perfSONAR User Q&A and Other Discussion

["Niederberger, Ralph" <>]

Dear Candido and Nina,

haven't got any answer yet.

Does this mean I should cancel usage of "authentication services" and use
perfsonar tools without any security?

This would implicate, that access to our perfsonar MA will be possible via a
WWW interface only. 
I would have to control access via Web-Server access tools.

Any comments?

Best regards

Ralph  

-----Ursprüngliche Nachricht-----
Von: Niederberger, Ralph 
[mailto:]
 
Gesendet: Freitag, 26. Februar 2010 13:59
An: 
'';
 'Candido Rodriguez Montes'
Cc: 
'';
 'Szymon Trocha'
Betreff: AW: [perfsonar-user] perfsonarUIv0.15b: Log messages don't help
finding error

Dear Candido and Nina,

I am just in the process of designing enhancements of DEISA project's
network monitoring.
Always having  promoted the idea of a standardized multi domain network
monitoring as invented (or provided) by perfsonar tools, I have to realize
that the current structure of this tool kit seems to be far away from
production services. 

It is now the second time, that I am faced with a not running MDS service
(maybe it never has been one, instead only a project test service), which
leads to the problem, that I am not able to proceed with my project's goals.

I have setup my perfsonar services with authentication and because of
misorganization (mismanagement) cannot use them.
Since I seem to be the only one, who is using (let me say, tries to use)
this MDS services (authentication) the question arises, if it makes sense to
use perfsonar authentication services at all.
     
If it is a project service only, you should not promote it and as a
consequence I should not use it.
If it is a production service, it has to be available all the time. And this
means a running server can only be shutdown, when a new server with the same
services is available. And this should be 24 hours/7 days a week. 
Letting the users know, after having been asked for this, that the service
has migrated to a new location two weeks ago and that unfortunately the
service is not the same, not providing the full software package, is not the
way to go.

Best regards

Ralph
 

-----Ursprüngliche Nachricht-----
Von: Nina Jeliazkova 
[mailto:]
 
Gesendet: Freitag, 26. Februar 2010 12:16
An: Candido Rodriguez Montes
Cc: 
;
 Niederberger, Ralph;
'';
 Szymon Trocha
Betreff: Re: [perfsonar-user] perfsonarUIv0.15b: Log messages don't help
finding error

Candido Rodriguez Montes wrote:
> Hi Nina,
>
> On Feb 26, 2010, at 11:50 AM, Nina Jeliazkova wrote:
>
>>>> Candido, are there some new changes in edugain behaviour we should be
>>>> aware of?
>>>
>>> Yes. The server mds.rediris.es is no more available, as it was a pilot
>>> deployed during GEANT2 and that project is over. The new and official
>>> MDS is https://mds.edugain.org/ .
>>>
>>> I noticed that problem two weeks ago but when I use the new MDS I
>>> cannot login using GIdP, as its metadata are not ok. I sent a message
>>> to SA2-GEANT3 and some people in Dante for fixing that problem but I'm
>>> still waiting for that...
>>>
>> Do I understand right,  even if we change psUI configuration,
>> authentication will still not work ?
>
> Right. However, you should change the psUI configuration with the new
> URL https://mds.edugain.org/.
Yes, I will.  The new Java 1.6 jnlp security is rather weird, as it
needs the jnlp to be packaged inside a signed jar and to be the same as
the jnlp on the web site ... otherwise the user gets a security error.
That means it's not only editing jnlp file on the server, as before, but
recompiling the whole package with the new jnlp with MDS URL changed
only :(
>
>>> Nina, please, in the meantime change the default URL to the new one.
>> OK.
>>
>> For web start this is a configuration in perfsonar.jnlp file    
>> <argument>-mhttps://mds.rediris.es:8443</argument>
>> and a command line option -m https://mds.rediris.es:8443  if run
>> standalone
>>
>> Meanwhile I've tried changing the MDS URL via the Options menu, but
>> GEANT GIdP doesn't appear indeed.  Any hints how should we proceed?
>
> Nina, I don't know the answer. Someone in charge of GIdP has to update
> the metadata in the MDS. I've sent an email to some people in Dante
> but I haven't got an answer :(
> As far as I know, SA2 are not managing GIdP, are they?
Hopefully Szymon knows better.

Thanks,
Nina
>
> Regards
>
>>
>> Best regards,
>> Nina
>>>
>>> Regards
>
> --
> Cándido Rodríguez Montes E-mail: 
> 
> <mailto:>
> Middleware warrior Tel:+34 955 05 66 13
> Red.ES/RedIRIS
> Edificio CICA
> Avenida Reina Mercedes, s/n
> 41012 Sevilla
> SPAIN
>
>
>
>

Attachment: smime.p7s
Description: S/MIME cryptographic signature