Skip to Content.
Sympa Menu

perfsonar-user - Problems with Authentication within perfsonar

Subject: perfSONAR User Q&A and Other Discussion

List archive

Problems with Authentication within perfsonar


Chronological Thread 
  • From: "Niederberger, Ralph" <>
  • To: "" <>
  • Subject: Problems with Authentication within perfsonar
  • Date: Wed, 9 Sep 2009 14:39:23 +0200
  • Accept-language: de-DE
  • Acceptlanguage: de-DE
Dear all,

Has someone had the time to look into my problem with authentication
service?

I reinstalled the AS and SQL-MA several times to be sure that I did not
misconfigure something. The problem remains the same (see log below).

Could the problem be related to the fact that my GIdP account is not setup
correctly?

The following is what is stored at GEANT2:

=======================================================
User ID: RNiederberger-dfn.de
Name: Ralph Niederberger
Display Name: RNiederberger
Postal Address: Forschungszentrum Jülich
Leo-Brand-Strasse
Postal Code: 52425 Jülich
Email:


Telephone: 02461614772
Fax: 02461-616656
Organisation: Forschungszentrum Jülich
Organisation Type:
Position:
Project Memberships:
Project Specific Roles: Networkadmin
Authorisation Attributes:
Additional Information:
Preferred Language:
Account Status: activated
============================================================

Any help would be really appreciated.

Best regards

Ralph

=========== Log extract ==========
2009-09-09 13:32:16,281 [Load metadata and metrics] INFO
net.geant.edugain.base.Configurator - custom configuration loaded
2009-09-09 13:32:16,578 [Load metadata and metrics] INFO
net.geant.edugain.base.Configurator - keystore loaded:

java.security.KeyStore@16e2b70
2009-09-09 13:32:16,578 [Load metadata and metrics] INFO
net.geant.edugain.base.Configurator - keystore loaded:

java.security.KeyStore@1e5d007
2009-09-09 13:32:17,156 [Load metadata and metrics] INFO
net.geant.edugain.validation.Validator - default validator loaded
2009-09-09 13:32:17,156 [Load metadata and metrics] INFO
net.geant.edugain.validation.Validator - certificate
CN=badulaque.rediris.es, O=FedIRIS, DC=geant, DC=net issued by trusted
CN=eduGAINSCA, DC=geant, DC=net
2009-09-09 13:32:17,250 [Load metadata and metrics] INFO
net.geant.edugain.base.Configurator - expired CRL, successfully
retrieved from http://sca.edugain.org/crl/cacrl.der
2009-09-09 13:32:17,250 [Load metadata and metrics] DEBUG
net.geant.edugain.validation.Validator - validating subject alternative

name: https://registry.edugain.org/resolver?urn=urn:geant:edugain:
component:be:rediris:rediris.es
2009-09-09 13:32:17,250 [Load metadata and metrics] DEBUG
net.geant.edugain.validation.Validator - validating subject alternative

name: https://registry.edugain.org/resolver?urn=urn:geant:edugain:
component:mds:rediris.es
2009-09-09 13:32:17,250 [Load metadata and metrics] DEBUG
net.geant.edugain.base.Configurator - loading default valid components
from C:\Dokumente und Einstellungen\ralph\ValidComponentsFile
2009-09-09 13:32:17,250 [Load metadata and metrics] WARN
net.geant.edugain.base.Configurator - default valid components loaded.
Note this is intended only for development purpouses and is an insecure

behaviour!
2009-09-09 13:32:17,250 [Load metadata and metrics] INFO
net.geant.edugain.validation.eduGAINComponentID - component identifier
successfully decoded: urn:geant:edugain:component:mds:rediris.es
2009-09-09 13:32:17,250 [Load metadata and metrics] INFO
net.geant.edugain.validation.Validator - valid component found while
validating certificate CN=badulaque.rediris.es, O=FedIRIS, DC=geant,
DC=net for component urn:geant:edugain:component:mds:rediris.es
2009-09-09 13:32:17,265 [Load metadata and metrics] INFO
net.geant.edugain.base.SecureConnection - certificate for
CN=badulaque.rediris.es, O=FedIRIS, DC=geant, DC=net was validated
2009-09-09 13:32:17,265 [Load metadata and metrics] INFO
net.geant.edugain.base.SecureConnection - successfully connected to
https://mds.rediris.es:8443
2009-09-09 13:32:17,593 [Load metadata and metrics] ERROR
net.geant.edugain.meta.query.MetaDataUnmarshaller - HLPattern type not
defined
================ end of log extract =========

Could the problem be related to the fact that my GIdP account is not setup
correctly?

The following is what is stored at GEANT2:

=======================================================
User ID: RNiederberger-dfn.de
Name: Ralph Niederberger
Display Name: RNiederberger
Postal Address: Forschungszentrum Jülich
Leo-Brand-Strasse
Postal Code: 52425 Jülich
Email:


Telephone: 02461614772
Fax: 02461-616656
Organisation: Forschungszentrum Jülich
Organisation Type:
Position:
Project Memberships:
Project Specific Roles: Networkadmin
Authorisation Attributes:
Additional Information:
Preferred Language:
Account Status: activated
============================================================

Any help would be really appreciated.

