Bug 5988 - Authentication failures when monitoring RLS with MDS execution aggregator
: Authentication failures when monitoring RLS with MDS execution aggregator
Status: RESOLVED FIXED
: Replica Location
RLS
: development
: All All
: P3 normal
: ---
Assigned To:
:
:
:
:
  Show dependency treegraph
 
Reported: 2008-04-07 15:35 by
Modified: 2008-04-07 17:18 (History)


Attachments


Note

You need to log in before you can comment on or make changes to this bug.


Description From 2008-04-07 15:35:48
Some missing documentation identified by user trying to configure the MDS
execution aggregator that is part of the RLS.

---------------------------

    Silvu,

    It looks like the script was registered correctly with MDS4 Ė as far as I
can tell. The problem is that the RLS is running with authentication and the
script (invoked by MDS) does not have a security context. I believe you can fix
this one of two ways:

    1.       Set the env for X509_USER_CERT and X509_USER_KEY to the
containerís cert/key
    2.       Modify the script such that it sets them

    Then, make sure the container certís DN is in the gridmap file on the
machine that the RLS is running on.

    I think that would resolve the issue.

    Rob


    From: Silviu Popescu [mailto:xxxxxxxxxx]
    Sent: Thursday, April 03, 2008 5:27 AM
    To: Robert Schuler
    Cc: GlobusUserList
    Subject: RE: [gt-user] register gridftp and rls to MDS4


    Robert Schuler <schuler@isi.edu> wrote:
    The RLS provides a script for use with MDS:
   
http://www.globus.org/toolkit/docs/4.0/data/rls/RLS_Build_Install.html#a-rls-Build_Install-mds4config

    And then you can see instructions from MDS on how to use such scripts:
   
http://www.globus.org/toolkit/docs/4.0/info/index/WS_MDS_Index_HOWTO_Execution_Aggregator.html


    Hi,
    I've tried to register rls to MDS4.
    When I query the index I receive the following error:
    user@c14[/usr/local/globus4.0.6]$ wsrf-query -s
https://xxxxxxxxxxxxx/wsrf/services/DefaultIndexService
"//*[local-name()='rlsStats']"
    <rlsStats xmlns="">
      <site>rls://xxxxxxxxx</site>
      <uptime>unknown</uptime>
      <error>connect(rls://xxxxxxxxx): globus_rls_client: Globus I/O error:
globus_xio_gsi: gss_init_sec_context failed.
    </error>
    </rlsStats>

    user@c14[/usr/local/globus4.0.6]$ mds-servicegroup-add -s
https://xxxxxxxxxxxx:8443/wsrf/services/DefaultIndexService
etc/globus_wsrf_mds_aggregator/rls-aggregator.xml  &
    [2] 24257
    Processing configuration file...
    Processed 1 registration entries
    Successfully registered rls://xxxxxxxxx to servicegroup at
https://xxxxxxxxxxx:8443/wsrf/services/DefaultIndexService

    Here is the registration file:
    user@c14[/usr/local/globus4.0.6]$ cat
etc/globus_wsrf_mds_aggregator/rls-aggregator.xml
    <?xml version="1.0" encoding="UTF-8" ?>
    <ServiceGroupRegistrations
      xmlns="http://mds.globus.org/servicegroup/client"
      xmlns:sgc="http://mds.globus.org/servicegroup/client"
      xmlns:xsd="http://www.w3.org/2001/XMLSchema"
      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
      xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/03/addressing"
      xmlns:agg="http://mds.globus.org/aggregator/types">

    <defaultServiceGroupEPR>
      
<wsa:Address>https://xxxxxxxxxxxxxx:8443/wsrf/services/DefaultIndexService</wsa:Address>
    </defaultServiceGroupEPR>

    <defaultRegistrantEPR>
       <wsa:Address>rls://xxxxxxxx</wsa:Address>
    </defaultRegistrantEPR>

    <ServiceGroupRegistrationParameters
        xmlns="http://mds.globus.org/servicegroup/client" >

      <!-- Renew this registration every 600 seconds (10 minutes) -->
      <RefreshIntervalSecs>600</RefreshIntervalSecs>
      <Content xsi:type="agg:AggregatorContent"
               xmlns:agg="http://mds.globus.org/aggregator/types">
        <agg:AggregatorConfig xsi:type="agg:AggregatorConfig">
          <agg:ExecutionPollType>

            <!-- Run our script every 300,000 milliseconds (5 minutes) -->
            <agg:PollIntervalMillis>300000</agg:PollIntervalMillis>

            <agg:ProbeName>rls-agg</agg:ProbeName>

          </agg:ExecutionPollType>
        </agg:AggregatorConfig>
        <agg:AggregatorData/>
      </Content>
    </ServiceGroupRegistrationParameters>

    </ServiceGroupRegistrations>

    I'm not sure that the defaultRegistrantEPR should be set this way but I
don't know how to set it.
    Please help.

    Regards,



    Silviu Popescu
------- Comment #1 From 2008-04-07 17:18:38 -------
Fixed in the 4.0 and 4.2-drafts branches.