perfSONAR User Q&A and Other Discussion

[Nina Jeliazkova <>]

Dear Ralph,

Niederberger, Ralph wrote:
> Dear Candido and all,
>
> Coming back to Candido's question concerning correct Uid/Passwd, I have
> analysed the problem a little bit deeper.
>
> After starting PerfsonarUI v0.15b without doing any further action related
> to my perfsonar MDM installation, I see already some first errors. The log
> of the Perfsonar UI is appended.
> (See the timeframe comments below also)
>
> I assume that the problem I have is a followup of these ones.
>
> See Log entries 2009-10-20 14:22:55 till 2009-10-20 14:23:04.
> At this point I have not yet set the "Enable authentication and
> Authorization" flag via the options menu and am using the default
> perfsonarUI.conf file. So nothing special so far.
>
>
> In the timeframe 2009-10-20 1433:01 till 2009-10-20 15:13:07,
> there came up some log entries though I have not done anything.
>
>   
This is fine, perfsonarUI is querying Lookup service in background,
errors happen but they have nothing to do with authorisation.
> In the timeframe 2009-10-20 15:23:01 till 2009-10-20 15:23:07, I set "Enable
> authentication and Authorization" via options menu.
>
> Timeframe 2009-10-20 15:31:44 till 2009-10-20 15:31.46, I clicked on "Load
> metadata and metrics" having the default perfsonarUI.conf file and got the
> "Enter credentials" menue up.
>
> Timeframe 2009-10-20 15:44:01 till 2009-10-20 15:44:02, I get further error
> messages, though I have not done anything. perfsonarUI is still waiting for
> UID and Password info from the user.
>
>   
There is a single error message (the rest are INFO and WARNINNG), all
coming from edugain library, hopefully Candido can help with deciphering.

2009-10-20 15:44:02,187 [] ERROR
net.geant.edugain.meta.query.MetaDataUnmarshaller - HLPattern type not
defined

> So the problem already exists, though I have not put in any UID and Passwd
> information nor clicked on the "ok" button.
>
> This implies the problem is not related to my perfsonar MDM installation at
> all. It is already existent within the perfsonarUI vers 0.15b client
> installed on MS Windows XP.
>
> Any hints what the problem could be?
>   
If I remember correct, the initial reasoning pointed to an expired
certificate in the GEANT infrastructure, not your particular
installation.  

Could you please try again?   The code signing certificate of
perfsonarUI has recently expired and now replaced with a new one (this
is different than one used in IdP infrastructure).

Could somebody suggest a perfsonar service that is using authentication
to test with? 

