Re: [gin-ops] [gin-auth] start Savannah run
Hi Terrence, I temporarily removed the CRL's from my certificate directory and the same error appears. If I am reading the error correctly, it looks like the server's APAC CRL has expired (1e12d831.r0)? I'd test on the command line, but I don't know how to get the expiry date from a .r0 file. Regards, Colin --- Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 Room H7.26, Level 7, Building H, Monash University Caulfield 3145, Australia
-----Original Message----- From: Terrence Martin [mailto:tmartin@physics.ucsd.edu] Sent: Tuesday, 6 February 2007 11:24 AM To: Colin Enticott Cc: 'JP Navarro'; gin-auth@ggf.org; gin-ops@ggf.org; zhengc@sdsc.edu Subject: Re: [gin-ops] [gin-auth] start Savannah run
Hi Colin, that was my next question if the CRL is up to date. :) I have seen the SSL handshake problem with clock synch issues however CRL out of date is something to watch for. Interesting I am told in at least some versions if the CRL directory is empty the test to see if the CRL is out of date never fails....
Terrence
Colin Enticott wrote:
Hi Terrence,
The clock on remus and tg-grid1 are within a few seconds of each other (maybe closer, I can't type that fast). Using Mike's suggestion (thankyou Mike) it looks like the "server" has an expired revocation list:
$ globus-url-copy -vb -dbg gsiftp://tg-gridftp.uc.teragrid.org:2811/etc/hosts file:///tmp/null
debug: starting to get gsiftp://tg- gridftp.uc.teragrid.org:2811/etc/hosts debug: connecting to gsiftp://tg-gridftp.uc.teragrid.org:2811/etc/hosts debug: response from gsiftp://tg-gridftp.uc.teragrid.org:2811/etc/hosts: 220 tg-s004.uc.teragrid.org GridFTP Server 2.1 (gcc32dbg, 1122653280-63) ready.
debug: authenticating with gsiftp://tg-gridftp.uc.teragrid.org:2811/etc/hosts debug: response from gsiftp://tg-gridftp.uc.teragrid.org:2811/etc/hosts: 530-globus_xio: Authentication Error 530-globus_gsi_callback_module: Could not verify credential 530-globus_gsi_callback_module: Could not verify credential 530-globus_gsi_callback_module: Invalid CRL: The available CRL has expired 530 End.
debug: fault on connection to gsiftp://tg-gridftp.uc.teragrid.org:2811/etc/hosts debug: data callback, error the server sent an error response: 530 530-globus_xio: Authentication Error 530-globus_gsi_callback_module: Could not verify credential 530-globus_gsi_callback_module: Could not verify credential 530-globus_gsi_callback_module: Invalid CRL: The available CRL has expired 530 End. , buffer 0xb7e76008, length 0, offset=0, eof=true debug: operation complete
error: the server sent an error response: 530 530-globus_xio: Authentication Error 530-globus_gsi_callback_module: Could not verify credential 530-globus_gsi_callback_module: Could not verify credential 530-globus_gsi_callback_module: Invalid CRL: The available CRL has expired 530 End.
Regards, Colin
--- Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 Room H7.26, Level 7, Building H, Monash University Caulfield 3145, Australia
-----Original Message----- From: Terrence Martin [mailto:tmartin@physics.ucsd.edu] Sent: Tuesday, 6 February 2007 5:27 AM To: Colin Enticott Cc: 'JP Navarro'; gin-auth@ggf.org; gin-ops@ggf.org; zhengc@sdsc.edu Subject: Re: [gin-ops] [gin-auth] start Savannah run
Just in case, can you confirm that the time is synchronized on the local and remote system?
Terrence
Colin Enticott wrote:
Hi JP Navarro,
The same problem has happened again. Output from gt2.4:
$ globusrun -a -r globus.infotech.monash.edu.au
GRAM Authentication test successful $ globusrun -a -r tg-grid1.uc.teragrid.org
GRAM Authentication test failure: authentication failed: GSS Major Status: Authentication Failed GSS Minor Status Error Chain:
init.c:499: globus_gss_assist_init_sec_context_async: Error during
context
initialization init_sec_context.c:171: gss_init_sec_context: SSLv3 handshake problems globus_i_gsi_gss_utils.c:888: globus_i_gsi_gss_handshake: Unable to
verify
remote side's credentials globus_i_gsi_gss_utils.c:854: globus_i_gsi_gss_handshake: SSLv3
handshake
problems: Couldn't do ssl handshake OpenSSL Error: s3_pkt.c:1046: in library: SSL routines, function SSL3_READ_BYTES: sslv3 alert certificate expired
I recently renewed my APAC certificate, but it should be the same. globus.infotech.monash.edu.au worked without change.
Help!
Regards, Colin
--- Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 Room H7.26, Level 7, Building H, Monash University Caulfield 3145,
Australia
-----Original Message----- From: JP Navarro [mailto:navarro@mcs.anl.gov] Sent: Thursday, 4 January 2007 3:00 AM To: Colin Enticott Cc: gin-auth@ggf.org; gin-ops@ggf.org; 'Terrence Martin';
zhengc@sdsc.edu
Subject: Re: [gin-ops] [gin-auth] start Savannah run
Colin,
We didn't have the Monash University CA configured on tg- grid1.uc.teragrid.org. This has now been fixed.
Regards,
JP Navarro
On Jan 3, 2007, at 2:13 AM, Colin Enticott wrote:
First of all, Happy new year everyone!
Thankyou for your help last year.
I have two quick questions:
I am now receiving a "certificate expired" message from tg-grid1.uc.teragrid.org. My certificate still works elsewhere. Is it the server's certificate?
And on osg-gw-2.t2.ucsd.edu, I need to write ~80GB of data for the experiment. Which directory can I use?
Thanks, Colin
--- Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 Room H7.26, Level 7, Building H, Monash University Caulfield 3145, Australia
> -----Original Message----- > From: Terrence Martin [mailto:tmartin@physics.ucsd.edu] > Sent: Tuesday, 5 December 2006 5:41 PM > To: Colin Enticott > Cc: 'Yoshio Tanaka'; D.Bannon@vpac.org; navarro@mcs.anl.gov; gin- > auth@ggf.org; gin-ops@ggf.org > Subject: Re: [gin-ops] [gin-auth] start Savannah run > > colin, if you want to try logging into > > colin@uaf-1.t2.ucsd.edu > > run > > source /data/vdt/setup.sh > > then grab a cert with grid-proxy-init and give it a try. > > It is the machine that all my users use to submit to my OSG site. > > Terrence > > > > Colin Enticott wrote: > > >> Hi Yoshio, >> >> I've tried it from 3 servers. On the server I have root access >> on, I >> >> > just > > >> manually synced and I am still having the problem. I am >> wondering if >> >> > the CA > > >> certificate I sent is okay. It's the APAC CA files we use here >> on our >> servers. >> >> On the Pragma resources, I have been using my old certificate (as >> >> > initially > > >> there was teething problems with the new APAC CA). Can you >> update your >> server with the details below and I'll give it a try: >> >> http://wiki.pragma-grid.net/index.php?title=ColinDetails >> >> Thanks, >> Colin >> >> --- >> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 >> Room H7.26, Level 7, Building H, Monash University Caulfield 3145, >> >> > Australia > > >> >>> -----Original Message----- >>> From: Yoshio Tanaka [mailto:yoshio.tanaka@aist.go.jp] >>> Sent: Tuesday, 5 December 2006 4:51 PM >>> To: Colin.Enticott@csse.monash.edu.au >>> Cc: D.Bannon@vpac.org; tmartin@physics.ucsd.edu; >>> navarro@mcs.anl.gov; >>> >>> > gin- > > >>> auth@ggf.org; gin-ops@ggf.org; yoshio.tanaka@aist.go.jp >>> Subject: Re: [gin-ops] [gin-auth] start Savannah run >>> >>> >>> Hi Colin, >>> >>> Are you able to submit jobs to PRAGMA machines? >>> If yes, the APAC CA on your machine should have no problem. >>> >>> One point that I would like to confirm is... >>> Is the time of your client machine correct? Do you use an NTP >>> server >>> for synchronize the time? >>> >>> Thanks, >>> >>> -- >>> Yoshio Tanaka (yoshio.tanaka@aist.go.jp) >>> http://ninf.apgrid.org/ >>> http://www.apgridpma.org/ >>> >>> >>> From: Colin Enticott <Colin.Enticott@csse.monash.edu.au> >>> Subject: RE: [gin-ops] [gin-auth] start Savannah run >>> Date: Tue, 05 Dec 2006 16:38:40 +1100 >>> Message-ID: <01df01c7182f$9f59a3d0$1e46c282@nail> >>> >>> >>> >>> >>>> Hi Yoshio, >>>> >>>> I am unable to log in. But below is what JP sent me. Any ideas on >>>> >>>> > what > > >>> it >>> >>> >>> >>>> means? >>>> >>>> Doing a Google I find: >>>> The error might arise from an expired certificate or when >>>> trying to >>>> >>>> >>>> >>> restore >>> >>> >>> >>>> certification expiration date and job are in some state in the >>>> Grid >>>> execution list. >>>> >>>> I guess it might be a problem with the APAC CA on your >>>> machines? Was >>>> >>>> >>>> >>> the CA >>> >>> >>> >>>> set up previously? Or did you use the ones on my info page? (This >>>> >>>> >>>> >>> leaves >>> >>> >>> >>>> the question if I packaged them correctly). >>>> >>>> >>>> On Fri, 2006-12-01 at 12:34 -0600, JP Navarro wrote: >>>> >>>> TIME: Thu Nov 30 18:49:42 2006 >>>> PID: 9608 -- Notice: 0: GATEKEEPER_ACCT_FD=5 (/var/globus/prews- >>>> gram-4.0.1-r3-i1/log/globus-gatekeeper.log) >>>> TIME: Thu Nov 30 18:49:42 2006 >>>> PID: 9608 -- Notice: 6: Got connection 198.202.88.52 at Thu >>>> Nov 30 >>>> 18:49:42 2006 >>>> >>>> Failed reading length 0 >>>> GSS authentication failure >>>> globus_gss_assist token :3: read failure: Connection closed >>>> Failure: GSS failed Major:01090000 Minor:00000000 Token:00000003 >>>> >>>> TIME: Thu Nov 30 18:49:42 2006 >>>> PID: 9608 -- Failure: GSS failed Major:01090000 Minor:00000000 >>>> Token:00000003 >>>> >>>> >>>> Colin >>>> >>>> --- >>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 >>>> Room H7.26, Level 7, Building H, Monash University Caulfield 3145, >>>> >>>> >>>> >>> Australia >>> >>> >>> >>>>> -----Original Message----- >>>>> From: Yoshio Tanaka [mailto:yoshio.tanaka@aist.go.jp] >>>>> Sent: Tuesday, 5 December 2006 12:51 PM >>>>> To: Colin.Enticott@csse.monash.edu.au >>>>> Cc: D.Bannon@vpac.org; tmartin@physics.ucsd.edu; >>>>> navarro@mcs.anl.gov; >>>>> >>>>> >>>>> >>> gin- >>> >>> >>> >>>>> auth@ggf.org; gin-ops@ggf.org; yoshio.tanaka@aist.go.jp >>>>> Subject: Re: [gin-ops] [gin-auth] start Savannah run >>>>> >>>>> >>>>> Hi Colin, >>>>> >>>>> If you can login to these machines, see the globus >>>>> gatekeeper's log >>>>> >>>>> >>>>> >>> at: >>> >>> >>> >>>>> ${GLOBUS_LOCATION}/var/globus-gatekeeper.log >>>>> >>>>> You may find error logs such as no entry in mapfile and >>>>> failure in >>>>> tracing cert chain. >>>>> >>>>> Regards, >>>>> >>>>> -- >>>>> Yoshio Tanaka (yoshio.tanaka@aist.go.jp) >>>>> http://ninf.apgrid.org/ >>>>> http://www.apgridpma.org/ >>>>> >>>>> From: Colin Enticott <Colin.Enticott@csse.monash.edu.au> >>>>> Subject: RE: [gin-ops] [gin-auth] start Savannah run >>>>> Date: Tue, 05 Dec 2006 12:24:42 +1100 >>>>> Message-ID: <01c001c7180c$24c430e0$1e46c282@nail> >>>>> >>>>> >>>>> >>>>> >>>>>> Thanks Yoshio, >>>>>> >>>>>> So it looks like authentication issues as I can connect to >>>>>> port 2119 >>>>>> >>>>>> >>>>>> >>> on >>> >>> >>> >>>>> both >>>>> >>>>> >>>>> >>>>>> hosts: >>>>>> >>>>>> cme@edda$ globusrun -a -r tg-grid1.uc.teragrid.org >>>>>> >>>>>> GRAM Authentication test failure: connecting to the job manager >>>>>> >>>>>> >>>>>> >>> failed. >>> >>> >>> >>>>>> Possible reasons: job terminated, invalid job contact, network >>>>>> >>>>>> >>>>>> >>> problems, >>> >>> >>> >>>>> ... >>>>> >>>>> >>>>> >>>>>> cme@edda$ globusrun -a -r osg-gw-2.t2.ucsd.edu >>>>>> >>>>>> GRAM Authentication test failure: connecting to the job manager >>>>>> >>>>>> >>>>>> >>> failed. >>> >>> >>> >>>>>> Possible reasons: job terminated, invalid job contact, network >>>>>> >>>>>> >>>>>> >>> problems, >>> >>> >>> >>>>> ... >>>>> >>>>> >>>>> >>>>>> Regards, >>>>>> Colin >>>>>> >>>>>> --- >>>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 >>>>>> Room H7.26, Level 7, Building H, Monash University Caulfield >>>>>> 3145, >>>>>> >>>>>> >>>>>> >>>>> Australia >>>>> >>>>> >>>>> >>>>>>> -----Original Message----- >>>>>>> From: Yoshio Tanaka [mailto:yoshio.tanaka@aist.go.jp] >>>>>>> Sent: Tuesday, 5 December 2006 12:21 PM >>>>>>> To: Colin.Enticott@csse.monash.edu.au >>>>>>> Cc: D.Bannon@vpac.org; tmartin@physics.ucsd.edu; >>>>>>> >>>>>>> >>>>>>> >>> navarro@mcs.anl.gov; >>> >>> >>> >>>>> gin- >>>>> >>>>> >>>>> >>>>>>> auth@ggf.org; gin-ops@ggf.org; yoshio.tanaka@aist.go.jp >>>>>>> Subject: Re: [gin-ops] [gin-auth] start Savannah run >>>>>>> >>>>>>> >>>>>>> Hi Colin, >>>>>>> >>>>>>> Please test the authentication by the following command: >>>>>>> >>>>>>> % globusrun -a -r osg-gw-2.t2.ucsd.edu >>>>>>> >>>>>>> % globusrun -a -r tg-grid1.uc.teragrid.org >>>>>>> >>>>>>> Thanks, >>>>>>> >>>>>>> -- >>>>>>> Yoshio Tanaka (yoshio.tanaka@aist.go.jp) >>>>>>> http://ninf.apgrid.org/ >>>>>>> http://www.apgridpma.org/ >>>>>>> >>>>>>> >>>>>>> From: Colin Enticott <Colin.Enticott@csse.monash.edu.au> >>>>>>> Subject: Re: [gin-ops] [gin-auth] start Savannah run >>>>>>> Date: Tue, 05 Dec 2006 11:44:05 +1100 >>>>>>> Message-ID: <017401c71806$77cf6760$1e46c282@nail> >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>>>> Thanks David, >>>>>>>> >>>>>>>> But still the same problem. As you can see, my certificate >>>>>>>> >>>>>>>> >>>>>>>> >>> still >>> >>> >>> >>>>> works >>>>> >>>>> >>>>> >>>>>>> on >>>>>>> >>>>>>> >>>>>>> >>>>>>>> the vpac host and there is definitely no firewall in the way: >>>>>>>> >>>>>>>> cme@edda$ grid-proxy-init -cert usercert.pem.APACGrid -key >>>>>>>> userkey.pem.APACGrid >>>>>>>> Your identity: /C=AU/O=APACGrid/OU=Monash University/CN=Colin >>>>>>>> >>>>>>>> >>>>>>>> >>>>> Enticott >>>>> >>>>> >>>>> >>>>>>>> Enter GRID pass phrase for this identity: >>>>>>>> Creating proxy ................................... Done >>>>>>>> Your proxy is valid until: Tue Dec 5 23:28:47 2006 >>>>>>>> cme@edda$ globus-job-run osg-gw-2.t2.ucsd.edu/jobmanager- fork >>>>>>>> >>>>>>>> >>>>>>>> >>>>> /bin/uname >>>>> >>>>> >>>>> >>>>>>> -a >>>>>>> >>>>>>> >>>>>>> >>>>>>>> GRAM Job submission failed because the connection to the >>>>>>>> server >>>>>>>> >>>>>>>> >>>>>>>> >>>>> failed >>>>> >>>>> >>>>> >>>>>>>> (check host and port) (error code 12) >>>>>>>> cme@edda$ globus-job-run tg- grid1.uc.teragrid.org/jobmanager- >>>>>>>> >>>>>>>> >>>>>>>> >>> fork >>> >>> >>> >>>>>>> /bin/uname >>>>>>> >>>>>>> >>>>>>> >>>>>>>> -a >>>>>>>> GRAM Job submission failed because the connection to the >>>>>>>> server >>>>>>>> >>>>>>>> >>>>>>>> >>>>> failed >>>>> >>>>> >>>>> >>>>>>>> (check host and port) (error code 12) >>>>>>>> cme@edda$ globus-job-run ng1.vpac.org/jobmanager-fork /bin/ >>>>>>>> uname >>>>>>>> >>>>>>>> >>>>>>>> >>> -a >>> >>> >>> >>>>>>>> Linux ng1.vpac.org 2.6.16.29-xen #4 SMP Sun Oct 15 13:20:46 >>>>>>>> BST >>>>>>>> >>>>>>>> >>>>>>>> >>> 2006 >>> >>> >>> >>>>>>> i686 >>>>>>> >>>>>>> >>>>>>> >>>>>>>> i686 i386 GNU/Linux >>>>>>>> cme@edda$ telnet tg-grid1.uc.teragrid.org 2119 >>>>>>>> Trying 192.5.198.225... >>>>>>>> Connected to tg-grid1.uc.teragrid.org. >>>>>>>> Escape character is '^]'. >>>>>>>> >>>>>>>> >>>>>>>> Connection closed by foreign host. >>>>>>>> cme@edda$ telnet osg-gw-2.t2.ucsd.edu 2119 >>>>>>>> Trying 137.110.141.17... >>>>>>>> Connected to osg-gw-2.t2.ucsd.edu. >>>>>>>> Escape character is '^]'. >>>>>>>> >>>>>>>> >>>>>>>> Connection closed by foreign host. >>>>>>>> >>>>>>>> >>>>>>>> Any other thoughts from anyone? >>>>>>>> >>>>>>>> Thanks, >>>>>>>> Colin >>>>>>>> >>>>>>>> --- >>>>>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 >>>>>>>> Room H7.26, Level 7, Building H, Monash University Caulfield >>>>>>>> >>>>>>>> >>>>>>>> >>> 3145, >>> >>> >>> >>>>>>> Australia >>>>>>> >>>>>>> >>>>>>> >>>>>>>>> -----Original Message----- >>>>>>>>> From: David Bannon [mailto:D.Bannon@vpac.org] >>>>>>>>> Sent: Monday, 4 December 2006 6:08 PM >>>>>>>>> To: JP Navarro >>>>>>>>> Cc: Colin Enticott; gin-auth@ggf.org; gin-ops@ggf.org; >>>>>>>>> >>>>>>>>> >>>>>>>>> >>> 'Terrence >>> >>> >>> >>>>>>> Martin' >>>>>>> >>>>>>> >>>>>>> >>>>>>>>> Subject: Re: [gin-auth] start Savannah run >>>>>>>>> >>>>>>>>> >>>>>>>>> Colin, you can run as a Gin user on any of the VPAC machines, >>>>>>>>> >>>>>>>>> >>>>>>>>> >>> my >>> >>> >>> >>>>> be >>>>> >>>>> >>>>> >>>>>>>>> easier to debug.... >>>>>>>>> >>>>>>>>> David >>>>>>>>> >>>>>>>>> >>>>>>>>> On Fri, 2006-12-01 at 12:34 -0600, JP Navarro wrote: >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>>> Colin, >>>>>>>>>> >>>>>>>>>> The error in the logs is below. Not sure what it means. >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>> Could >>> >>> >>> >>>>> you >>>>> >>>>> >>>>> >>>>>>>>>> try this >>>>>>>>>> test again from your SDSC TeraGrid account so we can rule >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>> out >>> >>> >>> >>>>>>>>>> software and >>>>>>>>>> firewall issues? >>>>>>>>>> >>>>>>>>>> Thanks, >>>>>>>>>> >>>>>>>>>> JP >>>>>>>>>> >>>>>>>>>> TIME: Thu Nov 30 18:49:42 2006 >>>>>>>>>> PID: 9608 -- Notice: 0: GATEKEEPER_ACCT_FD=5 >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>> (/var/globus/prews- >>>>> >>>>> >>>>> >>>>>>>>>> gram-4.0.1-r3-i1/log/globus-gatekeeper.log) >>>>>>>>>> TIME: Thu Nov 30 18:49:42 2006 >>>>>>>>>> PID: 9608 -- Notice: 6: Got connection 198.202.88.52 at >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>> Thu >>> >>> >>> >>>>> Nov 30 >>>>> >>>>> >>>>> >>>>>>>>>> 18:49:42 2006 >>>>>>>>>> >>>>>>>>>> Failed reading length 0 >>>>>>>>>> GSS authentication failure >>>>>>>>>> globus_gss_assist token :3: read failure: Connection >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>> closed >>> >>> >>> >>>>>>>>>> Failure: GSS failed Major:01090000 Minor:00000000 >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>> Token:00000003 >>> >>> >>> >>>>>>>>>> TIME: Thu Nov 30 18:49:42 2006 >>>>>>>>>> PID: 9608 -- Failure: GSS failed Major:01090000 >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>> Minor:00000000 >>> >>> >>> >>>>>>>>>> Token:00000003 >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> On Nov 30, 2006, at 7:05 PM, Colin Enticott wrote: >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>>>>>>> Thanks JP, >>>>>>>>>>> >>>>>>>>>>> But I am running into some problems. I've tried both from >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>> our >>> >>> >>> >>>>>>>>>>> server and >>>>>>>>>>> rocks-52 and this is what I get: >>>>>>>>>>> [cme@rocks-52 ~]$ globus-job-run tg- grid1.uc.teragrid.org/ >>>>>>>>>>> jobmanager-fork >>>>>>>>>>> /bin/uname -a >>>>>>>>>>> GRAM Job submission failed because the connection to the >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>>> server >>>>> >>>>> >>>>> >>>>>>> failed >>>>>>> >>>>>>> >>>>>>> >>>>>>>>>>> (check host and port) (error code 12) >>>>>>>>>>> [cme@rocks-52 ~]$ grid-proxy-info >>>>>>>>>>> subject : /C=AU/O=APACGrid/OU=Monash University/CN=Colin >>>>>>>>>>> Enticott/CN=1087048434 >>>>>>>>>>> issuer : /C=AU/O=APACGrid/OU=Monash University/CN=Colin >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>>> Enticott >>>>> >>>>> >>>>> >>>>>>>>>>> identity : /C=AU/O=APACGrid/OU=Monash University/CN=Colin >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>>> Enticott >>>>> >>>>> >>>>> >>>>>>>>>>> type : Proxy draft (pre-RFC) compliant impersonation >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>> proxy >>> >>> >>> >>>>>>>>>>> strength : 512 bits >>>>>>>>>>> path : /home/cme/globus_proxy.APACGrid >>>>>>>>>>> timeleft : 836:30:26 (34.8 days) >>>>>>>>>>> [cme@rocks-52 ~]$ ssh tg-grid1.uc.teragrid.org >>>>>>>>>>> Warning: Permanently added 'tg-grid1.uc.teragrid.org' >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>> (RSA) to >>> >>> >>> >>>>> the >>>>> >>>>> >>>>> >>>>>>>>>>> list of >>>>>>>>>>> known hosts. >>>>>>>>>>> Permission denied (external- >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>>>>> keyx,gssapi,publickey,gssapi,hostbased). >>>>>>> >>>>>>> >>>>>>> >>>>>>>>>>> [cme@rocks-52 ~]$ >>>>>>>>>>> >>>>>>>>>>> That is the certificate that I registered with. I also >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>> tried >>> >>> >>> >>>>> the >>>>> >>>>> >>>>> >>>>>>>>>>> ssh key >>>>>>>>>>> pair I put up on the pragma wiki. >>>>>>>>>>> >>>>>>>>>>> Any thoughts? >>>>>>>>>>> >>>>>>>>>>> Thanks, >>>>>>>>>>> Colin >>>>>>>>>>> >>>>>>>>>>> --- >>>>>>>>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 >>>>>>>>>>> Room H7.26, Level 7, Building H, Monash University >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>> Caulfield >>> >>> >>> >>>>> 3145, >>>>> >>>>> >>>>> >>>>>>>>>>> Australia >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>>> -----Original Message----- >>>>>>>>>>>> From: JP Navarro [mailto:navarro@mcs.anl.gov] >>>>>>>>>>>> Sent: Friday, 1 December 2006 2:47 AM >>>>>>>>>>>> To: Colin Enticott >>>>>>>>>>>> Cc: zhengc@sdsc.edu; 'Terrence Martin'; gin-ops@ggf.org; >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> >>>>> 'Oscar >>>>> >>>>> >>>>> >>>>>>>>>>>> Koeroo'; >>>>>>>>>>>> gin-auth@ggf.org >>>>>>>>>>>> Subject: Re: start Savannah run >>>>>>>>>>>> >>>>>>>>>>>> Colin, >>>>>>>>>>>> >>>>>>>>>>>> You should be set to go on the UC/ANL TeraGrid cluster. >>>>>>>>>>>> >>>>>>>>>>>> GT4 Pre-WS GRAM: tg-grid1.uc.teragrid.org:2119 >>>>>>>>>>>> GT4 WS GRAM: tg-grid1.uc.teragrid.org:8443 (FORK, >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> >>> PBS) >>> >>> >>> >>>>>>>>>>>> GT4 GridFTP: tg-gridftp.uc.teragrid.org:2811 >>>>>>>>>>>> >>>>>>>>>>>> Regards, >>>>>>>>>>>> >>>>>>>>>>>> JP >>>>>>>>>>>> >>>>>>>>>>>> On Nov 30, 2006, at 2:43 AM, Colin Enticott wrote: >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>>> Thankyou everyone. >>>>>>>>>>>>> >>>>>>>>>>>>> I am now registered on the GIN VO (well, I appear here: >>>>>>>>>>>>> http://kuiken.nikhef.nl/gin.ggf.org/grid-mapfile). >>>>>>>>>>>>> >>>>>>>>>>>>> What is my next step? >>>>>>>>>>>>> >>>>>>>>>>>>> Thanks, >>>>>>>>>>>>> Colin >>>>>>>>>>>>> >>>>>>>>>>>>> --- >>>>>>>>>>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 >>>>>>>>>>>>> Room H7.26, Level 7, Building H, Monash University >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>> >>> Caulfield >>> >>> >>> >>>>>>> 3145, >>>>>>> >>>>>>> >>>>>>> >>>>>>>>>>>>> Australia >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>>> -----Original Message----- >>>>>>>>>>>>>> From: Cindy Zheng [mailto:zhengc@sdsc.edu] >>>>>>>>>>>>>> Sent: Thursday, 30 November 2006 11:59 AM >>>>>>>>>>>>>> To: 'Terrence Martin' >>>>>>>>>>>>>> Cc: 'JP Navarro'; gin-ops@ggf.org; 'Oscar Koeroo'; >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>> 'Colin >>> >>> >>> >>>>>>>>>>>>>> Enticott'; gin- >>>>>>>>>>>>>> auth@ggf.org >>>>>>>>>>>>>> Subject: RE: FW: start Savannah run >>>>>>>>>>>>>> >>>>>>>>>>>>>> Thank you, Terrence! >>>>>>>>>>>>>> We'll wait to hear from Colin when Colin finishes >>>>>>>>>>>>>> registering to gin vo. >>>>>>>>>>>>>> Cindy >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>>> -----Original Message----- >>>>>>>>>>>>>>> From: Terrence Martin >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>> [mailto:tmartin@physics.ucsd.edu] >>> >>> >>> >>>>>>>>>>>>>>> Sent: Wednesday, November 29, 2006 11:36 AM >>>>>>>>>>>>>>> To: Oscar Koeroo >>>>>>>>>>>>>>> Cc: zhengc@sdsc.edu; 'JP Navarro'; gin-ops@ggf.org; >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>> 'Colin >>> >>> >>> >>>>>>>>>>>>>>> Enticott'; gin-auth@ggf.org >>>>>>>>>>>>>>> Subject: Re: FW: start Savannah run >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> Oscar Koeroo wrote: >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> Hi Terrence and Cindy, >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> Getting new users up for registration on the GIN VO >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>> is >>> >>> >>> >>>>> easy. >>>>> >>>>> >>>>> >>>>>>>>>>>>>>>> To be >>>>>>>>>>>>>>>> able to access the secured website and for >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>> authentication >>> >>> >>> >>>>>>> reasons >>>>>>> >>>>>>> >>>>>>> >>>>>>>>>>>>>>>> during the registration process new users must have >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>> their >>> >>> >>> >>>>>>>>>>>>>>> certificate >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> loaded and ready in their webbrowser. The VOMS server >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>> is >>> >>> >>> >>>>>>>>>>>>>>> loaded with >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> all IGTF accredited CAs including the Fermilab kCA. >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> Go to the website: >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>> https://kuiken.nikhef.nl:8443/voms/gin.ggf.org/ and >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> apply for a "New user registration". >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> The usual VOMS configuration info is also available. >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>> I >>> >>> >>> >>>>>>>>>>>>>>> don't know what >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> you'll need to populate a GUMS server. This VOMS >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>> server >>> >>> >>> >>>>> is as >>>>> >>>>> >>>>> >>>>>>> any >>>>>>> >>>>>>> >>>>>>> >>>>>>>>>>>>>>>> other so I guess you can use your regular setup. >>>>>>>>>>>>>>>> In addition to the secured interface I've also made >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>> available >>>>> >>>>> >>>>> >>>>>>> a >>>>>>> >>>>>>> >>>>>>> >>>>>>>>>>>>>>>> non-secured way of grabbing a grid-mapfile. >>>>>>>>>>>>>>>> http://kuiken.nikhef.nl/gin.ggf.org/grid-mapfile >>>>>>>>>>>>>>>> There is also an RSS-feed pointing to the grid- >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>> mapfile >>> >>> >>> >>>>> and >>>>> >>>>> >>>>> >>>>>>>>>>>>>>> the secured >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> interface at >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>> http://kuiken.nikhef.nl/gin.ggf.org/feed- >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>> gin.ggf.org.xml >>> >>> >>> >>>>>>>>>>>>>>>> Unfortunately I'm not aware of a clear guide. I do >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>> know a >>> >>> >>> >>>>>>>>>>>>>>>> guide for >>>>>>>>>>>>>>>> creating the packed certificate files that go into >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>> your >>> >>> >>> >>>>>>>>>>>>>>> browser if you >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> start from a two PEM formated files (certificate file >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>> + >>> >>> >>> >>>>>>>>>>>>>>>> private key >>>>>>>>>>>>>>>> file) that's at >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>> http://certificate.nikhef.nl/info/browser >>> >>> >>> >>>>>>>>>>>>>>>> Once a user has passed that stage, the registration >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>> for >>> >>> >>> >>>>> the >>>>> >>>>> >>>>> >>>>>>>>>>>>>>> VO is as >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> trivial as any web-forum account registration. >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>> I am assuming this user already has a grid cert since >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>> they >>> >>> >>> >>>>>>>>>>>>>>> list a DN so >>>>>>>>>>>>>>> only VOMS registration is required. Once that is done >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>> either I >>>>> >>>>> >>>>> >>>>>>>>>>>>>>> run my >>>>>>>>>>>>>>> update of GUMS manually or in 720/2 minutes on average >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>> the >>> >>> >>> >>>>>>>>>>>>>>> user will be >>>>>>>>>>>>>>> automatically downloaded into my GUMS database. I >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>> actually >>> >>> >>> >>>>> do >>>>> >>>>> >>>>> >>>>>>>>>>>>>>> not have >>>>>>>>>>>>>>> to do anything, but I can speed things up ever so >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>> slightly >>> >>> >>> >>>>> if >>>>> >>>>> >>>>> >>>>>>> I >>>>>>> >>>>>>> >>>>>>> >>>>>>>>>>>>>>> am in >>>>>>>>>>>>>>> the office and someone asks me to try refreshing gums. >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> Terrence >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> Oscar >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> Cindy Zheng wrote: >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> Sounds right, Terrence. Let me ask Oscar who has >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>> helped >>> >>> >>> >>>>> me >>>>> >>>>> >>>>> >>>>>>>>>>>>>>> with