January 2004 - Ag-tech - mailman3.cels.anl.gov

Success Using Other CA's?
by Todd Zimmerman 23 Jan '04

23 Jan '04

Hi all, Has anyone had any success importing other CA's and using non-ANL certs for authentication?? I'm having a few issues with the service/node managers working properly while using GridCanada issued certificates. Any advice or hints would be appreciated. Thanks, Todd. -- Collaboration & Visualization Technician WestGrid - www.westgrid.ca Ph. 604.268.6979 Todd Zimmerman - toddz(a)sfu.ca

1 0

Re: [AG-TECH] That freezin' rat
by Robert Olson 23 Jan '04

23 Jan '04

At 12:36 PM 1/23/2004, Randy Groves wrote: >This is the first I've heard of a specific port (47000) in respect to the >operation of the RAT. Am I to understand that this is a port local to the >host upon which RAT is running? Yup, rat uses it to communicate between its components (UI, media engine, and controlling process). >If so, how would a firewall enter into the picture? Unless you are >talking about a on-host firewall? On-host. If you've got MS internet connection firewall turned on, it blocks the on-host multicast and causes rat to not start up. Two solutions: either turn ICF off, or configure it to allow udp 47000 through. --bob

1 0

Re: [AG-TECH] That freezin' rat
by Randy Groves 23 Jan '04

23 Jan '04

This is the first I've heard of a specific port (47000) in respect to the operation of the RAT. Am I to understand that this is a port local to the host upon which RAT is running? If so, how would a firewall enter into the picture? Unless you are talking about a on-host firewall? -randy At 01:23 PM 1/22/2004, Colin Perkins wrote: >--> "Don Morton" <Don.Morton(a)umontana.edu> writes: > > Before I go off into all sorts of wrong directions, > > I thought I'd ask for advice here..... > > > > I have a RedHat 7.3 setup, connected to multicast, > > and vic works fine, both transmitting and receiving. > > On rat, however, it just hangs when I try to launch > > it, as in > > > > rat 233.1.171.179/59700 (or any address I give it, even > > if it's a unicast to a QuickBridge) > > > > This happens with a rat from AG1, and the rat from the most > > recent AG2. > > > > I know someone else ran into this when she was on a bad network, > > but that's not the case here. > > > > Is this something that others see frequently and might have quick > > workarounds for? > >Rat uses host local multicast as an inter-process communication mechanism. >If rat doesn't start it's most likely because this isn't getting through: >either a firewall issue (udp port 47000) or a multicast routing issues. > >-- >Colin Perkins >http://csperkins.org/

1 0

9amm quick a/v test
by Steve Slocombe 23 Jan '04

23 Jan '04

If anyone could drop in the "test room" around 9am this morning for a brief a/v test, I would appreciate it. Thanks Steve Slocombe NWU MEAS TECH L159

1 0

RE: [AG-TECH] AG2.1.2 Certificate Manager with python2.3
by Robert Olson 22 Jan '04

22 Jan '04

> Thanks Bob, that seems to have fixed it; I managed to send a certificate > request from a machine using python2.3 without seg faulting. Very cool. > It also seems to have fixed the problem of the VenueManagement tool > often (mostly) crashing while modifying a Venue, unless RH7.3 was being > used as OS. I've made a few changes to our AG2 venue without any > problems. > > > FYI, (and in answer to your earlier email), this distribution is > Slackware 9.1, which uses openssl-0.9.7c-i486-2 and python-2.3.1-i486-1. > > Its interesting how the python version (2.2 vs 2.3) triggered the > problem without being involved in the fix. The crash was occurring when a return code wasn't being checked from one of the SSL calls, and a function call thru a null pointer was attempted. I'm guessing there was a difference in memory layout that made it fatal on the one, or something of that ilk. Glad it's working for you. --bob

1 0

RE: [AG-TECH] AG2.1.2 Certificate Manager with python2.3
by Christoph Willing 22 Jan '04

