cc: zhengc@sdsc.edu; 'Terrence Martin'; gin-ops@ggf.org; >>>>>>>>> >> 'Oscar >> >>>>>>>>> Koeroo'; >>>>>>>>> gin-auth@ggf.org >>>>>>>>> Subject: Re: start Savannah run >>>>>>>>> >>>>>>>>> Colin, >>>>>>>>> >>>>>>>>> You should be set to go on the UC/ANL TeraGrid cluster. >>>>>>>>> >>>>>>>>> GT4 Pre-WS GRAM: tg-grid1.uc.teragrid.org:2119 >>>>>>>>> GT4 WS GRAM: tg-grid1.uc.teragrid.org:8443 (FORK, >>>>>>>>> PBS)
>>>>>>>>> GT4 GridFTP: tg-gridftp.uc.teragrid.org:2811 >>>>>>>>> >>>>>>>>> Regards, >>>>>>>>> >>>>>>>>> JP >>>>>>>>> >>>>>>>>> On Nov 30, 2006, at 2:43 AM, Colin Enticott wrote: >>>>>>>>> >>>>>>>>> >>>>>>>>>> Thankyou everyone. >>>>>>>>>> >>>>>>>>>> I am now registered on the GIN VO (well, I appear here: >>>>>>>>>> http://kuiken.nikhef.nl/gin.ggf.org/grid-mapfile). >>>>>>>>>> >>>>>>>>>> What is my next step? >>>>>>>>>> >>>>>>>>>> Thanks, >>>>>>>>>> Colin >>>>>>>>>> >>>>>>>>>> --- >>>>>>>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 >>>>>>>>>> 2215 >>>>>>>>>> Room H7.26, Level 7, Building H, Monash University >>>>>>>>>> Caulfield
>>>> 3145, >>>> >>>>>>>>>> Australia >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>>>>>>> -----Original Message----- >>>>>>>>>>> From: Cindy Zheng [mailto:zhengc@sdsc.edu] >>>>>>>>>>> Sent: Thursday, 30 November 2006 11:59 AM >>>>>>>>>>> To: 'Terrence Martin' >>>>>>>>>>> Cc: 'JP Navarro'; gin-ops@ggf.org; 'Oscar Koeroo'; >>>>>>>>>>> 'Colin
>>>>>>>>>>> Enticott'; gin- >>>>>>>>>>> auth@ggf.org >>>>>>>>>>> Subject: RE: FW: start Savannah run >>>>>>>>>>> >>>>>>>>>>> Thank you, Terrence! >>>>>>>>>>> We'll wait to hear from Colin when Colin finishes >>>>>>>>>>> registering to gin vo. >>>>>>>>>>> Cindy >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>>> -----Original Message----- >>>>>>>>>>>> From: Terrence Martin >>>>>>>>>>>> [mailto:tmartin@physics.ucsd.edu]
>>>>>>>>>>>> Sent: Wednesday, November 29, 2006 11:36 AM >>>>>>>>>>>> To: Oscar Koeroo >>>>>>>>>>>> Cc: zhengc@sdsc.edu; 'JP Navarro'; gin-ops@ggf.org; >>>>>>>>>>>> 'Colin
>>>>>>>>>>>> Enticott'; gin-auth@ggf.org >>>>>>>>>>>> Subject: Re: FW: start Savannah run >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> Oscar Koeroo wrote: >>>>>>>>>>>> >>>>>>>>>>>>> Hi Terrence and Cindy, >>>>>>>>>>>>> >>>>>>>>>>>>> Getting new users up for registration on the GIN VO >>>>>>>>>>>>> is
>> easy. >> >>>>>>>>>>>>> To be >>>>>>>>>>>>> able to access the secured website and for >>>>>>>>>>>>> authentication
>>>> reasons >>>> >>>>>>>>>>>>> during the registration process new users must have >>>>>>>>>>>>> their
>>>>>>>>>>>> certificate >>>>>>>>>>>> >>>>>>>>>>>>> loaded and ready in their webbrowser. The VOMS >>>>>>>>>>>>> server >>>>>>>>>>>>> is
