perfsonar development work

[Cándido Rodríguez Montes <>]

Hi Nicolas,

El 27/02/2008, a las 17:39, Nicolas Simar escribió:

Cándido Rodríguez Montes wrote:

Hi Nina,

You receive the error code 'error.authn.timestamp' when the timestamp information included in the security token is not valid. When does it happens?

- Your computer hasn't a valid clock time. You should use a NTP server for synchronizing your clock time. Reading the error logs of the AS, I think you're having this problem.

Does that implies that all the user of pSUI will have to synchronise their clock with NTP?

Well, it implies that all users have to be a right local time. You can set it manually or you can use an NTP server (for example, Mac OS X uses always an NTP server so we have always a right local time :) ).

We have always had this "problem" in authentication and authorization scenarios, but we had worked only with web applications, and the synchronization of the clock had been done in the web server (the machine hosting the client), so the user didn't experience this problem. 

But now, in perfSONAR we have non-web applications, and these ones should be executed with valid clock time (in the machine hosting the client).

Regards

Cheers,

Nicolas

- The security token was created for a time period too long. But, if you haven't specified it in your code it should be the previous one.

Regards

El 27/02/2008, a las 16:47, Nina Jeliazkova escribió:

Hi Cándido,

I've tried to use the new perfsonar base in perfsonarUI, but when testing with Telnet SSH, I am getting the error message below. Could you tell me the reason?

<?xml version="1.0" encoding="UTF-8"?>

<nmwg:message xmlns:nmwg="http://ggf.org/ns/nmwg/base/2.0/" id="resultCodeMessage">

<nmwg:metadata id="resultCodeMetadata">

<nmwg:eventType>error.authn.timestamp</nmwg:eventType>

</nmwg:metadata>

<nmwg:data id="resultDescriptionData_for_resultCodeMetadata" metadataIdRef="resultCodeMetadata">

<nmwgr:datum xmlns:nmwgr="http://ggf.org/ns/nmwg/result/2.0/">Authentication failed</nmwgr:datum>

</nmwg:data>

</nmwg:message>

Regards,

Nina

Cándido Rodríguez Montes написа:

Hi devs,

There is a new version of perfsonar-base, 20080225, which should be used if you're using the authentication component in your service. This release fixs a problem with the WE profile.

Please, update your perfSONAR-base jar file ASAP, so testing process can include tests of the WE profile for your service.

Regards

--

Cándido Rodríguez Montes E-mail: <>

Middleware warrior Tel:+34 955 05 66 13

Red.ES/RedIRIS

Edificio CICA

Avenida Reina Mercedes, s/n

41012 Sevilla

SPAIN

-- 

---------------------------------

Dr. Nina Nikolova-Jeliazkova

Institute for Parallel Processing

Bulgarian Academy of Sciences

Acad. G. Bonchev St 25-A

1113 Sofia, Bulgaria

Tel: +359 886 802011

ICQ: 10705013

www: http://ambit.acad.bg/nina

---------------------------------

PGP Public Key

http://cert.acad.bg/pgp-keys/keys/nina-nikolova-0xEEABA669.asc

8E99 8BAD D804 1A43 27B7  7F87 CF04 C7D1 EEAB A669

---------------------------------------------------------------

--

Cándido Rodríguez Montes E-mail: <>

Middleware warrior Tel:+34 955 05 66 13

Red.ES/RedIRIS

Edificio CICA

Avenida Reina Mercedes, s/n

41012 Sevilla

SPAIN

-- 

Nicolas

______________________________________________________________________

Nicolas Simar

Network Engineer

DANTE - www.dante.net

Tel - BE: +32 (0) 4 366 93 49

Tel - UK: +44 (0)1223 371 300

Mobile: +44 (0) 7740 176 883

City House, 126-130 Hills Road

Cambridge CB2 1PQ

UK

_____________________________________________________________________

--

Cándido Rodríguez Montes E-mail: 

Middleware warrior Tel:+34 955 05 66 13

Red.ES/RedIRIS

Edificio CICA

Avenida Reina Mercedes, s/n

41012 Sevilla

SPAIN