GIN >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> VO before. >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> Hi, Oscar, >>>>>>>>>>>>>>>>> Could you advise Colin what need to be done to be >>>>>>>>>>>>>>>>> added in GIN VO? >>>>>>>>>>>>>>>>> I'm also cc'ing to gin-auth list. >>>>>>>>>>>>>>>>> If there is a guide for potential GIN users, please >>>>>>>>>>>>>>>>> let me know the url and I can link it to our GINOPS >>>>>>>>>>>>>>>>> page. >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> Thanks, >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> Cindy >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> -----Original Message----- >>>>>>>>>>>>>>>>>> From: Terrence Martin >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>> [mailto:tmartin@physics.ucsd.edu] >>> >>> >>> >>>>>>> Sent: >>>>>>> >>>>>>> >>>>>>> >>>>>>>>>>>>>>>>>> Tuesday, November 28, 2006 3:24 PM >>>>>>>>>>>>>>>>>> To: zhengc@sdsc.edu >>>>>>>>>>>>>>>>>> Cc: 'JP Navarro'; gin-ops@ggf.org; 'Colin Enticott' >>>>>>>>>>>>>>>>>> Subject: Re: FW: start Savannah run >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> The quickest and easiest way for me is to have him >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>> added to >>>>> >>>>> >>>>> >>>>>>>>>>>>>>>>>> a VO. >>>>>>>>>>>>>>>>>> How easy is it to add him to the GIN VO? One in >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>> there I >>> >>> >>> >>>>>>>>>>>>>>> can hit my >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> gums reload and he will be able to access UCSD as a >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>> GIN >>> >>> >>> >>>>>>>>>>>>>>>>>> user. Any >>>>>>>>>>>>>>>>>> other approach requires me hacking his DN into my >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>> local >>> >>> >>> >>>>>>>>>>>>>>> VO which I >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> prefer to avoid and does not help him with any >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>> other >>> >>> >>> >>>>> site. >>>>> >>>>> >>>>> >>>>>>>>>>>>>>>>>> Terrence >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Cindy Zheng wrote: >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> Thanks, Terrence, for the quick reply! >>>>>>>>>>>>>>>>>>> Colin has not been a GIN user. >>>>>>>>>>>>>>>>>>> What do you think it's the best way to get colin >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>> access? >>>>> >>>>> >>>>> >>>>>>>>>>>>>>>>>>> Cindy >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> -----Original Message----- >>>>>>>>>>>>>>>>>>>> From: Terrence Martin >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>> [mailto:tmartin@physics.ucsd.edu] >>>>> >>>>> >>>>> >>>>>>> Sent: >>>>>>> >>>>>>> >>>>>>> >>>>>>>>>>>>>>>>>>>> Tuesday, November 28, 2006 2:53 PM >>>>>>>>>>>>>>>>>>>> To: zhengc@sdsc.edu >>>>>>>>>>>>>>>>>>>> Cc: 'JP Navarro'; gin-ops@ggf.org >>>>>>>>>>>>>>>>>>>> Subject: Re: FW: start Savannah run >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> We only have a production cluster, but I should >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>> still >>> >>> >>> >>>>>>>>>>>>>>> be >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> able to help. >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> I do not seem to have Colin in my GUMS database >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>> though >>>>> >>>>> >>>>> >>>>>>>>>>>>>>> for >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> GIN or any >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> other VO. Should he be downloaded with GIN's >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>> users? >>> >>> >>> >>>>>>>>>>>>>>>>>>>> Terrence >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> Cindy Zheng wrote: >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> Hi, JP and Terrence, >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> Could you help Colin to get ready to run >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>> Savannah >>> >>> >>> >>>>>>>>>>>>>>>>>>>>> application on your GIN testbed clusters? >>>>>>>>>>>>>>>>>>>>> You can find Colin's user info at >>>>>>>>>>>>>>>>>>>>> http://wiki.pragma- >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>> grid.net/index.php?title=ColinDetails >>>>> >>>>> >>>>> >>>>>>>>>>>>>>>>>>>>> If you need more info or action from Colin, or >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>> have >>> >>> >>> >>>>>>>>>>>>>>> any questions >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> for Colin or me, please let us know. >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> Thank you very much! >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> Cindy >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> -----Original Message----- >>>>>>>>>>>>>>>>>>>>> From: Cindy Zheng [mailto:zhengc@sdsc.edu] Sent: >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>>>> Tuesday, >>>>>>> >>>>>>> >>>>>>> >>>>>>>>>>>>>>>>>>>>> November 28, 2006 2:31 PM >>>>>>>>>>>>>>>>>>>>> To: 'gin-ops@ggf.org' >>>>>>>>>>>>>>>>>>>>> Subject: start Savannah run >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> Dear all, >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> Thanks for all the people involved to help make >>>>>>>>>>>>>>>>>>>>> TDDFT application run and GIN testbed monitoring >>>>>>>>>>>>>>>>>>>>> very fruitful experiments! We have learned a lot >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>> and >>> >>> >>> >>>>>>> have >>>>>>> >>>>>>> >>>>>>> >>>>>>>>>>>>>>>>>>>>> presented our learnings at OGF and SC06. >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> Let's continue our collaborative effort with our >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>> plan >>>>> >>>>> >>>>> >>>>>>>>>>>>>>> - start our >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> next experiment with Savannah >>>>>>>>>>>>>>>>>>>>> fire simulation - a data-intensive application, >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>> to >>> >>> >>> >>>>>>>>>>>>>>> explore data >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> related interoperation issues. >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> Colin Enticott at Monash University of Australia >>>>>>>>>>>>>>>>>>>>> is the lead driver. Colin has documented the >>>>>>>>>>>>>>>>>>>>> introduction and requirements of this >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>> application at >>> >>> >>> >>>>>>>>>>>>>>>>>>>>> http://wiki.pragma- >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>> grid.net/index.php?title=Savannah >>> >>> >>> >>>>>>>>>>>>>>>>>>>>> or go to >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> http://forge.gridforum.org/sf/wiki/do/viewPage/ >>>>>>>>>>>>>>>>>>>> projects.gin/wi >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> ki/GinOps >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> click "Savannah" under "Applications", >>>>>>>>>>>>>>>>>>>> where "first Savannah experiment" is refering to >>>>>>>>>>>>>>>>>>>> a previous experiment in PRAGMA testbed. The >>>>>>>>>>>>>>>>>>>> "second Savannah experiment" is the one for GIN >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>> testbed. >>>>> >>>>> >>>>> >>>>>>>>>>>>>>>>>>>> We like to run this application on all Grids in >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>> GIN >>> >>> >>> >>>>>>>>>>>>>>> testbed, but >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> in 2 steps. First, we will run it on >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>> PRAGMA/TeraGrid/OSG - since >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> these should be relatively easier to do. We like >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>> to >>> >>> >>> >>>>> get >>>>> >>>>> >>>>> >>>>>>>>>>>>>>> this done >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> before the year end. >>>>>>>>>>>>>>>>>>>> The next step, Colin will work with EGEE and >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>> Nordugrid >>>>> >>>>> >>>>> >>>>>>>>>>>>>>>>>>>> to develop possible solutions, to enable >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>> interoperation >>>>> >>>>> >>>>> >>>>>>>>>>>>>>>>>>>> and to include all 5 Grids in the run. >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> Thanks in advance for your continued help with >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>> this! >>> >>> >>> >>>>>>>>>>>>>>>>>>>> Cindy >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>> -- >>>>>>>>>> gin-auth mailing list >>>>>>>>>> gin-auth@ogf.org >>>>>>>>>> http://www.ogf.org/mailman/listinfo/gin-auth >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>>>> -- >>>>>>>> gin-ops mailing list >>>>>>>> gin-ops@ogf.org >>>>>>>> http://www.ogf.org/mailman/listinfo/gin-ops >>>>>>>> >>>>>>>> >>>>>>>> >>
Hi, Colin, APAC current crl is http://ca.apac.edu.au/pub/crl/cacrl.pem. Cindy -----Original Message----- From: Colin Enticott [mailto:Colin.Enticott@csse.monash.edu.au] Sent: Monday, February 05, 2007 4:47 PM To: 'Terrence Martin' Cc: 'JP Navarro'; gin-auth@ggf.org; gin-ops@ggf.org; zhengc@sdsc.edu Subject: RE: [gin-ops] [gin-auth] start Savannah run Hi Terrence, I temporarily removed the CRL's from my certificate directory and the same error appears. If I am reading the error correctly, it looks like the server's APAC CRL has expired (1e12d831.r0)? I'd test on the command line, but I don't know how to get the expiry date from a .r0 file. Regards, Colin --- Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 Room H7.26, Level 7, Building H, Monash University Caulfield 3145, Australia
-----Original Message----- From: Terrence Martin [mailto:tmartin@physics.ucsd.edu] Sent: Tuesday, 6 February 2007 11:24 AM To: Colin Enticott Cc: 'JP Navarro'; gin-auth@ggf.org; gin-ops@ggf.org; zhengc@sdsc.edu Subject: Re: [gin-ops] [gin-auth] start Savannah run
Hi Colin, that was my next question if the CRL is up to date. :) I have seen the SSL handshake problem with clock synch issues however CRL out of date is something to watch for. Interesting I am told in at least some versions if the CRL directory is empty the test to see if the CRL is out of date never fails....
Terrence
Colin Enticott wrote:
Hi Terrence,
The clock on remus and tg-grid1 are within a few seconds of each other (maybe closer, I can't type that fast). Using Mike's suggestion (thankyou Mike) it looks like the "server" has an expired revocation list:
$ globus-url-copy -vb -dbg gsiftp://tg-gridftp.uc.teragrid.org:2811/etc/hosts file:///tmp/null
debug: starting to get gsiftp://tg- gridftp.uc.teragrid.org:2811/etc/hosts debug: connecting to gsiftp://tg-gridftp.uc.teragrid.org:2811/etc/hosts debug: response from gsiftp://tg-gridftp.uc.teragrid.org:2811/etc/hosts: 220 tg-s004.uc.teragrid.org GridFTP Server 2.1 (gcc32dbg, 1122653280-63) ready.
debug: authenticating with gsiftp://tg-gridftp.uc.teragrid.org:2811/etc/hosts debug: response from gsiftp://tg-gridftp.uc.teragrid.org:2811/etc/hosts: 530-globus_xio: Authentication Error 530-globus_gsi_callback_module: Could not verify credential 530-globus_gsi_callback_module: Could not verify credential 530-globus_gsi_callback_module: Invalid CRL: The available CRL has expired 530 End.
debug: fault on connection to gsiftp://tg-gridftp.uc.teragrid.org:2811/etc/hosts debug: data callback, error the server sent an error response: 530 530-globus_xio: Authentication Error 530-globus_gsi_callback_module: Could not verify credential 530-globus_gsi_callback_module: Could not verify credential 530-globus_gsi_callback_module: Invalid CRL: The available CRL has expired 530 End. , buffer 0xb7e76008, length 0, offset=0, eof=true debug: operation complete
error: the server sent an error response: 530 530-globus_xio: Authentication Error 530-globus_gsi_callback_module: Could not verify credential 530-globus_gsi_callback_module: Could not verify credential 530-globus_gsi_callback_module: Invalid CRL: The available CRL has expired 530 End.
Regards, Colin
--- Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 Room H7.26, Level 7, Building H, Monash University Caulfield 3145, Australia
-----Original Message----- From: Terrence Martin [mailto:tmartin@physics.ucsd.edu] Sent: Tuesday, 6 February 2007 5:27 AM To: Colin Enticott Cc: 'JP Navarro'; gin-auth@ggf.org; gin-ops@ggf.org; zhengc@sdsc.edu Subject: Re: [gin-ops] [gin-auth] start Savannah run
Just in case, can you confirm that the time is synchronized on the local and remote system?
Terrence
Colin Enticott wrote:
Hi JP Navarro,
The same problem has happened again. Output from gt2.4:
$ globusrun -a -r globus.infotech.monash.edu.au
GRAM Authentication test successful $ globusrun -a -r tg-grid1.uc.teragrid.org
GRAM Authentication test failure: authentication failed: GSS Major Status: Authentication Failed GSS Minor Status Error Chain:
init.c:499: globus_gss_assist_init_sec_context_async: Error during
context
initialization init_sec_context.c:171: gss_init_sec_context: SSLv3 handshake problems globus_i_gsi_gss_utils.c:888: globus_i_gsi_gss_handshake: Unable to
verify
remote side's credentials globus_i_gsi_gss_utils.c:854: globus_i_gsi_gss_handshake: SSLv3
handshake
problems: Couldn't do ssl handshake OpenSSL Error: s3_pkt.c:1046: in library: SSL routines, function SSL3_READ_BYTES: sslv3 alert certificate expired
I recently renewed my APAC certificate, but it should be the same. globus.infotech.monash.edu.au worked without change.
Help!
Regards, Colin
--- Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 Room H7.26, Level 7, Building H, Monash University Caulfield 3145,
Australia
-----Original Message----- From: JP Navarro [mailto:navarro@mcs.anl.gov] Sent: Thursday, 4 January 2007 3:00 AM To: Colin Enticott Cc: gin-auth@ggf.org; gin-ops@ggf.org; 'Terrence Martin';
zhengc@sdsc.edu
Subject: Re: [gin-ops] [gin-auth] start Savannah run
Colin,
We didn't have the Monash University CA configured on tg- grid1.uc.teragrid.org. This has now been fixed.
Regards,
JP Navarro
On Jan 3, 2007, at 2:13 AM, Colin Enticott wrote:
First of all, Happy new year everyone!