>>>>>>>>>>>> loaded with >>>>>>>>>>>> >>>>>>>>>>>>> all IGTF accredited CAs including the Fermilab kCA. >>>>>>>>>>>>> >>>>>>>>>>>>> Go to the website: >>>>>>>>>>>>> >>>>>>>>>>>> https://kuiken.nikhef.nl:8443/voms/gin.ggf.org/ and >>>>>>>>>>>> >>>>>>>>>>>>> apply for a "New user registration". >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>> The usual VOMS configuration info is also available. >>>>>>>>>>>>> I
>>>>>>>>>>>> don't know what >>>>>>>>>>>> >>>>>>>>>>>>> you'll need to populate a GUMS server. This VOMS >>>>>>>>>>>>> server
>> is as >> >>>> any >>>> >>>>>>>>>>>>> other so I guess you can use your regular setup. >>>>>>>>>>>>> In addition to the secured interface I've also made >>>>>>>>>>>>> >> available >> >>>> a >>>> >>>>>>>>>>>>> non-secured way of grabbing a grid-mapfile. >>>>>>>>>>>>> http://kuiken.nikhef.nl/gin.ggf.org/grid-mapfile >>>>>>>>>>>>> There is also an RSS-feed pointing to the grid- >>>>>>>>>>>>> mapfile
>> and >> >>>>>>>>>>>> the secured >>>>>>>>>>>> >>>>>>>>>>>>> interface at >>>>>>>>>>>>> >>>>>>>>>>>> http://kuiken.nikhef.nl/gin.ggf.org/feed- >>>>>>>>>>>> gin.ggf.org.xml
>>>>>>>>>>>>> Unfortunately I'm not aware of a clear guide. I do >>>>>>>>>>>>> know a
>>>>>>>>>>>>> guide for >>>>>>>>>>>>> creating the packed certificate files that go into >>>>>>>>>>>>> your
>>>>>>>>>>>> browser if you >>>>>>>>>>>> >>>>>>>>>>>>> start from a two PEM formated files (certificate >>>>>>>>>>>>> file >>>>>>>>>>>>> +
>>>>>>>>>>>>> private key >>>>>>>>>>>>> file) that's at >>>>>>>>>>>>> http://certificate.nikhef.nl/info/browser
>>>>>>>>>>>>> Once a user has passed that stage, the registration >>>>>>>>>>>>> for
>> the >> >>>>>>>>>>>> VO is as >>>>>>>>>>>> >>>>>>>>>>>>> trivial as any web-forum account registration. >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>> I am assuming this user already has a grid cert since >>>>>>>>>>>> they
>>>>>>>>>>>> list a DN so >>>>>>>>>>>> only VOMS registration is required. Once that is done >>>>>>>>>>>> >> either I >> >>>>>>>>>>>> run my >>>>>>>>>>>> update of GUMS manually or in 720/2 minutes on >>>>>>>>>>>> average >>>>>>>>>>>> the
>>>>>>>>>>>> user will be >>>>>>>>>>>> automatically downloaded into my GUMS database. I >>>>>>>>>>>> actually
>> do >> >>>>>>>>>>>> not have >>>>>>>>>>>> to do anything, but I can speed things up ever so >>>>>>>>>>>> slightly
>> if >> >>>> I >>>> >>>>>>>>>>>> am in >>>>>>>>>>>> the office and someone asks me to try refreshing >>>>>>>>>>>> gums. >>>>>>>>>>>> >>>>>>>>>>>> Terrence >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>>> Oscar >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>> Cindy Zheng wrote: >>>>>>>>>>>>> >>>>>>>>>>>>>> Sounds right, Terrence. Let me ask Oscar who has >>>>>>>>>>>>>> helped
