perfSONAR User Q&A and Other Discussion

[Verena Venus <>]

Hi Manuel,

Am Freitag 17 Juli 2009 11:03:45 schrieb Nina Jeliazkova:
> Hi Manuel,
>
> Two things here:
>
> AFAIK, BWCTL service does not yet support authentication via GIdP (I
> might be wrong).
>
In Theory it does, but noone ever tested it properly, as far as I know.

> Second, in order to use authentication from psUI, you would need to
> switch on the authentication via Option menu
>
That is the problem here.... You used the built-in BWCTL authentication we 
used before AS service was implemented. You cannot use your GidP account on 
this.
>
>
> I have just noticed this menu is not available in BWCTL tab for some
> reason. The option menu is available for any perfsonar tab, provided it
> is not explicitly overriden or hidden by particular tab implementation.
>
I'm not the author of the BWCTL tab, so no idea, why the menu is not 
available. However, if it was there, you might be lucky, and things work with 
it out of the box.

It would be really nice to have this feature working :) 

Another thing that comes to my mind: I'm not sure the as_url in the oppd.conf 
file is up to date. Maybe you need another address. Does anyone now the URL 
of 
a correctly running AS? If so, it would be nice to provide it, so I can add 
it 
to the standard config file of oppd.

Regards,
Verena

> I am sure BWCTL service and psUI tab developers (in cc:) will reply to
> you as well.
>
> Best regards,
> Nina
>
> Manuel SUBREDU wrote:
> >  Hi (again) :) ,
> >
> >  this time I have some issues with BWCTL service. Since noone provides
> > access to tests without authentication, I have enabled auth support but
> > something is not right and I don't understand why. What I have done:
> > *) auth_mode in /etc/bwctld.conf is set to "OAE"
> > *) oppd.conf (from /usr/lib/perfsonar/services/oppd/etc) has:
> >   - auth set to "1"
> >   - as_url set to
> > "http://homer.rediris.es:8080/perfSONAR-AS/services/AuthService";
> > *) bwctld setup and started with bwctld -c /etc/
> >
> > I then used perfSONAR-UI and tried to make a test from RoEduNet to
> > anyone I have found on the perfSONAR-UI list. I used for this pourpose a
> > username and a password created by someone from RoEduNet (Gidp account)
> > but when I try to make the test I get this error:
> >
> > <quote>
> >
> > 2009-07-17T11:41:33 info OPPD.no_service.INFO% Service: MP/BWCTL
> > 2009-07-17T11:41:34 info OPPD.no_service.INFO% Authentication:
> >
> > 2009-07-17T11:41:34 error OPPD.no_service.ERROR% No authentication
> > information in SOAP header!
> >
> > 2009-07-17T11:41:34 info OPPD.no_service.INFO% Received message
> > 2009-07-17T11:41:34 debug OPPD.no_service.DEBUG% Raw Message:
> > <?xml version="1.0"?>
> > <nmwg:message xmlns:nmwg="http://ggf.org/ns/nmwg/base/2.0/";
> > xmlns:bwctl="http://ggf.org/ns/nmwg/tools/bwctl/2.0/";
> > xmlns:iperf="http://ggf.org/ns/nmwg/tools/iperf/2.0/"; xmlns:nmtm=
> > "http://ggf.org/ns/nmwg/time/2.0/";
> > xmlns:nmwgt="http://ggf.org/ns/nmwg/topology/2.0/";
> > xmlns:result="http://ggf.org/ns/nmwg/result/2.0/"; id="bwctl-request"
> > type="ErrorResponse">
> >
> >   <nmwg:metadata id="bwctl-metadata">
> >     <bwctl:subject id="bwctl-subject">
> >       <nmwgt:endPoint type="ipv4" value="131.188.81.12"/>
> >     </bwctl:subject>
> >
> >    
> > <nmwg:eventType>http://ggf.org/ns/nmwg/tools/bwctl/2.0/</nmwg:eventType>
> > <bwctl:parameters id="bwctl-parameters">
> >     <nmwg:parameter xmlns:nmwg="nmwg" name="duration"
> > value="60"/><nmwg:parameter xmlns:nmwg="nmwg" name="login"
> > value="perfsonar-RoEduNet"/><nmwg:parameter xmlns:nmwg="nmwg" name
> > ="password" value="__removed__"/></bwctl:parameters>
> >   </nmwg:metadata>
> >
> >   <nmwg:metadata id="iperf-metadata">
> >     <iperf:subject id="iperf-subject" metadataIdRef="bwctl-metadata">
> >       <nmwgt:endPointPair>
> >         <nmwgt:src type="ipv4" value="81.180.250.176"/>
> >         <nmwgt:dst type="ipv4" value="152.66.116.81"/>
> >       </nmwgt:endPointPair>
> >     </iperf:subject>
> >     <iperf:parameters id="iperf-parameters">
> >     <nmwg:parameter xmlns:nmwg="nmwg" name="protocol"
> > value="TCP"/><nmwg:parameter xmlns:nmwg="nmwg" name="windowSize"
> > value="32768"/></iperf:parameters>
> >    
> > <nmwg:eventType>http://ggf.org/ns/nmwg/tools/iperf/2.0/</nmwg:eventType>
> > </nmwg:metadata>
> >
> >   <!-- triggers to indicate head of chains -->
> >   <nmwg:data id="1" metadataIdRef="iperf-metadata"/>
> >
> >
> > <nmwg:metadata id="return_message"><result:subject
> > metadataIdRef="message"
> > id="subjreturn"/><nmwg:eventType>error.authn.no_sectoken</nmwg:eventType>
> ></nmwg:metadata><nmwg:data meta
> > dataIdRef="return_message" id="data_return_message"><nmwg:datum>No
> > authentication information in SOAP
> > header!</nmwg:datum></nmwg:data></nmwg:message>
> >
> > 2009-07-17T11:41:34 info OPPD.no_service.INFO% Service: MP/BWCTL
> > </quote>
> >
> >  Do you have any ideea what is wrong here ?

-- 
Verena Venus, DFN-Labor
Friedrich-Alexander-Universität Erlangen-Nürnberg
Regionales RechenZentrum Erlangen (RRZE)
Martensstraße 1, 91058 Erlangen, Germany
Tel. +49 9131 85-28738, -28800, Fax +49 9131 302941


www.win-labor.dfn.de