Thankyou for your help last year.
I have two quick questions:
I am now receiving a "certificate expired" message from tg-grid1.uc.teragrid.org. My certificate still works elsewhere. Is it the server's certificate?
And on osg-gw-2.t2.ucsd.edu, I need to write ~80GB of data for the experiment. Which directory can I use?
Thanks, Colin
--- Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 Room H7.26, Level 7, Building H, Monash University Caulfield 3145, Australia
> -----Original Message----- > From: Terrence Martin [mailto:tmartin@physics.ucsd.edu] > Sent: Tuesday, 5 December 2006 5:41 PM > To: Colin Enticott > Cc: 'Yoshio Tanaka'; D.Bannon@vpac.org; navarro@mcs.anl.gov; gin- > auth@ggf.org; gin-ops@ggf.org > Subject: Re: [gin-ops] [gin-auth] start Savannah run > > colin, if you want to try logging into > > colin@uaf-1.t2.ucsd.edu > > run > > source /data/vdt/setup.sh > > then grab a cert with grid-proxy-init and give it a try. > > It is the machine that all my users use to submit to my OSG site. > > Terrence > > > > Colin Enticott wrote: > > >> Hi Yoshio, >> >> I've tried it from 3 servers. On the server I have root access >> on, I >> >> > just > > >> manually synced and I am still having the problem. I am >> wondering if >> >> > the CA > > >> certificate I sent is okay. It's the APAC CA files we use here >> on our >> servers. >> >> On the Pragma resources, I have been using my old certificate (as >> >> > initially > > >> there was teething problems with the new APAC CA). Can you >> update your >> server with the details below and I'll give it a try: >> >> http://wiki.pragma-grid.net/index.php?title=ColinDetails >> >> Thanks, >> Colin >> >> --- >> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 >> Room H7.26, Level 7, Building H, Monash University Caulfield 3145, >> >> > Australia > > >> >>> -----Original Message----- >>> From: Yoshio Tanaka [mailto:yoshio.tanaka@aist.go.jp] >>> Sent: Tuesday, 5 December 2006 4:51 PM >>> To: Colin.Enticott@csse.monash.edu.au >>> Cc: D.Bannon@vpac.org; tmartin@physics.ucsd.edu; >>> navarro@mcs.anl.gov; >>> >>> > gin- > > >>> auth@ggf.org; gin-ops@ggf.org; yoshio.tanaka@aist.go.jp >>> Subject: Re: [gin-ops] [gin-auth] start Savannah run >>> >>> >>> Hi Colin, >>> >>> Are you able to submit jobs to PRAGMA machines? >>> If yes, the APAC CA on your machine should have no problem. >>> >>> One point that I would like to confirm is... >>> Is the time of your client machine correct? Do you use an NTP >>> server >>> for synchronize the time? >>> >>> Thanks, >>> >>> -- >>> Yoshio Tanaka (yoshio.tanaka@aist.go.jp) >>> http://ninf.apgrid.org/ >>> http://www.apgridpma.org/ >>> >>> >>> From: Colin Enticott <Colin.Enticott@csse.monash.edu.au> >>> Subject: RE: [gin-ops] [gin-auth] start Savannah run >>> Date: Tue, 05 Dec 2006 16:38:40 +1100 >>> Message-ID: <01df01c7182f$9f59a3d0$1e46c282@nail> >>> >>> >>> >>> >>>> Hi Yoshio, >>>> >>>> I am unable to log in. But below is what JP sent me. Any ideas on >>>> >>>> > what > > >>> it >>> >>> >>> >>>> means? >>>> >>>> Doing a Google I find: >>>> The error might arise from an expired certificate or when >>>> trying to >>>> >>>> >>>> >>> restore >>> >>> >>> >>>> certification expiration date and job are in some state in the >>>> Grid >>>> execution list. >>>> >>>> I guess it might be a problem with the APAC CA on your >>>> machines? Was >>>> >>>> >>>> >>> the CA >>> >>> >>> >>>> set up previously? Or did you use the ones on my info page? (This >>>> >>>> >>>> >>> leaves >>> >>> >>> >>>> the question if I packaged them correctly). >>>> >>>> >>>> On Fri, 2006-12-01 at 12:34 -0600, JP Navarro wrote: >>>> >>>> TIME: Thu Nov 30 18:49:42 2006 >>>> PID: 9608 -- Notice: 0: GATEKEEPER_ACCT_FD=5 (/var/globus/prews- >>>> gram-4.0.1-r3-i1/log/globus-gatekeeper.log) >>>> TIME: Thu Nov 30 18:49:42 2006 >>>> PID: 9608 -- Notice: 6: Got connection 198.202.88.52 at Thu >>>> Nov 30 >>>> 18:49:42 2006 >>>> >>>> Failed reading length 0 >>>> GSS authentication failure >>>> globus_gss_assist token :3: read failure: Connection closed >>>> Failure: GSS failed Major:01090000 Minor:00000000 Token:00000003 >>>> >>>> TIME: Thu Nov 30 18:49:42 2006 >>>> PID: 9608 -- Failure: GSS failed Major:01090000 Minor:00000000 >>>> Token:00000003 >>>> >>>> >>>> Colin >>>> >>>> --- >>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 >>>> Room H7.26, Level 7, Building H, Monash University Caulfield 3145, >>>> >>>> >>>> >>> Australia >>> >>> >>> >>>>> -----Original Message----- >>>>> From: Yoshio Tanaka [mailto:yoshio.tanaka@aist.go.jp] >>>>> Sent: Tuesday, 5 December 2006 12:51 PM >>>>> To: Colin.Enticott@csse.monash.edu.au >>>>> Cc: D.Bannon@vpac.org; tmartin@physics.ucsd.edu; >>>>> navarro@mcs.anl.gov; >>>>> >>>>> >>>>> >>> gin- >>> >>> >>> >>>>> auth@ggf.org; gin-ops@ggf.org; yoshio.tanaka@aist.go.jp >>>>> Subject: Re: [gin-ops] [gin-auth] start Savannah run >>>>> >>>>> >>>>> Hi Colin, >>>>> >>>>> If you can login to these machines, see the globus >>>>> gatekeeper's log >>>>> >>>>> >>>>> >>> at: >>> >>> >>> >>>>> ${GLOBUS_LOCATION}/var/globus-gatekeeper.log >>>>> >>>>> You may find error logs such as no entry in mapfile and >>>>> failure in >>>>> tracing cert chain. >>>>> >>>>> Regards, >>>>> >>>>> -- >>>>> Yoshio Tanaka (yoshio.tanaka@aist.go.jp) >>>>> http://ninf.apgrid.org/ >>>>> http://www.apgridpma.org/ >>>>> >>>>> From: Colin Enticott <Colin.Enticott@csse.monash.edu.au> >>>>> Subject: RE: [gin-ops] [gin-auth] start Savannah run >>>>> Date: Tue, 05 Dec 2006 12:24:42 +1100 >>>>> Message-ID: <01c001c7180c$24c430e0$1e46c282@nail> >>>>> >>>>> >>>>> >>>>> >>>>>> Thanks Yoshio, >>>>>> >>>>>> So it looks like authentication issues as I can connect to >>>>>> port 2119 >>>>>> >>>>>> >>>>>> >>> on >>> >>> >>> >>>>> both >>>>> >>>>> >>>>> >>>>>> hosts: >>>>>> >>>>>> cme@edda$ globusrun -a -r tg-grid1.uc.teragrid.org >>>>>> >>>>>> GRAM Authentication test failure: connecting to the job manager >>>>>> >>>>>> >>>>>> >>> failed. >>> >>> >>> >>>>>> Possible reasons: job terminated, invalid job contact, network >>>>>> >>>>>> >>>>>> >>> problems, >>> >>> >>> >>>>> ... >>>>> >>>>> >>>>> >>>>>> cme@edda$ globusrun -a -r osg-gw-2.t2.ucsd.edu >>>>>> >>>>>> GRAM Authentication test failure: connecting to the job manager >>>>>> >>>>>> >>>>>> >>> failed. >>> >>> >>> >>>>>> Possible reasons: job terminated, invalid job contact, network >>>>>> >>>>>> >>>>>> >>> problems, >>> >>> >>> >>>>> ... >>>>> >>>>> >>>>> >>>>>> Regards, >>>>>> Colin >>>>>> >>>>>> --- >>>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 >>>>>> Room H7.26, Level 7, Building H, Monash University Caulfield >>>>>> 3145, >>>>>> >>>>>> >>>>>> >>>>> Australia >>>>> >>>>> >>>>> >>>>>>> -----Original Message----- >>>>>>> From: Yoshio Tanaka [mailto:yoshio.tanaka@aist.go.jp] >>>>>>> Sent: Tuesday, 5 December 2006 12:21 PM >>>>>>> To: Colin.Enticott@csse.monash.edu.au >>>>>>> Cc: D.Bannon@vpac.org; tmartin@physics.ucsd.edu; >>>>>>> >>>>>>> >>>>>>> >>> navarro@mcs.anl.gov; >>> >>> >>> >>>>> gin- >>>>> >>>>> >>>>> >>>>>>> auth@ggf.org; gin-ops@ggf.org; yoshio.tanaka@aist.go.jp >>>>>>> Subject: Re: [gin-ops] [gin-auth] start Savannah run >>>>>>> >>>>>>> >>>>>>> Hi Colin, >>>>>>> >>>>>>> Please test the authentication by the following command: >>>>>>> >>>>>>> % globusrun -a -r osg-gw-2.t2.ucsd.edu >>>>>>> >>>>>>> % globusrun -a -r tg-grid1.uc.teragrid.org >>>>>>> >>>>>>> Thanks, >>>>>>> >>>>>>> -- >>>>>>> Yoshio Tanaka (yoshio.tanaka@aist.go.jp) >>>>>>> http://ninf.apgrid.org/ >>>>>>> http://www.apgridpma.org/ >>>>>>> >>>>>>> >>>>>>> From: Colin Enticott <Colin.Enticott@csse.monash.edu.au> >>>>>>> Subject: Re: [gin-ops] [gin-auth] start Savannah run >>>>>>> Date: Tue, 05 Dec 2006 11:44:05 +1100 >>>>>>> Message-ID: <017401c71806$77cf6760$1e46c282@nail> >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>>>> Thanks David, >>>>>>>> >>>>>>>> But still the same problem. As you can see, my certificate >>>>>>>> >>>>>>>> >>>>>>>> >>> still >>> >>> >>> >>>>> works >>>>> >>>>> >>>>> >>>>>>> on >>>>>>> >>>>>>> >>>>>>> >>>>>>>> the vpac host and there is definitely no firewall in the way: >>>>>>>> >>>>>>>> cme@edda$ grid-proxy-init -cert usercert.pem.APACGrid -key >>>>>>>> userkey.pem.APACGrid >>>>>>>> Your identity: /C=AU/O=APACGrid/OU=Monash University/CN=Colin >>>>>>>> >>>>>>>> >>>>>>>> >>>>> Enticott >>>>> >>>>> >>>>> >>>>>>>> Enter GRID pass phrase for this identity: >>>>>>>> Creating proxy ................................... Done >>>>>>>> Your proxy is valid until: Tue Dec 5 23:28:47 2006 >>>>>>>> cme@edda$ globus-job-run osg-gw-2.t2.ucsd.edu/jobmanager- fork >>>>>>>> >>>>>>>> >>>>>>>> >>>>> /bin/uname >>>>> >>>>> >>>>> >>>>>>> -a >>>>>>> >>>>>>> >>>>>>> >>>>>>>> GRAM Job submission failed because the connection to the >>>>>>>> server >>>>>>>> >>>>>>>> >>>>>>>> >>>>> failed >>>>> >>>>> >>>>> >>>>>>>> (check host and port) (error code 12) >>>>>>>> cme@edda$ globus-job-run tg- grid1.uc.teragrid.org/jobmanager- >>>>>>>> >>>>>>>> >>>>>>>> >>> fork >>> >>> >>> >>>>>>> /bin/uname >>>>>>> >>>>>>> >>>>>>> >>>>>>>> -a >>>>>>>> GRAM Job submission failed because the connection to the >>>>>>>> server >>>>>>>> >>>>>>>> >>>>>>>> >>>>> failed >>>>> >>>>> >>>>> >>>>>>>> (check host and port) (error code 12) >>>>>>>> cme@edda$ globus-job-run ng1.vpac.org/jobmanager-fork /bin/ >>>>>>>> uname >>>>>>>> >>>>>>>> >>>>>>>> >>> -a >>> >>> >>> >>>>>>>> Linux ng1.vpac.org 2.6.16.29-xen #4 SMP Sun Oct 15 13:20:46 >>>>>>>> BST >>>>>>>> >>>>>>>> >>>>>>>> >>> 2006 >>> >>> >>> >>>>>>> i686 >>>>>>> >>>>>>> >>>>>>> >>>>>>>> i686 i386 GNU/Linux >>>>>>>> cme@edda$ telnet tg-grid1.uc.teragrid.org 2119 >>>>>>>> Trying 192.5.198.225... >>>>>>>> Connected to tg-grid1.uc.teragrid.org. >>>>>>>> Escape character is '^]'. >>>>>>>> >>>>>>>> >>>>>>>> Connection closed by foreign host. >>>>>>>> cme@edda$ telnet osg-gw-2.t2.ucsd.edu 2119 >>>>>>>> Trying 137.110.141.17... >>>>>>>> Connected to osg-gw-2.t2.ucsd.edu. >>>>>>>> Escape character is '^]'. >>>>>>>> >>>>>>>> >>>>>>>> Connection closed by foreign host. >>>>>>>> >>>>>>>> >>>>>>>> Any other thoughts from anyone? >>>>>>>> >>>>>>>> Thanks, >>>>>>>> Colin >>>>>>>> >>>>>>>> --- >>>>>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 >>>>>>>> Room H7.26, Level 7, Building H, Monash University Caulfield >>>>>>>> >>>>>>>> >>>>>>>> >>> 3145, >>> >>> >>> >>>>>>> Australia >>>>>>> >>>>>>> >>>>>>> >>>>>>>>> -----Original Message----- >>>>>>>>> From: David Bannon [mailto:D.Bannon@vpac.org] >>>>>>>>> Sent: Monday, 4 December 2006 6:08 PM >>>>>>>>> To: JP Navarro >>>>>>>>> Cc: Colin Enticott; gin-auth@ggf.org; gin-ops@ggf.org; >>>>>>>>> >>>>>>>>> >>>>>>>>> >>> 'Terrence >>> >>> >>> >>>>>>> Martin' >>>>>>> >>>>>>> >>>>>>> >>>>>>>>> Subject: Re: [gin-auth] start Savannah run >>>>>>>>> >>>>>>>>> >>>>>>>>> Colin, you can run as a Gin user on any of the VPAC machines, >>>>>>>>> >>>>>>>>> >>>>>>>>> >>> my >>> >>> >>> >>>>> be >>>>> >>>>> >>>>> >>>>>>>>> easier to debug.... >>>>>>>>> >>>>>>>>> David >>>>>>>>> >>>>>>>>> >>>>>>>>> On Fri, 2006-12-01 at 12:34 -0600, JP Navarro wrote: >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>>> Colin, >>>>>>>>>> >>>>>>>>>> The error in the logs is below. Not sure what it means. >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>> Could >>> >>> >>> >>>>> you >>>>> >>>>> >>>>> >>>>>>>>>> try this >>>>>>>>>> test again from your SDSC TeraGrid account so we can rule >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>> out >>> >>> >>> >>>>>>>>>> software and >>>>>>>>>> firewall issues? >>>>>>>>>> >>>>>>>>>> Thanks, >>>>>>>>>> >>>>>>>>>> JP >>>>>>>>>> >>>>>>>>>> TIME: Thu Nov 30 18:49:42 2006 >>>>>>>>>> PID: 9608 -- Notice: 0: GATEKEEPER_ACCT_FD=5 >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>> (/var/globus/prews- >>>>> >>>>> >>>>> >>>>>>>>>> gram-4.0.1-r3-i1/log/globus-gatekeeper.log) >>>>>>>>>> TIME: Thu Nov 30 18:49:42 2006 >>>>>>>>>> PID: 9608 -- Notice: 6: Got connection 198.202.88.52 at >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>> Thu >>> >>> >>> >>>>> Nov 30 >>>>> >>>>> >>>>> >>>>>>>>>> 18:49:42 2006 >>>>>>>>>> >>>>>>>>>> Failed reading length 0 >>>>>>>>>> GSS authentication failure >>>>>>>>>> globus_gss_assist token :3: read failure: Connection >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>> closed >>> >>> >>> >>>>>>>>>> Failure: GSS failed Major:01090000 Minor:00000000 >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>> Token:00000003 >>> >>> >>> >>>>>>>>>> TIME: Thu Nov 30 18:49:42 2006 >>>>>>>>>> PID: 9608 -- Failure: GSS failed Major:01090000 >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>> Minor:00000000 >>> >>> >>> >>>>>>>>>> Token:00000003 >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> On Nov 30, 2006, at 7:05 PM, Colin Enticott wrote: >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>>>>>>> Thanks JP, >>>>>>>>>>> >>>>>>>>>>> But I am running into some problems. I've tried both from >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>> our >>> >>> >>> >>>>>>>>>>> server and >>>>>>>>>>> rocks-52 and this is what I get: >>>>>>>>>>> [cme@rocks-52 ~]$ globus-job-run tg- grid1.uc.teragrid.org/ >>>>>>>>>>> jobmanager-fork >>>>>>>>>>> /bin/uname -a >>>>>>>>>>> GRAM Job submission failed because the connection to the >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>>> server >>>>> >>>>> >>>>> >>>>>>> failed >>>>>>> >>>>>>> >>>>>>> >>>>>>>>>>> (check host and port) (error code 12) >>>>>>>>>>> [cme@rocks-52 ~]$ grid-proxy-info >>>>>>>>>>> subject : /C=AU/O=APACGrid/OU=Monash University/CN=Colin >>>>>>>>>>> Enticott/CN=1087048434 >>>>>>>>>>> issuer : /C=AU/O=APACGrid/OU=Monash University/CN=Colin >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>>> Enticott >>>>> >>>>> >>>>> >>>>>>>>>>> identity : /C=AU/O=APACGrid/OU=Monash University/CN=Colin >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>>> Enticott >>>>> >>>>> >>>>> >>>>>>>>>>> type : Proxy draft (pre-RFC) compliant impersonation >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>> proxy >>> >>> >>> >>>>>>>>>>> strength : 512 bits >>>>>>>>>>> path : /home/cme/globus_proxy.APACGrid >>>>>>>>>>> timeleft : 836:30:26 (34.8 days) >>>>>>>>>>> [cme@rocks-52 ~]$ ssh tg-grid1.uc.teragrid.org >>>>>>>>>>> Warning: Permanently added 'tg-grid1.uc.teragrid.org' >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>> (RSA) to >>> >>> >>> >>>>> the >>>>> >>>>> >>>>> >>>>>>>>>>> list of >>>>>>>>>>> known hosts. >>>>>>>>>>> Permission denied (external- >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>>>>> keyx,gssapi,publickey,gssapi,hostbased). >>>>>>> >>>>>>> >>>>>>> >>>>>>>>>>> [cme@rocks-52 ~]$ >>>>>>>>>>> >>>>>>>>>>> That is the certificate that I registered with. I also >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>> tried >>> >>> >>> >>>>> the >>>>> >>>>> >>>>> >>>>>>>>>>> ssh key >>>>>>>>>>> pair I put up on the pragma wiki. >>>>>>>>>>> >>>>>>>>>>> Any thoughts? >>>>>>>>>>> >>>>>>>>>>> Thanks, >>>>>>>>>>> Colin >>>>>>>>>>> >>>>>>>>>>> --- >>>>>>>>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 >>>>>>>>>>> Room H7.26, Level 7, Building H, Monash University >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>> Caulfield >>> >>> >>> >>>>> 3145, >>>>> >>>>> >>>>> >>>>>>>>>>> Australia >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>>> -----Original Message----- >>>>>>>>>>>> From: JP Navarro [mailto:navarro@mcs.anl.gov] >>>>>>>>>>>> Sent: Friday, 1 December 2006 2:47 AM >>>>>>>>>>>> To: Colin Enticott >>>>>>>>>>>> Cc: zhengc@sdsc.edu; 'Terrence Martin'; gin-ops@ggf.org; >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> >>>>> 'Oscar >>>>> >>>>> >>>>> >>>>>>>>>>>> Koeroo'; >>>>>>>>>>>> gin-auth@ggf.org >>>>>>>>>>>> Subject: Re: start Savannah run >>>>>>>>>>>> >>>>>>>>>>>> Colin, >>>>>>>>>>>> >>>>>>>>>>>> You should be set to go on the UC/ANL TeraGrid cluster. >>>>>>>>>>>> >>>>>>>>>>>> GT4 Pre-WS GRAM: tg-grid1.uc.teragrid.org:2119 >>>>>>>>>>>> GT4 WS GRAM: tg-grid1.uc.teragrid.org:8443 (FORK, >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> >>> PBS) >>> >>> >>> >>>>>>>>>>>> GT4 GridFTP: tg-gridftp.uc.teragrid.org:2811 >>>>>>>>>>>> >>>>>>>>>>>> Regards, >>>>>>>>>>>> >>>>>>>>>>>> JP >>>>>>>>>>>> >>>>>>>>>>>> On Nov 30, 2006, at 2:43 AM, Colin Enticott wrote: >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>>> Thankyou everyone. >>>>>>>>>>>>> >>>>>>>>>>>>> I am now registered on the GIN VO (well, I appear here: >>>>>>>>>>>>> http://kuiken.nikhef.nl/gin.ggf.org/grid-mapfile). >>>>>>>>>>>>> >>>>>>>>>>>>> What is my next step? >>>>>>>>>>>>> >>>>>>>>>>>>> Thanks, >>>>>>>>>>>>> Colin >>>>>>>>>>>>> >>>>>>>>>>>>> --- >>>>>>>>>>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 >>>>>>>>>>>>> Room H7.26, Level 7, Building H, Monash University >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>> >>> Caulfield >>> >>> >>> >>>>>>> 3145, >>>>>>> >>>>>>> >>>>>>> >>>>>>>>>>>>> Australia >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>>> -----Original Message----- >>>>>>>>>>>>>> From: Cindy Zheng [mailto:zhengc@sdsc.edu] >>>>>>>>>>>>>> Sent: Thursday, 30 November 2006 11:59 AM >>>>>>>>>>>>>> To: 'Terrence Martin' >>>>>>>>>>>>>> Cc: 'JP Navarro'; gin-ops@ggf.org; 'Oscar Koeroo'; >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>> 'Colin >>> >>> >>> >>>>>>>>>>>>>> Enticott'; gin- >>>>>>>>>>>>>> auth@ggf.org >>>>>>>>>>>>>> Subject: RE: FW: start Savannah run >>>>>>>>>>>>>> >>>>>>>>>>>>>> Thank you, Terrence! >>>>>>>>>>>>>> We'll wait to hear from Colin when Colin finishes >>>>>>>>>>>>>> registering to gin vo. >>>>>>>>>>>>>> Cindy >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>>> -----Original Message----- >>>>>>>>>>>>>>> From: Terrence Martin >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>> [mailto:tmartin@physics.ucsd.edu] >>> >>> >>> >>>>>>>>>>>>>>> Sent: Wednesday, November 29, 2006 11:36 AM >>>>>>>>>>>>>>> To: Oscar Koeroo >>>>>>>>>>>>>>> Cc: zhengc@sdsc.edu; 'JP Navarro'; gin-ops@ggf.org; >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>> 'Colin >>> >>> >>> >>>>>>>>>>>>>>> Enticott'; gin-auth@ggf.org >>>>>>>>>>>>>>> Subject: Re: FW: start Savannah run >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> Oscar Koeroo wrote: >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> Hi Terrence and Cindy, >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> Getting new users up for registration on the GIN VO >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>> is >>> >>> >>> >>>>> easy. >>>>> >>>>> >>>>> >>>>>>>>>>>>>>>> To be >>>>>>>>>>>>>>>> able to access the secured website and for >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>> authentication >>> >>> >>> >>>>>>> reasons >>>>>>> >>>>>>> >>>>>>> >>>>>>>>>>>>>>>> during the registration process new users must have >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>> their >>> >>> >>> >>>>>>>>>>>>>>> certificate >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> loaded and ready in their webbrowser. The VOMS server >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>> is >>> >>> >>> >>>>>>>>>>>>>>> loaded with >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> all IGTF accredited CAs including the Fermilab kCA. >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> Go to the website: >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>> https://kuiken.nikhef.nl:8443/voms/gin.ggf.org/ and >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> apply for a "New user registration". >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> The usual VOMS configuration info is also available. >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>> I >>> >>> >>> >>>>>>>>>>>>>>> don't know what >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> you'll need to populate a GUMS server. This VOMS >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>> server >>> >>> >>> >>>>> is as >>>>> >>>>> >>>>> >>>>>>> any >>>>>>> >>>>>>> >>>>>>> >>>>>>>>>>>>>>>> other so I guess you can use your regular setup. >>>>>>>>>>>>>>>> In addition to the secured interface I've also made >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>> available >>>>> >>>>> >>>>> >>>>>>> a >>>>>>> >>>>>>> >>>>>>> >>>>>>>>>>>>>>>> non-secured way of grabbing a grid-mapfile. >>>>>>>>>>>>>>>> http://kuiken.nikhef.nl/gin.ggf.org/grid-mapfile >>>>>>>>>>>>>>>> There is also an RSS-feed pointing to the grid- >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>> mapfile >>> >>> >>> >>>>> and >>>>> >>>>> >>>>> >>>>>>>>>>>>>>> the secured >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> interface at >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>> http://kuiken.nikhef.nl/gin.ggf.org/feed- >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>> gin.ggf.org.xml >>> >>> >>> >>>>>>>>>>>>>>>> Unfortunately I'm not aware of a clear guide. I do >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>> know a >>> >>> >>> >>>>>>>>>>>>>>>> guide for >>>>>>>>>>>>>>>> creating the packed certificate files that go into >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>> your >>> >>> >>> >>>>>>>>>>>>>>> browser if you >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> start from a two PEM formated files (certificate file >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>> + >>> >>> >>> >>>>>>>>>>>>>>>> private key >>>>>>>>>>>>>>>> file) that's at >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>> http://certificate.nikhef.nl/info/browser >>> >>> >>> >>>>>>>>>>>>>>>> Once a user has passed that stage, the registration >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>> for >>> >>> >>> >>>>> the >>>>> >>>>> >>>>> >>>>>>>>>>>>>>> VO is as >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> trivial as any web-forum account registration. >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>> I am assuming this user already has a grid cert since >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>> they >>> >>> >>> >>>>>>>>>>>>>>> list a DN so >>>>>>>>>>>>>>> only VOMS registration is required. Once that is done >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>> either I >>>>> >>>>> >>>>> >>>>>>>>>>>>>>> run my >>>>>>>>>>>>>>> update of GUMS manually or in 720/2 minutes on average >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>> the >>> >>> >>> >>>>>>>>>>>>>>> user will be >>>>>>>>>>>>>>> automatically downloaded into my GUMS database. I >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>> actually >>> >>> >>> >>>>> do >>>>> >>>>> >>>>> >>>>>>>>>>>>>>> not have >>>>>>>>>>>>>>> to do anything, but I can speed things up ever so >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>> slightly >>> >>> >>> >>>>> if >>>>> >>>>> >>>>> >>>>>>> I >>>>>>> >>>>>>> >>>>>>> >>>>>>>>>>>>>>> am in >>>>>>>>>>>>>>> the office and someone asks me to try refreshing gums. >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> Terrence >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> Oscar >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> Cindy Zheng wrote: >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> Sounds right, Terrence. Let me ask Oscar who has >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>> helped >>> >>> >>> >>>>> me >>>>> >>>>> >>>>> >>>>>>>>>>>>>>> with GIN >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> VO before. >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> Hi, Oscar, >>>>>>>>>>>>>>>>> Could you advise Colin what need to be done to be >>>>>>>>>>>>>>>>> added in GIN VO? >>>>>>>>>>>>>>>>> I'm also cc'ing to gin-auth list. >>>>>>>>>>>>>>>>> If there is a guide for potential GIN users, please >>>>>>>>>>>>>>>>> let me know the url and I can link it to our GINOPS >>>>>>>>>>>>>>>>> page. >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> Thanks, >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> Cindy >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> -----Original Message----- >>>>>>>>>>>>>>>>>> From: Terrence Martin >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>> [mailto:tmartin@physics.ucsd.edu] >>> >>> >>> >>>>>>> Sent: >>>>>>> >>>>>>> >>>>>>> >>>>>>>>>>>>>>>>>> Tuesday, November 28, 2006 3:24 PM >>>>>>>>>>>>>>>>>> To: zhengc@sdsc.edu >>>>>>>>>>>>>>>>>> Cc: 'JP Navarro'; gin-ops@ggf.org; 'Colin Enticott' >>>>>>>>>>>>>>>>>> Subject: Re: FW: start Savannah run >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> The quickest and easiest way for me is to have him >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>> added to >>>>> >>>>> >>>>> >>>>>>>>>>>>>>>>>> a VO. >>>>>>>>>>>>>>>>>> How easy is it to add him to the GIN VO? One in >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>> there I >>> >>> >>> >>>>>>>>>>>>>>> can hit my >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> gums reload and he will be able to access UCSD as a >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>> GIN >>> >>> >>> >>>>>>>>>>>>>>>>>> user. Any >>>>>>>>>>>>>>>>>> other approach requires me hacking his DN into my >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>> local >>> >>> >>> >>>>>>>>>>>>>>> VO which I >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> prefer to avoid and does not help him with any >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>> other >>> >>> >>> >>>>> site. >>>>> >>>>> >>>>> >>>>>>>>>>>>>>>>>> Terrence >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Cindy Zheng wrote: >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> Thanks, Terrence, for the quick reply! >>>>>>>>>>>>>>>>>>> Colin has not been a GIN user. >>>>>>>>>>>>>>>>>>> What do you think it's the best way to get colin >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>> access? >>>>> >>>>> >>>>> >>>>>>>>>>>>>>>>>>> Cindy >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> -----Original Message----- >>>>>>>>>>>>>>>>>>>> From: Terrence Martin >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>> [mailto:tmartin@physics.ucsd.edu] >>>>> >>>>> >>>>> >>>>>>> Sent: >>>>>>> >>>>>>> >>>>>>> >>>>>>>>>>>>>>>>>>>> Tuesday, November 28, 2006 2:53 PM >>>>>>>>>>>>>>>>>>>> To: zhengc@sdsc.edu >>>>>>>>>>>>>>>>>>>> Cc: 'JP Navarro'; gin-ops@ggf.org >>>>>>>>>>>>>>>>>>>> Subject: Re: FW: start Savannah run >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> We only have a production cluster, but I should >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>> still >>> >>> >>> >>>>>>>>>>>>>>> be >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> able to help. >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> I do not seem to have Colin in my GUMS database >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>> though >>>>> >>>>> >>>>> >>>>>>>>>>>>>>> for >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> GIN or any >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> other VO. Should he be downloaded with GIN's >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>> users? >>> >>> >>> >>>>>>>>>>>>>>>>>>>> Terrence >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> Cindy Zheng wrote: >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> Hi, JP and Terrence, >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> Could you help Colin to get ready to run >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>> Savannah >>> >>> >>> >>>>>>>>>>>>>>>>>>>>> application on your GIN testbed clusters? >>>>>>>>>>>>>>>>>>>>> You can find Colin's user info at >>>>>>>>>>>>>>>>>>>>> http://wiki.pragma- >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>> grid.net/index.php?title=ColinDetails >>>>> >>>>> >>>>> >>>>>>>>>>>>>>>>>>>>> If you need more info or action from Colin, or >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>> have >>> >>> >>> >>>>>>>>>>>>>>> any questions >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> for Colin or me, please let us know. >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> Thank you very much! >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> Cindy >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> -----Original Message----- >>>>>>>>>>>>>>>>>>>>> From: Cindy Zheng [mailto:zhengc@sdsc.edu] Sent: >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>>>> Tuesday, >>>>>>> >>>>>>> >>>>>>> >>>>>>>>>>>>>>>>>>>>> November 28, 2006 2:31 PM >>>>>>>>>>>>>>>>>>>>> To: 'gin-ops@ggf.org' >>>>>>>>>>>>>>>>>>>>> Subject: start Savannah run >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> Dear all, >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> Thanks for all the people involved to help make >>>>>>>>>>>>>>>>>>>>> TDDFT application run and GIN testbed monitoring >>>>>>>>>>>>>>>>>>>>> very fruitful experiments! We have learned a lot >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>> and >>> >>> >>> >>>>>>> have >>>>>>> >>>>>>> >>>>>>> >>>>>>>>>>>>>>>>>>>>> presented our learnings at OGF and SC06. >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> Let's continue our collaborative effort with our >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>> plan >>>>> >>>>> >>>>> >>>>>>>>>>>>>>> - start our >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> next experiment with Savannah >>>>>>>>>>>>>>>>>>>>> fire simulation - a data-intensive application, >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>> to >>> >>> >>> >>>>>>>>>>>>>>> explore data >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> related interoperation issues. >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> Colin Enticott at Monash University of Australia >>>>>>>>>>>>>>>>>>>>> is the lead driver. Colin has documented the >>>>>>>>>>>>>>>>>>>>> introduction and requirements of this >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>> application at >>> >>> >>> >>>>>>>>>>>>>>>>>>>>> http://wiki.pragma- >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>> grid.net/index.php?title=Savannah >>> >>> >>> >>>>>>>>>>>>>>>>>>>>> or go to >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> http://forge.gridforum.org/sf/wiki/do/viewPage/ >>>>>>>>>>>>>>>>>>>> projects.gin/wi >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> ki/GinOps >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> click "Savannah" under "Applications", >>>>>>>>>>>>>>>>>>>> where "first Savannah experiment" is refering to >>>>>>>>>>>>>>>>>>>> a previous experiment in PRAGMA testbed. The >>>>>>>>>>>>>>>>>>>> "second Savannah experiment" is the one for GIN >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>> testbed. >>>>> >>>>> >>>>> >>>>>>>>>>>>>>>>>>>> We like to run this application on all Grids in >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>> GIN >>> >>> >>> >>>>>>>>>>>>>>> testbed, but >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> in 2 steps. First, we will run it on >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>> PRAGMA/TeraGrid/OSG - since >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> these should be relatively easier to do. We like >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>> to >>> >>> >>> >>>>> get >>>>> >>>>> >>>>> >>>>>>>>>>>>>>> this done >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> before the year end. >>>>>>>>>>>>>>>>>>>> The next step, Colin will work with EGEE and >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>> Nordugrid >>>>> >>>>> >>>>> >>>>>>>>>>>>>>>>>>>> to develop possible solutions, to enable >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>> interoperation >>>>> >>>>> >>>>> >>>>>>>>>>>>>>>>>>>> and to include all 5 Grids in the run. >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> Thanks in advance for your continued help with >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>> this! >>> >>> >>> >>>>>>>>>>>>>>>>>>>> Cindy >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>> -- >>>>>>>>>> gin-auth mailing list >>>>>>>>>> gin-auth@ogf.org >>>>>>>>>> http://www.ogf.org/mailman/listinfo/gin-auth >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>>>> -- >>>>>>>> gin-ops mailing list >>>>>>>> gin-ops@ogf.org >>>>>>>> http://www.ogf.org/mailman/listinfo/gin-ops >>>>>>>> >>>>>>>> >>>>>>>> >>
Hi Cindy, Thanks, but I think it might be at the other end (tg-grid) as I can connect to other APAC resources. Can someone check tg-grid? Thanks, Colin --- Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 Room H7.26, Level 7, Building H, Monash University Caulfield 3145, Australia
-----Original Message----- From: Cindy Zheng [mailto:zhengc@sdsc.edu] Sent: Tuesday, 6 February 2007 1:16 PM To: 'Colin Enticott'; 'Terrence Martin' Cc: 'JP Navarro'; gin-auth@ggf.org; gin-ops@ggf.org Subject: RE: [gin-ops] [gin-auth] start Savannah run
Hi, Colin,
APAC current crl is http://ca.apac.edu.au/pub/crl/cacrl.pem.
Cindy
-----Original Message----- From: Colin Enticott [mailto:Colin.Enticott@csse.monash.edu.au] Sent: Monday, February 05, 2007 4:47 PM To: 'Terrence Martin' Cc: 'JP Navarro'; gin-auth@ggf.org; gin-ops@ggf.org; zhengc@sdsc.edu Subject: RE: [gin-ops] [gin-auth] start Savannah run
Hi Terrence,
I temporarily removed the CRL's from my certificate directory and the same error appears. If I am reading the error correctly, it looks like the server's APAC CRL has expired (1e12d831.r0)? I'd test on the command line, but I don't know how to get the expiry date from a .r0 file.
Regards, Colin
--- Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 Room H7.26, Level 7, Building H, Monash University Caulfield 3145, Australia
ready.
debug: authenticating with gsiftp://tg-gridftp.uc.teragrid.org:2811/etc/hosts debug: response from gsiftp://tg- gridftp.uc.teragrid.org:2811/etc/hosts: 530-globus_xio: Authentication Error 530-globus_gsi_callback_module: Could not verify credential 530-globus_gsi_callback_module: Could not verify credential 530-globus_gsi_callback_module: Invalid CRL: The available CRL has expired 530 End.
debug: fault on connection to gsiftp://tg-gridftp.uc.teragrid.org:2811/etc/hosts debug: data callback, error the server sent an error response: 530 530-globus_xio: Authentication Error 530-globus_gsi_callback_module: Could not verify credential 530-globus_gsi_callback_module: Could not verify credential 530-globus_gsi_callback_module: Invalid CRL: The available CRL has expired 530 End. , buffer 0xb7e76008, length 0, offset=0, eof=true debug: operation complete
error: the server sent an error response: 530 530-globus_xio: Authentication Error 530-globus_gsi_callback_module: Could not verify credential 530-globus_gsi_callback_module: Could not verify credential 530-globus_gsi_callback_module: Invalid CRL: The available CRL has expired 530 End.
Regards, Colin
--- Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 Room H7.26, Level 7, Building H, Monash University Caulfield 3145, Australia
-----Original Message----- From: Terrence Martin [mailto:tmartin@physics.ucsd.edu] Sent: Tuesday, 6 February 2007 5:27 AM To: Colin Enticott Cc: 'JP Navarro'; gin-auth@ggf.org; gin-ops@ggf.org; zhengc@sdsc.edu Subject: Re: [gin-ops] [gin-auth] start Savannah run
Just in case, can you confirm that the time is synchronized on the local and remote system?
Terrence
Colin Enticott wrote:
Hi JP Navarro,
The same problem has happened again. Output from gt2.4:
$ globusrun -a -r globus.infotech.monash.edu.au
GRAM Authentication test successful $ globusrun -a -r tg-grid1.uc.teragrid.org
GRAM Authentication test failure: authentication failed: GSS Major Status: Authentication Failed GSS Minor Status Error Chain:
init.c:499: globus_gss_assist_init_sec_context_async: Error during
context
initialization init_sec_context.c:171: gss_init_sec_context: SSLv3 handshake problems globus_i_gsi_gss_utils.c:888: globus_i_gsi_gss_handshake: Unable to
verify
remote side's credentials globus_i_gsi_gss_utils.c:854: globus_i_gsi_gss_handshake: SSLv3
handshake
problems: Couldn't do ssl handshake OpenSSL Error: s3_pkt.c:1046: in library: SSL routines, function SSL3_READ_BYTES: sslv3 alert certificate expired
I recently renewed my APAC certificate, but it should be the same. globus.infotech.monash.edu.au worked without change.
Help!
Regards, Colin
--- Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 Room H7.26, Level 7, Building H, Monash University Caulfield 3145,
Australia
-----Original Message----- From: JP Navarro [mailto:navarro@mcs.anl.gov] Sent: Thursday, 4 January 2007 3:00 AM To: Colin Enticott Cc: gin-auth@ggf.org; gin-ops@ggf.org; 'Terrence Martin';
zhengc@sdsc.edu
Subject: Re: [gin-ops] [gin-auth] start Savannah run
Colin,
We didn't have the Monash University CA configured on tg- grid1.uc.teragrid.org. This has now been fixed.
Regards,
JP Navarro
On Jan 3, 2007, at 2:13 AM, Colin Enticott wrote:
> First of all, Happy new year everyone! > > Thankyou for your help last year. > > I have two quick questions: > > I am now receiving a "certificate expired" message from > tg-grid1.uc.teragrid.org. My certificate still works elsewhere. > Is it the > server's certificate? > > And on osg-gw-2.t2.ucsd.edu, I need to write ~80GB of data for the > experiment. Which directory can I use? > > Thanks, > Colin > > --- > Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 > Room H7.26, Level 7, Building H, Monash University Caulfield 3145, > Australia > > > > >> -----Original Message----- >> From: Terrence Martin [mailto:tmartin@physics.ucsd.edu] >> Sent: Tuesday, 5 December 2006 5:41 PM >> To: Colin Enticott >> Cc: 'Yoshio Tanaka'; D.Bannon@vpac.org; navarro@mcs.anl.gov; gin- >> auth@ggf.org; gin-ops@ggf.org >> Subject: Re: [gin-ops] [gin-auth] start Savannah run >> >> colin, if you want to try logging into >> >> colin@uaf-1.t2.ucsd.edu >> >> run >> >> source /data/vdt/setup.sh >> >> then grab a cert with grid-proxy-init and give it a try. >> >> It is the machine that all my users use to submit to my OSG site. >> >> Terrence >> >> >> >> Colin Enticott wrote: >> >> >>> Hi Yoshio, >>> >>> I've tried it from 3 servers. On the server I have root access >>> on, I >>> >>> >> just >> >> >>> manually synced and I am still having the problem. I am >>> wondering if >>> >>> >> the CA >> >> >>> certificate I sent is okay. It's the APAC CA files we use here >>> on our >>> servers. >>> >>> On the Pragma resources, I have been using my old certificate (as >>> >>> >> initially >> >> >>> there was teething problems with the new APAC CA). Can you >>> update your >>> server with the details below and I'll give it a try: >>> >>> http://wiki.pragma-grid.net/index.php?title=ColinDetails >>> >>> Thanks, >>> Colin >>> >>> --- >>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 >>> Room H7.26, Level 7, Building H, Monash University Caulfield 3145, >>> >>> >> Australia >> >> >>> >>>> -----Original Message----- >>>> From: Yoshio Tanaka [mailto:yoshio.tanaka@aist.go.jp] >>>> Sent: Tuesday, 5 December 2006 4:51 PM >>>> To: Colin.Enticott@csse.monash.edu.au >>>> Cc: D.Bannon@vpac.org; tmartin@physics.ucsd.edu; >>>> navarro@mcs.anl.gov; >>>> >>>> >> gin- >> >> >>>> auth@ggf.org; gin-ops@ggf.org; yoshio.tanaka@aist.go.jp >>>> Subject: Re: [gin-ops] [gin-auth] start Savannah run >>>> >>>> >>>> Hi Colin, >>>> >>>> Are you able to submit jobs to PRAGMA machines? >>>> If yes, the APAC CA on your machine should have no problem. >>>> >>>> One point that I would like to confirm is... >>>> Is the time of your client machine correct? Do you use an NTP >>>> server >>>> for synchronize the time? >>>> >>>> Thanks, >>>> >>>> -- >>>> Yoshio Tanaka (yoshio.tanaka@aist.go.jp) >>>> http://ninf.apgrid.org/ >>>> http://www.apgridpma.org/ >>>> >>>> >>>> From: Colin Enticott <Colin.Enticott@csse.monash.edu.au> >>>> Subject: RE: [gin-ops] [gin-auth] start Savannah run >>>> Date: Tue, 05 Dec 2006 16:38:40 +1100 >>>> Message-ID: <01df01c7182f$9f59a3d0$1e46c282@nail> >>>> >>>> >>>> >>>> >>>>> Hi Yoshio, >>>>> >>>>> I am unable to log in. But below is what JP sent me. Any ideas on >>>>> >>>>> >> what >> >> >>>> it >>>> >>>> >>>> >>>>> means? >>>>> >>>>> Doing a Google I find: >>>>> The error might arise from an expired certificate or when >>>>> trying to >>>>> >>>>> >>>>> >>>> restore >>>> >>>> >>>> >>>>> certification expiration date and job are in some state in the >>>>> Grid >>>>> execution list. >>>>> >>>>> I guess it might be a problem with the APAC CA on your >>>>> machines? Was >>>>> >>>>> >>>>> >>>> the CA >>>> >>>> >>>> >>>>> set up previously? Or did you use the ones on my info page? (This >>>>> >>>>> >>>>> >>>> leaves >>>> >>>> >>>> >>>>> the question if I packaged them correctly). >>>>> >>>>> >>>>> On Fri, 2006-12-01 at 12:34 -0600, JP Navarro wrote: >>>>> >>>>> TIME: Thu Nov 30 18:49:42 2006 >>>>> PID: 9608 -- Notice: 0: GATEKEEPER_ACCT_FD=5 (/var/globus/prews- >>>>> gram-4.0.1-r3-i1/log/globus-gatekeeper.log) >>>>> TIME: Thu Nov 30 18:49:42 2006 >>>>> PID: 9608 -- Notice: 6: Got connection 198.202.88.52 at Thu >>>>> Nov 30 >>>>> 18:49:42 2006 >>>>> >>>>> Failed reading length 0 >>>>> GSS authentication failure >>>>> globus_gss_assist token :3: read failure: Connection closed >>>>> Failure: GSS failed Major:01090000 Minor:00000000 Token:00000003 >>>>> >>>>> TIME: Thu Nov 30 18:49:42 2006 >>>>> PID: 9608 -- Failure: GSS failed Major:01090000 Minor:00000000 >>>>> Token:00000003 >>>>> >>>>> >>>>> Colin >>>>> >>>>> --- >>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 >>>>> Room H7.26, Level 7, Building H, Monash University Caulfield 3145, >>>>> >>>>> >>>>> >>>> Australia >>>> >>>> >>>> >>>>>> -----Original Message----- >>>>>> From: Yoshio Tanaka [mailto:yoshio.tanaka@aist.go.jp] >>>>>> Sent: Tuesday, 5 December 2006 12:51 PM >>>>>> To: Colin.Enticott@csse.monash.edu.au >>>>>> Cc: D.Bannon@vpac.org; tmartin@physics.ucsd.edu; >>>>>> navarro@mcs.anl.gov; >>>>>> >>>>>> >>>>>> >>>> gin- >>>> >>>> >>>> >>>>>> auth@ggf.org; gin-ops@ggf.org; yoshio.tanaka@aist.go.jp >>>>>> Subject: Re: [gin-ops] [gin-auth] start Savannah run >>>>>> >>>>>> >>>>>> Hi Colin, >>>>>> >>>>>> If you can login to these machines, see the globus >>>>>> gatekeeper's log >>>>>> >>>>>> >>>>>> >>>> at: >>>> >>>> >>>> >>>>>> ${GLOBUS_LOCATION}/var/globus-gatekeeper.log >>>>>> >>>>>> You may find error logs such as no entry in mapfile and >>>>>> failure in >>>>>> tracing cert chain. >>>>>> >>>>>> Regards, >>>>>> >>>>>> -- >>>>>> Yoshio Tanaka (yoshio.tanaka@aist.go.jp) >>>>>> http://ninf.apgrid.org/ >>>>>> http://www.apgridpma.org/ >>>>>> >>>>>> From: Colin Enticott <Colin.Enticott@csse.monash.edu.au> >>>>>> Subject: RE: [gin-ops] [gin-auth] start Savannah run >>>>>> Date: Tue, 05 Dec 2006 12:24:42 +1100 >>>>>> Message-ID: <01c001c7180c$24c430e0$1e46c282@nail> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>>> Thanks Yoshio, >>>>>>> >>>>>>> So it looks like authentication issues as I can connect to >>>>>>> port 2119 >>>>>>> >>>>>>> >>>>>>> >>>> on >>>> >>>> >>>> >>>>>> both >>>>>> >>>>>> >>>>>> >>>>>>> hosts: >>>>>>> >>>>>>> cme@edda$ globusrun -a -r tg-grid1.uc.teragrid.org >>>>>>> >>>>>>> GRAM Authentication test failure: connecting to the job manager >>>>>>> >>>>>>> >>>>>>> >>>> failed. >>>> >>>> >>>> >>>>>>> Possible reasons: job terminated, invalid job contact, network >>>>>>> >>>>>>> >>>>>>> >>>> problems, >>>> >>>> >>>> >>>>>> ... >>>>>> >>>>>> >>>>>> >>>>>>> cme@edda$ globusrun -a -r osg-gw-2.t2.ucsd.edu >>>>>>> >>>>>>> GRAM Authentication test failure: connecting to the job manager >>>>>>> >>>>>>> >>>>>>> >>>> failed. >>>> >>>> >>>> >>>>>>> Possible reasons: job terminated, invalid job contact, network >>>>>>> >>>>>>> >>>>>>> >>>> problems, >>>> >>>> >>>> >>>>>> ... >>>>>> >>>>>> >>>>>> >>>>>>> Regards, >>>>>>> Colin >>>>>>> >>>>>>> --- >>>>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 >>>>>>> Room H7.26, Level 7, Building H, Monash University Caulfield >>>>>>> 3145, >>>>>>> >>>>>>> >>>>>>> >>>>>> Australia >>>>>> >>>>>> >>>>>> >>>>>>>> -----Original Message----- >>>>>>>> From: Yoshio Tanaka [mailto:yoshio.tanaka@aist.go.jp] >>>>>>>> Sent: Tuesday, 5 December 2006 12:21 PM >>>>>>>> To: Colin.Enticott@csse.monash.edu.au >>>>>>>> Cc: D.Bannon@vpac.org; tmartin@physics.ucsd.edu; >>>>>>>> >>>>>>>> >>>>>>>> >>>> navarro@mcs.anl.gov; >>>> >>>> >>>> >>>>>> gin- >>>>>> >>>>>> >>>>>> >>>>>>>> auth@ggf.org; gin-ops@ggf.org; yoshio.tanaka@aist.go.jp >>>>>>>> Subject: Re: [gin-ops] [gin-auth] start Savannah run >>>>>>>> >>>>>>>> >>>>>>>> Hi Colin, >>>>>>>> >>>>>>>> Please test the authentication by the following command: >>>>>>>> >>>>>>>> % globusrun -a -r osg-gw-2.t2.ucsd.edu >>>>>>>> >>>>>>>> % globusrun -a -r tg-grid1.uc.teragrid.org >>>>>>>> >>>>>>>> Thanks, >>>>>>>> >>>>>>>> -- >>>>>>>> Yoshio Tanaka (yoshio.tanaka@aist.go.jp) >>>>>>>> http://ninf.apgrid.org/ >>>>>>>> http://www.apgridpma.org/ >>>>>>>> >>>>>>>> >>>>>>>> From: Colin Enticott <Colin.Enticott@csse.monash.edu.au> >>>>>>>> Subject: Re: [gin-ops] [gin-auth] start Savannah run >>>>>>>> Date: Tue, 05 Dec 2006 11:44:05 +1100 >>>>>>>> Message-ID: <017401c71806$77cf6760$1e46c282@nail> >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>>> Thanks David, >>>>>>>>> >>>>>>>>> But still the same problem. As you can see, my certificate >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>> still >>>> >>>> >>>> >>>>>> works >>>>>> >>>>>> >>>>>> >>>>>>>> on >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>>> the vpac host and there is definitely no firewall in the way: >>>>>>>>> >>>>>>>>> cme@edda$ grid-proxy-init -cert usercert.pem.APACGrid -key >>>>>>>>> userkey.pem.APACGrid >>>>>>>>> Your identity: /C=AU/O=APACGrid/OU=Monash University/CN=Colin >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>> Enticott >>>>>> >>>>>> >>>>>> >>>>>>>>> Enter GRID pass phrase for this identity: >>>>>>>>> Creating proxy ................................... Done >>>>>>>>> Your proxy is valid until: Tue Dec 5 23:28:47 2006 >>>>>>>>> cme@edda$ globus-job-run osg-gw-2.t2.ucsd.edu/jobmanager- fork >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>> /bin/uname >>>>>> >>>>>> >>>>>> >>>>>>>> -a >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>>> GRAM Job submission failed because the connection to the >>>>>>>>> server >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>> failed >>>>>> >>>>>> >>>>>> >>>>>>>>> (check host and port) (error code 12) >>>>>>>>> cme@edda$ globus-job-run tg- grid1.uc.teragrid.org/jobmanager- >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>> fork >>>> >>>> >>>> >>>>>>>> /bin/uname >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>>> -a >>>>>>>>> GRAM Job submission failed because the connection to the >>>>>>>>> server >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>> failed >>>>>> >>>>>> >>>>>> >>>>>>>>> (check host and port) (error code 12) >>>>>>>>> cme@edda$ globus-job-run ng1.vpac.org/jobmanager-fork /bin/ >>>>>>>>> uname >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>> -a >>>> >>>> >>>> >>>>>>>>> Linux ng1.vpac.org 2.6.16.29-xen #4 SMP Sun Oct 15 13:20:46 >>>>>>>>> BST >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>> 2006 >>>> >>>> >>>> >>>>>>>> i686 >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>>> i686 i386 GNU/Linux >>>>>>>>> cme@edda$ telnet tg-grid1.uc.teragrid.org 2119 >>>>>>>>> Trying 192.5.198.225... >>>>>>>>> Connected to tg-grid1.uc.teragrid.org. >>>>>>>>> Escape character is '^]'. >>>>>>>>> >>>>>>>>> >>>>>>>>> Connection closed by foreign host. >>>>>>>>> cme@edda$ telnet osg-gw-2.t2.ucsd.edu 2119 >>>>>>>>> Trying 137.110.141.17... >>>>>>>>> Connected to osg-gw-2.t2.ucsd.edu. >>>>>>>>> Escape character is '^]'. >>>>>>>>> >>>>>>>>> >>>>>>>>> Connection closed by foreign host. >>>>>>>>> >>>>>>>>> >>>>>>>>> Any other thoughts from anyone? >>>>>>>>> >>>>>>>>> Thanks, >>>>>>>>> Colin >>>>>>>>> >>>>>>>>> --- >>>>>>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 >>>>>>>>> Room H7.26, Level 7, Building H, Monash University Caulfield >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>> 3145, >>>> >>>> >>>> >>>>>>>> Australia >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>>>> -----Original Message----- >>>>>>>>>> From: David Bannon [mailto:D.Bannon@vpac.org] >>>>>>>>>> Sent: Monday, 4 December 2006 6:08 PM >>>>>>>>>> To: JP Navarro >>>>>>>>>> Cc: Colin Enticott; gin-auth@ggf.org; gin-ops@ggf.org; >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>> 'Terrence >>>> >>>> >>>> >>>>>>>> Martin' >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>>>> Subject: Re: [gin-auth] start Savannah run >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> Colin, you can run as a Gin user on any of the VPAC machines, >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>> my >>>> >>>> >>>> >>>>>> be >>>>>> >>>>>> >>>>>> >>>>>>>>>> easier to debug.... >>>>>>>>>> >>>>>>>>>> David >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> On Fri, 2006-12-01 at 12:34 -0600, JP Navarro wrote: >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>>>>>>> Colin, >>>>>>>>>>> >>>>>>>>>>> The error in the logs is below. Not sure what it means. >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>> Could >>>> >>>> >>>> >>>>>> you >>>>>> >>>>>> >>>>>> >>>>>>>>>>> try this >>>>>>>>>>> test again from your SDSC TeraGrid account so we can rule >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>> out >>>> >>>> >>>> >>>>>>>>>>> software and >>>>>>>>>>> firewall issues? >>>>>>>>>>> >>>>>>>>>>> Thanks, >>>>>>>>>>> >>>>>>>>>>> JP >>>>>>>>>>> >>>>>>>>>>> TIME: Thu Nov 30 18:49:42 2006 >>>>>>>>>>> PID: 9608 -- Notice: 0: GATEKEEPER_ACCT_FD=5 >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>>>> (/var/globus/prews- >>>>>> >>>>>> >>>>>> >>>>>>>>>>> gram-4.0.1-r3-i1/log/globus-gatekeeper.log) >>>>>>>>>>> TIME: Thu Nov 30 18:49:42 2006 >>>>>>>>>>> PID: 9608 -- Notice: 6: Got connection 198.202.88.52 at >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>> Thu >>>> >>>> >>>> >>>>>> Nov 30 >>>>>> >>>>>> >>>>>> >>>>>>>>>>> 18:49:42 2006 >>>>>>>>>>> >>>>>>>>>>> Failed reading length 0 >>>>>>>>>>> GSS authentication failure >>>>>>>>>>> globus_gss_assist token :3: read failure: Connection >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>> closed >>>> >>>> >>>> >>>>>>>>>>> Failure: GSS failed Major:01090000 Minor:00000000 >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>> Token:00000003 >>>> >>>> >>>> >>>>>>>>>>> TIME: Thu Nov 30 18:49:42 2006 >>>>>>>>>>> PID: 9608 -- Failure: GSS failed Major:01090000 >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>> Minor:00000000 >>>> >>>> >>>> >>>>>>>>>>> Token:00000003 >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> On Nov 30, 2006, at 7:05 PM, Colin Enticott wrote: >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>>> Thanks JP, >>>>>>>>>>>> >>>>>>>>>>>> But I am running into some problems. I've tried both from >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> >>>> our >>>> >>>> >>>> >>>>>>>>>>>> server and >>>>>>>>>>>> rocks-52 and this is what I get: >>>>>>>>>>>> [cme@rocks-52 ~]$ globus-job-run tg- grid1.uc.teragrid.org/ >>>>>>>>>>>> jobmanager-fork >>>>>>>>>>>> /bin/uname -a >>>>>>>>>>>> GRAM Job submission failed because the connection to the >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> >>>>>> server >>>>>> >>>>>> >>>>>> >>>>>>>> failed >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>>>>>> (check host and port) (error code 12) >>>>>>>>>>>> [cme@rocks-52 ~]$ grid-proxy-info >>>>>>>>>>>> subject : /C=AU/O=APACGrid/OU=Monash University/CN=Colin >>>>>>>>>>>> Enticott/CN=1087048434 >>>>>>>>>>>> issuer : /C=AU/O=APACGrid/OU=Monash University/CN=Colin >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> >>>>>> Enticott >>>>>> >>>>>> >>>>>> >>>>>>>>>>>> identity : /C=AU/O=APACGrid/OU=Monash University/CN=Colin >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> >>>>>> Enticott >>>>>> >>>>>> >>>>>> >>>>>>>>>>>> type : Proxy draft (pre-RFC) compliant impersonation >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> >>>> proxy >>>> >>>> >>>> >>>>>>>>>>>> strength : 512 bits >>>>>>>>>>>> path : /home/cme/globus_proxy.APACGrid >>>>>>>>>>>> timeleft : 836:30:26 (34.8 days) >>>>>>>>>>>> [cme@rocks-52 ~]$ ssh tg-grid1.uc.teragrid.org >>>>>>>>>>>> Warning: Permanently added 'tg-grid1.uc.teragrid.org' >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> >>>> (RSA) to >>>> >>>> >>>> >>>>>> the >>>>>> >>>>>> >>>>>> >>>>>>>>>>>> list of >>>>>>>>>>>> known hosts. >>>>>>>>>>>> Permission denied (external- >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>> keyx,gssapi,publickey,gssapi,hostbased). >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>>>>>> [cme@rocks-52 ~]$ >>>>>>>>>>>> >>>>>>>>>>>> That is the certificate that I registered with. I also >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> >>>> tried >>>> >>>> >>>> >>>>>> the >>>>>> >>>>>> >>>>>> >>>>>>>>>>>> ssh key >>>>>>>>>>>> pair I put up on the pragma wiki. >>>>>>>>>>>> >>>>>>>>>>>> Any thoughts? >>>>>>>>>>>> >>>>>>>>>>>> Thanks, >>>>>>>>>>>> Colin >>>>>>>>>>>> >>>>>>>>>>>> --- >>>>>>>>>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 >>>>>>>>>>>> Room H7.26, Level 7, Building H, Monash University >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> >>>> Caulfield >>>> >>>> >>>> >>>>>> 3145, >>>>>> >>>>>> >>>>>> >>>>>>>>>>>> Australia >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>>> -----Original Message----- >>>>>>>>>>>>> From: JP Navarro [mailto:navarro@mcs.anl.gov] >>>>>>>>>>>>> Sent: Friday, 1 December 2006 2:47 AM >>>>>>>>>>>>> To: Colin Enticott >>>>>>>>>>>>> Cc: zhengc@sdsc.edu; 'Terrence Martin'; gin- ops@ggf.org; >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>> 'Oscar >>>>>> >>>>>> >>>>>> >>>>>>>>>>>>> Koeroo'; >>>>>>>>>>>>> gin-auth@ggf.org >>>>>>>>>>>>> Subject: Re: start Savannah run >>>>>>>>>>>>> >>>>>>>>>>>>> Colin, >>>>>>>>>>>>> >>>>>>>>>>>>> You should be set to go on the UC/ANL TeraGrid cluster. >>>>>>>>>>>>> >>>>>>>>>>>>> GT4 Pre-WS GRAM: tg-grid1.uc.teragrid.org:2119 >>>>>>>>>>>>> GT4 WS GRAM: tg-grid1.uc.teragrid.org:8443 (FORK, >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>> >>>> PBS) >>>> >>>> >>>> >>>>>>>>>>>>> GT4 GridFTP: tg-gridftp.uc.teragrid.org:2811 >>>>>>>>>>>>> >>>>>>>>>>>>> Regards, >>>>>>>>>>>>> >>>>>>>>>>>>> JP >>>>>>>>>>>>> >>>>>>>>>>>>> On Nov 30, 2006, at 2:43 AM, Colin Enticott wrote: >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>> >>>>>>>>>>>>>> Thankyou everyone. >>>>>>>>>>>>>> >>>>>>>>>>>>>> I am now registered on the GIN VO (well, I appear here: >>>>>>>>>>>>>> http://kuiken.nikhef.nl/gin.ggf.org/grid-mapfile). >>>>>>>>>>>>>> >>>>>>>>>>>>>> What is my next step? >>>>>>>>>>>>>> >>>>>>>>>>>>>> Thanks, >>>>>>>>>>>>>> Colin >>>>>>>>>>>>>> >>>>>>>>>>>>>> --- >>>>>>>>>>>>>> Colin Enticott, Research Scientist, Ph: +61 03 9903 2215 >>>>>>>>>>>>>> Room H7.26, Level 7, Building H, Monash University >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>> Caulfield >>>> >>>> >>>> >>>>>>>> 3145, >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>>>>>>>> Australia >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>> >>>>>>>>>>>>>>> -----Original Message----- >>>>>>>>>>>>>>> From: Cindy Zheng [mailto:zhengc@sdsc.edu] >>>>>>>>>>>>>>> Sent: Thursday, 30 November 2006 11:59 AM >>>>>>>>>>>>>>> To: 'Terrence Martin' >>>>>>>>>>>>>>> Cc: 'JP Navarro'; gin-ops@ggf.org; 'Oscar Koeroo'; >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>> 'Colin >>>> >>>> >>>> >>>>>>>>>>>>>>> Enticott'; gin- >>>>>>>>>>>>>>> auth@ggf.org >>>>>>>>>>>>>>> Subject: RE: FW: start Savannah run >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> Thank you, Terrence! >>>>>>>>>>>>>>> We'll wait to hear from Colin when Colin finishes >>>>>>>>>>>>>>> registering to gin vo. >>>>>>>>>>>>>>> Cindy >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> -----Original Message----- >>>>>>>>>>>>>>>> From: Terrence Martin >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>> [mailto:tmartin@physics.ucsd.edu] >>>> >>>> >>>> >>>>>>>>>>>>>>>> Sent: Wednesday, November 29, 2006 11:36 AM >>>>>>>>>>>>>>>> To: Oscar Koeroo >>>>>>>>>>>>>>>> Cc: zhengc@sdsc.edu; 'JP Navarro'; gin-ops@ggf.org; >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>> 'Colin >>>> >>>> >>>> >>>>>>>>>>>>>>>> Enticott'; gin-auth@ggf.org >>>>>>>>>>>>>>>> Subject: Re: FW: start Savannah run >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> Oscar Koeroo wrote: >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> Hi Terrence and Cindy, >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> Getting new users up for registration on the GIN VO >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>> is >>>> >>>> >>>> >>>>>> easy. >>>>>> >>>>>> >>>>>> >>>>>>>>>>>>>>>>> To be >>>>>>>>>>>>>>>>> able to access the secured website and for >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>> authentication >>>> >>>> >>>> >>>>>>>> reasons >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>>>>>>>>>>> during the registration process new users must have >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>> their >>>> >>>> >>>> >>>>>>>>>>>>>>>> certificate >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> loaded and ready in their webbrowser. The VOMS server >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>> is >>>> >>>> >>>> >>>>>>>>>>>>>>>> loaded with >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> all IGTF accredited CAs including the Fermilab kCA. >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> Go to the website: >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> https://kuiken.nikhef.nl:8443/voms/gin.ggf.org/ and >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> apply for a "New user registration". >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> The usual VOMS configuration info is also available. >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>> I >>>> >>>> >>>> >>>>>>>>>>>>>>>> don't know what >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> you'll need to populate a GUMS server. This VOMS >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>> server >>>> >>>> >>>> >>>>>> is as >>>>>> >>>>>> >>>>>> >>>>>>>> any >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>>>>>>>>>>> other so I guess you can use your regular