>> me >> >>>>>>>>>>>> with GIN >>>>>>>>>>>> >>>>>>>>>>>>>> VO before. >>>>>>>>>>>>>> >>>>>>>>>>>>>> Hi, Oscar, >>>>>>>>>>>>>> Could you advise Colin what need to be done to be >>>>>>>>>>>>>> added in GIN VO? >>>>>>>>>>>>>> I'm also cc'ing to gin-auth list. >>>>>>>>>>>>>> If there is a guide for potential GIN users, please >>>>>>>>>>>>>> let me know the url and I can link it to our GINOPS >>>>>>>>>>>>>> page. >>>>>>>>>>>>>> >>>>>>>>>>>>>> Thanks, >>>>>>>>>>>>>> >>>>>>>>>>>>>> Cindy >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>>> -----Original Message----- >>>>>>>>>>>>>>> From: Terrence Martin >>>>>>>>>>>>>>> [mailto:tmartin@physics.ucsd.edu]
>>>> Sent: >>>> >>>>>>>>>>>>>>> Tuesday, November 28, 2006 3:24 PM >>>>>>>>>>>>>>> To: zhengc@sdsc.edu >>>>>>>>>>>>>>> Cc: 'JP Navarro'; gin-ops@ggf.org; 'Colin >>>>>>>>>>>>>>> Enticott' >>>>>>>>>>>>>>> Subject: Re: FW: start Savannah run >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> The quickest and easiest way for me is to have him >>>>>>>>>>>>>>> >> added to >> >>>>>>>>>>>>>>> a VO. >>>>>>>>>>>>>>> How easy is it to add him to the GIN VO? One in >>>>>>>>>>>>>>> there I
>>>>>>>>>>>> can hit my >>>>>>>>>>>> >>>>>>>>>>>>>>> gums reload and he will be able to access UCSD >>>>>>>>>>>>>>> as a >>>>>>>>>>>>>>> GIN
>>>>>>>>>>>>>>> user. Any >>>>>>>>>>>>>>> other approach requires me hacking his DN into my >>>>>>>>>>>>>>> local
>>>>>>>>>>>> VO which I >>>>>>>>>>>> >>>>>>>>>>>>>>> prefer to avoid and does not help him with any >>>>>>>>>>>>>>> other
>> site. >> >>>>>>>>>>>>>>> Terrence >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> Cindy Zheng wrote: >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> Thanks, Terrence, for the quick reply! >>>>>>>>>>>>>>>> Colin has not been a GIN user. >>>>>>>>>>>>>>>> What do you think it's the best way to get colin >>>>>>>>>>>>>>>> >> access? >> >>>>>>>>>>>>>>>> Cindy >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> -----Original Message----- >>>>>>>>>>>>>>>>> From: Terrence Martin >>>>>>>>>>>>>>>>> >> [mailto:tmartin@physics.ucsd.edu] >> >>>> Sent: >>>> >>>>>>>>>>>>>>>>> Tuesday, November 28, 2006 2:53 PM >>>>>>>>>>>>>>>>> To: zhengc@sdsc.edu >>>>>>>>>>>>>>>>> Cc: 'JP Navarro'; gin-ops@ggf.org >>>>>>>>>>>>>>>>> Subject: Re: FW: start Savannah run >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> We only have a production cluster, but I should >>>>>>>>>>>>>>>>> still
>>>>>>>>>>>> be >>>>>>>>>>>> >>>>>>>>>>>>>>> able to help. >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> I do not seem to have Colin in my GUMS database >>>>>>>>>>>>>>>>> >> though >> >>>>>>>>>>>> for >>>>>>>>>>>> >>>>>>>>>>>>>>> GIN or any >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> other VO. Should he be downloaded with GIN's >>>>>>>>>>>>>>>>> users?