Best regards

Ralph

***************************************************
Ralph Niederberger
Juelich Supercomputing Centre
Institute for Advanced Simulation

Phone: +49 2461 61-4772
Fax: +49 2461 61-6656
E-Mail:

WWW: http://www.fz-juelich.de/jsc/

JSC is the coordinator of the
John von Neumann Institute for Computing
and member of the
Gauss Centre for Supercomputing
***************************************************

Forschungszentrum Jülich GmbH
52425 Jülich

Sitz der Gesellschaft: Jülich
Eingetragen im Handelsregister des Amtsgerichts Düren Nr. HR B 3498
Vorsitzende des Aufsichtsrats: MinDirig'in Bärbel Brumme-Bothe
Geschäftsführung: Prof. Dr. Achim Bachem (Vorsitzender),
Dr. Ulrich Krafft (stellv. Vorsitzender), Prof. Dr.-Ing. Harald Bolt,
Prof. Dr. Sebastian M. Schmidt

***************************************************

> -----Ursprüngliche Nachricht-----
> Von: Niederberger, Ralph
> [mailto:]
> Gesendet: Freitag, 4. September 2009 09:40
> An:
>
> Betreff: [perfsonar-user] Problems with Authentication within perfsonar
>
>
> Dear all,
>
> Using PerfsonarUI and specifying in Interfaces -> Query & search options -
> >
> Options -> Request -> Enable authentication and authorization
>
> After having checked this box I have been asked for my GIdP. Specifying
> this
> and trying to access SQL-MA info from my DEISA measurement archive I get
> the
> following error:
>
>
> "Error code error.as.query Error description
> AADispatchSOAPProtocol.getAuthentication: General exception while
> retrieving
> report See the C:\Programme\PerfSONAR\PerfsonarUI-v0.15\bin\perfsonar.log
> file for further error details."
>
> Looking into the log file I see:
>
> -------------------------------------------------------------------
> 2009-09-04 09:23:05,578 [] INFO net.geant.edugain.base.Configurator -
> custom configuration loaded
> 2009-09-04 09:23:05,890 [] INFO net.geant.edugain.base.Configurator -
> keystore loaded:
> java.security.KeyStore@ad40a0
> 2009-09-04 09:23:05,890 [] INFO net.geant.edugain.base.Configurator -
> keystore loaded:
> java.security.KeyStore@6dd60e
> 2009-09-04 09:23:06,593 [] INFO net.geant.edugain.validation.Validator -
> default validator loaded
> 2009-09-04 09:23:06,609 [] INFO net.geant.edugain.validation.Validator -
> certificate CN=badulaque.rediris.es, O=FedIRIS, DC=geant, DC=net issued by
> trusted CN=eduGAINSCA, DC=geant, DC=net
> 2009-09-04 09:23:06,781 [] INFO net.geant.edugain.base.Configurator -
> expired CRL, successfully retrieved from
> http://sca.edugain.org/crl/cacrl.der
> 2009-09-04 09:23:06,781 [] DEBUG net.geant.edugain.validation.Validator -
> validating subject alternative name:
> https://registry.edugain.org/resolver?urn=urn:geant:edugain:component:be:r
> ed
> iris:rediris.es
> 2009-09-04 09:23:06,781 [] DEBUG net.geant.edugain.validation.Validator -
> validating subject alternative name:
> https://registry.edugain.org/resolver?urn=urn:geant:edugain:component:mds:
> re
> diris.es
> 2009-09-04 09:23:06,781 [] DEBUG net.geant.edugain.base.Configurator -
> loading default valid components from
> C:\Programme\PerfSONAR\PerfsonarUI-v0.15\bin\ValidComponentsFile
> 2009-09-04 09:23:06,781 [] WARN net.geant.edugain.base.Configurator -
> default valid components loaded. Note this is intended only for
> development
> purpouses and is an insecure behaviour!
> 2009-09-04 09:23:06,796 [] INFO
> net.geant.edugain.validation.eduGAINComponentID - component identifier
> successfully decoded: urn:geant:edugain:component:mds:rediris.es
> 2009-09-04 09:23:06,796 [] INFO net.geant.edugain.validation.Validator -
> valid component found while validating certificate
CN=badulaque.rediris.es,
> O=FedIRIS, DC=geant, DC=net for component
> urn:geant:edugain:component:mds:rediris.es
> 2009-09-04 09:23:06,796 [] INFO net.geant.edugain.base.SecureConnection -
> certificate for CN=badulaque.rediris.es, O=FedIRIS, DC=geant, DC=net was
> validated
> 2009-09-04 09:23:06,796 [] INFO net.geant.edugain.base.SecureConnection -
> successfully connected to https://mds.rediris.es:8443
> 2009-09-04 09:23:07,203 [] ERROR
> net.geant.edugain.meta.query.MetaDataUnmarshaller - HLPattern type not
> defined
> --------------------------------------------------------
>
> Do you have any hints, what is going wrong.
>
> Thanks in advance
>
> Ralph
>

Attachment: smime.p7s
Description: S/MIME cryptographic signature


Archive powered by MHonArc 2.6.16.

Top of Page