Best regards,
Nina
> Best regards
>
> Ralph  
>
> ***************************************************
>  Ralph Niederberger
>  Juelich Supercomputing Centre
>  Institute for Advanced Simulation
>
>  Phone:  +49 2461 61-4772
>  Fax:    +49 2461 61-6656
>  E-Mail: 
> 
>  WWW:    http://www.fz-juelich.de/jsc/
>
>  JSC is the coordinator of the
>  John von Neumann Institute for Computing
>  and member of the
>  Gauss Centre for Supercomputing
> ***************************************************
>
>  Forschungszentrum Jülich GmbH
>  52425 Jülich
>
>  Sitz der Gesellschaft: Jülich
>  Eingetragen im Handelsregister des Amtsgerichts Düren Nr. HR B 3498
>  Vorsitzende des Aufsichtsrats: MinDirig'in Bärbel Brumme-Bothe
>  Geschäftsführung: Prof. Dr. Achim Bachem (Vorsitzender),
>  Dr. Ulrich Krafft (stellv. Vorsitzender), Prof. Dr.-Ing. Harald Bolt,
>  Prof. Dr. Sebastian M. Schmidt 
>
> ***************************************************
>
>
>   
>> -----Ursprüngliche Nachricht-----
>> Von: Candido Rodriguez Montes 
>> [mailto:]
>> Gesendet: Dienstag, 20. Oktober 2009 11:33
>> An: Niederberger, Ralph
>> Betreff: Re: AW: AW: [perfsonar-user] Problems with Authentication within
>> perfsonar
>>
>> Hi Ralph,
>>
>> On Oct 20, 2009, at 11:22 AM, Niederberger, Ralph wrote:
>>
>>     
>>> Dear Candido,
>>>
>>> As far as I understand, there is no AS involved yet.
>>>
>>> I have installed MDM 3.1 and the AS service of this kit.
>>>
>>> The log is from my PerfsonarUI v.015b client.
>>> The log shows that I try to authenticate with my GIdP at the server
>>> from
>>> RedIRIS.
>>>       
>> You're right, although the GIdP is not operated by RedIRIS but by
>> DANTE. However, I just authenticated myself there and it works.
>> Are you sure your username and password are okay?
>>
>> Regards
>>
>>     
>>> And this does not work. The AS comes into play later, after I have
>>> been authenticated by RedIRIS. Is that correct? And if that is
>>> correct, that
>>> means, that my AS server has not been involved yet.
>>>
>>> Best regards
>>>
>>> Ralph
>>>
>>> ***************************************************
>>> Ralph Niederberger
>>> Juelich Supercomputing Centre
>>> Institute for Advanced Simulation
>>>
>>> Phone:  +49 2461 61-4772
>>> Fax:    +49 2461 61-6656
>>> E-Mail: 
>>> 
>>> WWW:    http://www.fz-juelich.de/jsc/
>>>
>>> JSC is the coordinator of the
>>> John von Neumann Institute for Computing
>>> and member of the
>>> Gauss Centre for Supercomputing
>>> ***************************************************
>>>
>>> Forschungszentrum Jülich GmbH
>>> 52425 Jülich
>>>
>>> Sitz der Gesellschaft: Jülich
>>> Eingetragen im Handelsregister des Amtsgerichts Düren Nr. HR B 3498
>>> Vorsitzende des Aufsichtsrats: MinDirig'in Bärbel Brumme-Bothe
>>> Geschäftsführung: Prof. Dr. Achim Bachem (Vorsitzender),
>>> Dr. Ulrich Krafft (stellv. Vorsitzender), Prof. Dr.-Ing. Harald Bolt,
>>> Prof. Dr. Sebastian M. Schmidt
>>>
>>> ***************************************************
>>>
>>>
>>>       
>>>> -----Ursprüngliche Nachricht-----
>>>> Von: Candido Rodriguez Montes 
>>>> [mailto:]
>>>> Gesendet: Dienstag, 20. Oktober 2009 11:14
>>>> An: Niederberger, Ralph
>>>> Cc: 
>>>> ;
>>>>  
>>>> 
>>>> Betreff: Re: AW: [perfsonar-user] Problems with Authentication within
>>>> perfsonar
>>>>
>>>> Hi Ralph,
>>>>
>>>> On Oct 20, 2009, at 11:06 AM, Niederberger, Ralph wrote:
>>>>
>>>>         
>>>>> Dear Symon,
>>>>>
>>>>> Sorry, to say this, but I get the same error message as I got on
>>>>> Sept. 4th.
>>>>> 2009. Nothing has changed.
>>>>>
>>>>> May be I have a different problem than that which has been solved?
>>>>>
>>>>> Any hints? Log of perfsonar is appended below.
>>>>>           
>>>> Sorry, but that log... from which perfSONAR service is?
>>>> Could you send me the log file of the AS?
>>>>
>>>> Regards
>>>>
>>>>         
>>>>> Best regards
>>>>>
>>>>> Ralph
>>>>>
>>>>> ***************************************************
>>>>> Ralph Niederberger
>>>>> Juelich Supercomputing Centre
>>>>> Institute for Advanced Simulation
>>>>>
>>>>> Phone:  +49 2461 61-4772
>>>>> Fax:    +49 2461 61-6656
>>>>> E-Mail: 
>>>>> 
>>>>> WWW:    http://www.fz-juelich.de/jsc/
>>>>>
>>>>> JSC is the coordinator of the
>>>>> John von Neumann Institute for Computing
>>>>> and member of the
>>>>> Gauss Centre for Supercomputing
>>>>> ***************************************************
>>>>>
>>>>> Forschungszentrum Jülich GmbH
>>>>> 52425 Jülich
>>>>>
>>>>> Sitz der Gesellschaft: Jülich
>>>>> Eingetragen im Handelsregister des Amtsgerichts Düren Nr. HR B 3498
>>>>> Vorsitzende des Aufsichtsrats: MinDirig'in Bärbel Brumme-Bothe
>>>>> Geschäftsführung: Prof. Dr. Achim Bachem (Vorsitzender),
>>>>> Dr. Ulrich Krafft (stellv. Vorsitzender), Prof. Dr.-Ing. Harald
>>>>> Bolt,
>>>>> Prof. Dr. Sebastian M. Schmidt
>>>>>
>>>>> ***************************************************
>>>>>
>>>>>
>>>>>           
>>>>>> -----Ursprüngliche Nachricht-----
>>>>>> Von: Szymon Trocha 
>>>>>> [mailto:]
>>>>>> Gesendet: Freitag, 9. Oktober 2009 15:26
>>>>>> An: 
>>>>>> 
>>>>>> Cc: Niederberger, Ralph
>>>>>> Betreff: Re: [perfsonar-user] Problems with Authentication within
>>>>>> perfsonar
>>>>>>
>>>>>> Niederberger, Ralph pisze:
>>>>>>             
>>>>>>> Dear all,
>>>>>>>
>>>>>>> Has someone had the time to look into my problem with
>>>>>>> authentication
>>>>>>> service?
>>>>>>>
>>>>>>> I reinstalled the AS and SQL-MA several times to be sure that I
>>>>>>> did not
>>>>>>> misconfigure something. The problem remains the same (see log
>>>>>>> below).
>>>>>>>
>>>>>>> Could the problem be related to the fact that my GIdP account is
>>>>>>> not
>>>>>>>               
>>>>>> setup
>>>>>>             
>>>>>>> correctly?
>>>>>>>               
>>>>>> Hi Ralph,
>>>>>>
>>>>>> The problem you experienced with GIDP should be already fixed. Can
>>>>>> I ask
>>>>>> you to repeat your tests and verify it?
>>>>>>
>>>>>> Best regards,
>>>>>> --
>>>>>> Szymon Trocha
>>>>>>
>>>>>> Poznan Supercomputing & Networing Center ::: NETWORK OPERATION
>>>>>> CENTER
>>>>>> Tel. (+48) 618582022
>>>>>> http://noc.man.poznan.pl  ::: http://noc.pionier.gov.pl
>>>>>>             
>>>> ....
>>>> --
>>>> Cándido Rodríguez Montes           E-mail: 
>>>> 
>>>> Middleware warrior                         Tel:+34 955 05 66 13
>>>> Red.ES/RedIRIS
>>>> Edificio CICA
>>>> Avenida Reina Mercedes, s/n
>>>> 41012 Sevilla
>>>> SPAIN
>>>>
>>>>
>>>>
>>>>         
>> --
>> Cándido Rodríguez Montes             E-mail: 
>> 
>> Middleware warrior                           Tel:+34 955 05 66 13
>> Red.ES/RedIRIS
>> Edificio CICA
>> Avenida Reina Mercedes, s/n
>> 41012 Sevilla
>> SPAIN
>>
>>
>>
>>