>>>>>>>>>>>>>>>>> Terrence >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> Cindy Zheng wrote: >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Hi, JP and Terrence, >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Could you help Colin to get ready to run >>>>>>>>>>>>>>>>>> Savannah
>>>>>>>>>>>>>>>>>> application on your GIN testbed clusters? >>>>>>>>>>>>>>>>>> You can find Colin's user info at >>>>>>>>>>>>>>>>>> http://wiki.pragma- >>>>>>>>>>>>>>>>>> >> grid.net/index.php?title=ColinDetails >> >>>>>>>>>>>>>>>>>> If you need more info or action from Colin, or >>>>>>>>>>>>>>>>>> have
>>>>>>>>>>>> any questions >>>>>>>>>>>> >>>>>>>>>>>>>>>>>> for Colin or me, please let us know. >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Thank you very much! >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Cindy >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> -----Original Message----- >>>>>>>>>>>>>>>>>> From: Cindy Zheng [mailto:zhengc@sdsc.edu] >>>>>>>>>>>>>>>>>> Sent: >>>>>>>>>>>>>>>>>> >>>> Tuesday, >>>> >>>>>>>>>>>>>>>>>> November 28, 2006 2:31 PM >>>>>>>>>>>>>>>>>> To: 'gin-ops@ggf.org' >>>>>>>>>>>>>>>>>> Subject: start Savannah run >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Dear all, >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Thanks for all the people involved to help make >>>>>>>>>>>>>>>>>> TDDFT application run and GIN testbed >>>>>>>>>>>>>>>>>> monitoring >>>>>>>>>>>>>>>>>> very fruitful experiments! We have learned a >>>>>>>>>>>>>>>>>> lot >>>>>>>>>>>>>>>>>> and
>>>> have >>>> >>>>>>>>>>>>>>>>>> presented our learnings at OGF and SC06. >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Let's continue our collaborative effort with >>>>>>>>>>>>>>>>>> our >>>>>>>>>>>>>>>>>> >> plan >> >>>>>>>>>>>> - start our >>>>>>>>>>>> >>>>>>>>>>>>>>>>>> next experiment with Savannah >>>>>>>>>>>>>>>>>> fire simulation - a data-intensive application, >>>>>>>>>>>>>>>>>> to
>>>>>>>>>>>> explore data >>>>>>>>>>>> >>>>>>>>>>>>>>>>>> related interoperation issues. >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Colin Enticott at Monash University of >>>>>>>>>>>>>>>>>> Australia >>>>>>>>>>>>>>>>>> is the lead driver. Colin has documented the >>>>>>>>>>>>>>>>>> introduction and requirements of this >>>>>>>>>>>>>>>>>> application at
>>>>>>>>>>>>>>>>>> http://wiki.pragma- >>>>>>>>>>>>>>>>>> grid.net/index.php?title=Savannah
>>>>>>>>>>>>>>>>>> or go to >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> http://forge.gridforum.org/sf/wiki/do/viewPage/ >>>>>>>>>>>>>>>>> projects.gin/wi >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> ki/GinOps >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> click "Savannah" under "Applications", >>>>>>>>>>>>>>>>> where "first Savannah experiment" is refering to >>>>>>>>>>>>>>>>> a previous experiment in PRAGMA testbed. The >>>>>>>>>>>>>>>>> "second Savannah experiment" is the one for GIN >>>>>>>>>>>>>>>>> >> testbed. >> >>>>>>>>>>>>>>>>> We like to run this application on all Grids in >>>>>>>>>>>>>>>>> GIN
>>>>>>>>>>>> testbed, but >>>>>>>>>>>> >>>>>>>>>>>>>>>>> in 2 steps. First, we will run it on >>>>>>>>>>>>>>>>> >>>>>>>>>>>> PRAGMA/TeraGrid/OSG - since >>>>>>>>>>>> >>>>>>>>>>>>>>>>> these should be relatively easier to do. We like >>>>>>>>>>>>>>>>> to
>> get >> >>>>>>>>>>>> this done >>>>>>>>>>>> >>>>>>>>>>>>>>>>> before the year end. >>>>>>>>>>>>>>>>> The next step, Colin will work with EGEE and >>>>>>>>>>>>>>>>> >> Nordugrid >> >>>>>>>>>>>>>>>>> to develop possible solutions, to enable >>>>>>>>>>>>>>>>> >> interoperation >> >>>>>>>>>>>>>>>>> and to include all 5 Grids in the run. >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> Thanks in advance for your continued help with >>>>>>>>>>>>>>>>> this!
>>>>>>>>>>>>>>>>> Cindy >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>> -- >>>>>>> gin-auth mailing list >>>>>>> gin-auth@ogf.org >>>>>>> http://www.ogf.org/mailman/listinfo/gin-auth >>>>>>> >>>>> -- >>>>> gin-ops mailing list >>>>> gin-ops@ogf.org >>>>> http://www.ogf.org/mailman/listinfo/gin-ops >>>>>
participants (3)
-
Colin Enticott
-
JP Navarro
-
Oscar Koeroo