setup. >>>>>>>>>>>>>>>>> In addition to the secured interface I've also made >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>> available >>>>>> >>>>>> >>>>>> >>>>>>>> a >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>>>>>>>>>>> non-secured way of grabbing a grid-mapfile. >>>>>>>>>>>>>>>>> http://kuiken.nikhef.nl/gin.ggf.org/grid-mapfile >>>>>>>>>>>>>>>>> There is also an RSS-feed pointing to the grid- >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>> mapfile >>>> >>>> >>>> >>>>>> and >>>>>> >>>>>> >>>>>> >>>>>>>>>>>>>>>> the secured >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> interface at >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> http://kuiken.nikhef.nl/gin.ggf.org/feed- >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>> gin.ggf.org.xml >>>> >>>> >>>> >>>>>>>>>>>>>>>>> Unfortunately I'm not aware of a clear guide. I do >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>> know a >>>> >>>> >>>> >>>>>>>>>>>>>>>>> guide for >>>>>>>>>>>>>>>>> creating the packed certificate files that go into >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>> your >>>> >>>> >>>> >>>>>>>>>>>>>>>> browser if you >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> start from a two PEM formated files (certificate file >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>> + >>>> >>>> >>>> >>>>>>>>>>>>>>>>> private key >>>>>>>>>>>>>>>>> file) that's at >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>> http://certificate.nikhef.nl/info/browser >>>> >>>> >>>> >>>>>>>>>>>>>>>>> Once a user has passed that stage, the registration >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>> for >>>> >>>> >>>> >>>>>> the >>>>>> >>>>>> >>>>>> >>>>>>>>>>>>>>>> VO is as >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> trivial as any web-forum account registration. >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> I am assuming this user already has a grid cert since >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>> they >>>> >>>> >>>> >>>>>>>>>>>>>>>> list a DN so >>>>>>>>>>>>>>>> only VOMS registration is required. Once that is done >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>> either I >>>>>> >>>>>> >>>>>> >>>>>>>>>>>>>>>> run my >>>>>>>>>>>>>>>> update of GUMS manually or in 720/2 minutes on average >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>> the >>>> >>>> >>>> >>>>>>>>>>>>>>>> user will be >>>>>>>>>>>>>>>> automatically downloaded into my GUMS database. I >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>> actually >>>> >>>> >>>> >>>>>> do >>>>>> >>>>>> >>>>>> >>>>>>>>>>>>>>>> not have >>>>>>>>>>>>>>>> to do anything, but I can speed things up ever so >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>> slightly >>>> >>>> >>>> >>>>>> if >>>>>> >>>>>> >>>>>> >>>>>>>> I >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>>>>>>>>>> am in >>>>>>>>>>>>>>>> the office and someone asks me to try refreshing gums. >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> Terrence >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> Oscar >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> Cindy Zheng wrote: >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Sounds right, Terrence. Let me ask Oscar who has >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>> helped >>>> >>>> >>>> >>>>>> me >>>>>> >>>>>> >>>>>> >>>>>>>>>>>>>>>> with GIN >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> VO before. >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Hi, Oscar, >>>>>>>>>>>>>>>>>> Could you advise Colin what need to be done to be >>>>>>>>>>>>>>>>>> added in GIN VO? >>>>>>>>>>>>>>>>>> I'm also cc'ing to gin-auth list. >>>>>>>>>>>>>>>>>> If there is a guide for potential GIN users, please >>>>>>>>>>>>>>>>>> let me know the url and I can link it to our GINOPS >>>>>>>>>>>>>>>>>> page. >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Thanks, >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Cindy >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> -----Original Message----- >>>>>>>>>>>>>>>>>>> From: Terrence Martin >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>> [mailto:tmartin@physics.ucsd.edu] >>>> >>>> >>>> >>>>>>>> Sent: >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>>>>>>>>>>>>> Tuesday, November 28, 2006 3:24 PM >>>>>>>>>>>>>>>>>>> To: zhengc@sdsc.edu >>>>>>>>>>>>>>>>>>> Cc: 'JP Navarro'; gin-ops@ggf.org; 'Colin Enticott' >>>>>>>>>>>>>>>>>>> Subject: Re: FW: start Savannah run >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> The quickest and easiest way for me is to have him >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>> added to >>>>>> >>>>>> >>>>>> >>>>>>>>>>>>>>>>>>> a VO. >>>>>>>>>>>>>>>>>>> How easy is it to add him to the GIN VO? One in >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>> there I >>>> >>>> >>>> >>>>>>>>>>>>>>>> can hit my >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> gums reload and he will be able to access UCSD as a >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>> GIN >>>> >>>> >>>> >>>>>>>>>>>>>>>>>>> user. Any >>>>>>>>>>>>>>>>>>> other approach requires me hacking his DN into my >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>> local >>>> >>>> >>>> >>>>>>>>>>>>>>>> VO which I >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> prefer to avoid and does not help him with any >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>> other >>>> >>>> >>>> >>>>>> site. >>>>>> >>>>>> >>>>>> >>>>>>>>>>>>>>>>>>> Terrence >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> Cindy Zheng wrote: >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> Thanks, Terrence, for the quick reply! >>>>>>>>>>>>>>>>>>>> Colin has not been a GIN user. >>>>>>>>>>>>>>>>>>>> What do you think it's the best way to get
-----Original Message----- From: Terrence Martin [mailto:tmartin@physics.ucsd.edu] Sent: Tuesday, 6 February 2007 11:24 AM To: Colin Enticott Cc: 'JP Navarro'; gin-auth@ggf.org; gin-ops@ggf.org; zhengc@sdsc.edu Subject: Re: [gin-ops] [gin-auth] start Savannah run
Hi Colin, that was my next question if the CRL is up to date. :) I have seen the SSL handshake problem with clock synch issues however CRL out of date is something to watch for. Interesting I am told in at least some versions if the CRL directory is empty the test to see if the CRL is out of date never fails....
Terrence
Colin Enticott wrote:
Hi Terrence,
The clock on remus and tg-grid1 are within a few seconds of each other (maybe closer, I can't type that fast). Using Mike's suggestion (thankyou Mike) it looks like the "server" has an expired revocation list:
$ globus-url-copy -vb -dbg gsiftp://tg-gridftp.uc.teragrid.org:2811/etc/hosts file:///tmp/null
debug: starting to get gsiftp://tg- gridftp.uc.teragrid.org:2811/etc/hosts debug: connecting to gsiftp://tg- gridftp.uc.teragrid.org:2811/etc/hosts debug: response from gsiftp://tg- gridftp.uc.teragrid.org:2811/etc/hosts: 220 tg-s004.uc.teragrid.org GridFTP Server 2.1 (gcc32dbg, 1122653280-
colin > >>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>> access? > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>> Cindy > >>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> -----Original Message----- > >>>>>>>>>>>>>>>>>>>>>>>>> From: Terrence Martin > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>> [mailto:tmartin@physics.ucsd.edu] > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>>>> Sent: > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> Tuesday, November 28, 2006 2:53 PM > >>>>>>>>>>>>>>>>>>>>>>>>> To: zhengc@sdsc.edu > >>>>>>>>>>>>>>>>>>>>>>>>> Cc: 'JP Navarro'; gin-ops@ggf.org > >>>>>>>>>>>>>>>>>>>>>>>>> Subject: Re: FW: start Savannah run > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> We only have a production cluster, but I should > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>> still > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>>>>>>>>>>>>>> be > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>> able to help. > >>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> I do not seem to have Colin in my GUMS database > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>> though > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> for > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>> GIN or any > >>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> other VO. Should he be downloaded with GIN's > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>> users? > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> Terrence > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> Cindy Zheng wrote: > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>>> Hi, JP and Terrence, > >>>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>>> Could you help Colin to get ready to run > >>>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>> Savannah > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>>> application on your GIN testbed clusters? > >>>>>>>>>>>>>>>>>>>>>>>>>> You can find Colin's user info at > >>>>>>>>>>>>>>>>>>>>>>>>>> http://wiki.pragma- > >>>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>> grid.net/index.php?title=ColinDetails > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>>> If you need more info or action from Colin, or > >>>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>> have > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>>>>>>>>>>>>>> any questions > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>>> for Colin or me, please let us know. > >>>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>>> Thank you very much! > >>>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>>> Cindy > >>>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>>> -----Original Message----- > >>>>>>>>>>>>>>>>>>>>>>>>>> From: Cindy Zheng [mailto:zhengc@sdsc.edu] > Sent: > >>>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>> Tuesday, > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>>> November 28, 2006 2:31 PM > >>>>>>>>>>>>>>>>>>>>>>>>>> To: 'gin-ops@ggf.org' > >>>>>>>>>>>>>>>>>>>>>>>>>> Subject: start Savannah run > >>>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>>> Dear all, > >>>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>>> Thanks for all the people involved to help make > >>>>>>>>>>>>>>>>>>>>>>>>>> TDDFT application run and GIN testbed > monitoring > >>>>>>>>>>>>>>>>>>>>>>>>>> very fruitful experiments! We have learned a > lot > >>>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>> and > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>>>>>> have > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>>> presented our learnings at OGF and SC06. > >>>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>>> Let's continue our collaborative effort with > our > >>>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>> plan > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> - start our > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>>> next experiment with Savannah > >>>>>>>>>>>>>>>>>>>>>>>>>> fire simulation - a data-intensive application, > >>>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>> to > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>>>>>>>>>>>>>> explore data > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>>> related interoperation issues. > >>>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>>> Colin Enticott at Monash University of > Australia > >>>>>>>>>>>>>>>>>>>>>>>>>> is the lead driver. Colin has documented the > >>>>>>>>>>>>>>>>>>>>>>>>>> introduction and requirements of this > >>>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>> application at > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>>> http://wiki.pragma- > >>>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>> grid.net/index.php?title=Savannah > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>>> or go to > >>>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> http://forge.gridforum.org/sf/wiki/do/viewPage/ > >>>>>>>>>>>>>>>>>>>>>>>>> projects.gin/wi > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>> ki/GinOps > >>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> click "Savannah" under "Applications", > >>>>>>>>>>>>>>>>>>>>>>>>> where "first Savannah experiment" is refering to > >>>>>>>>>>>>>>>>>>>>>>>>> a previous experiment in PRAGMA testbed. The > >>>>>>>>>>>>>>>>>>>>>>>>> "second Savannah experiment" is the one for GIN > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>> testbed. > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> We like to run this application on all Grids in > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>> GIN > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>>>>>>>>>>>>>> testbed, but > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> in 2 steps. First, we will run it on > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> PRAGMA/TeraGrid/OSG - since > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> these should be relatively easier to do. We like > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>> to > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>>>> get > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> this done > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> before the year end. > >>>>>>>>>>>>>>>>>>>>>>>>> The next step, Colin will work with EGEE and > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>> Nordugrid > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> to develop possible solutions, to enable > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>> interoperation > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> and to include all 5 Grids in the run. > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> Thanks in advance for your continued help with > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>> this! > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> Cindy > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>>>>>>>>>>>> > >>>>>>>>>>>>>>> -- > >>>>>>>>>>>>>>> gin-auth mailing list > >>>>>>>>>>>>>>> gin-auth@ogf.org > >>>>>>>>>>>>>>> http://www.ogf.org/mailman/listinfo/gin-auth > >>>>>>>>>>>>>>> > >>>>>>>>>>>>>>> > >>>>>>>>>>>>>>> > >>>>>>>>>>>>> -- > >>>>>>>>>>>>> gin-ops mailing list > >>>>>>>>>>>>> gin-ops@ogf.org > >>>>>>>>>>>>> http://www.ogf.org/mailman/listinfo/gin-ops > >>>>>>>>>>>>> > >>>>>>>>>>>>> > >>>>>>>>>>>>> > >>>>>>> > >>> > >>> > > > > > >
participants (2)
-
Cindy Zheng -
Colin Enticott