22 Jan '04

On Fri, 2004-01-23 at 06:56, Robert Olson wrote: > At 05:27 PM 1/21/2004, Christoph Willing wrote: > >On a system with python2.3, we have openssl-0.9.7c and Cert. Manager > >does a seg fault trying to do: > > xext = crypto.X509Extension(name, critical, value) > >at line 604 of CertificateRepository.py. > > > >If I additionally install python2.2 in this second system, then the > >Certificate Manager runs OK again. This makes me suspect the python > >version. > > I'm not sure about the dependence on the python version, but I could see > why the crash was happening. It is now fixed in CVS: > > http://fl-cvs.mcs.anl.gov/viewcvs/viewcvs.cgi/pyOpenSSL/src/crypto/x509ext.… > > http://snipurl.com/402h > > --bob Thanks Bob, that seems to have fixed it; I managed to send a certificate request from a machine using python2.3 without seg faulting. It also seems to have fixed the problem of the VenueManagement tool often (mostly) crashing while modifying a Venue, unless RH7.3 was being used as OS. I've made a few changes to our AG2 venue without any problems. FYI, (and in answer to your earlier email), this distribution is Slackware 9.1, which uses openssl-0.9.7c-i486-2 and python-2.3.1-i486-1. Its interesting how the python version (2.2 vs 2.3) triggered the problem without being involved in the fix. Thanks again, chris -- Chris Willing Telephone (61-2) 9351 3914 Sydney Vislab, F09 Fax (61-2) 9351 5955 University of Sydney NSW 2006 Australia http://www.vislab.usyd.edu.au

1 0

Re: [AG-TECH] That freezin' rat
by Colin Perkins 22 Jan '04

22 Jan '04

--> "Don Morton" <Don.Morton(a)umontana.edu> writes: > Before I go off into all sorts of wrong directions, > I thought I'd ask for advice here..... > > I have a RedHat 7.3 setup, connected to multicast, > and vic works fine, both transmitting and receiving. > On rat, however, it just hangs when I try to launch > it, as in > > rat 233.1.171.179/59700 (or any address I give it, even > if it's a unicast to a QuickBridge) > > This happens with a rat from AG1, and the rat from the most > recent AG2. > > I know someone else ran into this when she was on a bad network, > but that's not the case here. > > Is this something that others see frequently and might have quick > workarounds for? Rat uses host local multicast as an inter-process communication mechanism. If rat doesn't start it's most likely because this isn't getting through: either a firewall issue (udp port 47000) or a multicast routing issues. -- Colin Perkins http://csperkins.org/

1 0

Re: [AG-TECH] Multicast, PIG, VTC
by Tom Coffin 22 Jan '04

22 Jan '04

where are you located? have you seen these? http://www.accessgrid.org/agdp/ http://www.accessgrid.org/agdp/howto/quickbridge/1.2.1/html/index.html ___________________________________________________ At 01:34 PM 1/22/2004 -0700, Ronald Crummett wrote: >Thank you all so much for your help thus far in helping me set up my laptop >node. Answers to some questions, however, open up doors to more. > >Thanks to the Internet2 Detective, I have discovered that my network >connection is not multicast, which of course answers all my questions of why >I haven't been able to see anyone or talk to anyone when I connect to >AccessGrid. Well, then, my next questions are: > >-Is there some sort of workaround where I can connect to AccessGrid on a >unicast connection? Everything I have seen about VTC leads me to believe >that it is a possible solution, but that a modified laptop-compliant VTC >must be used. >-Where can I get this laptop-compliant VTC? >-Once I get it, what do I do with it (installation, etc.)? > >If I am going down the wrong track on all of this please let me know. I >just want to get this thing working like I've heard it can. Thanks so much! > >-Ron Crummett > >_________________________________________________________________ >Scope out the new MSN Plus Internet Software ï¿½ optimizes dial-up to the max! > http://join.msn.com/?pgmarket=en-us&page=byoa/plus&ST=1 > >

1 0

Multicast, PIG, VTC
by Ronald Crummett 22 Jan '04

22 Jan '04

Thank you all so much for your help thus far in helping me set up my laptop node. Answers to some questions, however, open up doors to more. Thanks to the Internet2 Detective, I have discovered that my network connection is not multicast, which of course answers all my questions of why I haven't been able to see anyone or talk to anyone when I connect to AccessGrid. Well, then, my next questions are: -Is there some sort of workaround where I can connect to AccessGrid on a unicast connection? Everything I have seen about VTC leads me to believe that it is a possible solution, but that a modified laptop-compliant VTC must be used. -Where can I get this laptop-compliant VTC? -Once I get it, what do I do with it (installation, etc.)? If I am going down the wrong track on all of this please let me know. I just want to get this thing working like I've heard it can. Thanks so much! -Ron Crummett _________________________________________________________________ Scope out the new MSN Plus Internet Software � optimizes dial-up to the max! http://join.msn.com/?pgmarket=en-us&page=byoa/plus&ST=1

1 0

RE: [AG-TECH] AG2.1.2 Certificate Manager with python2.3
by Robert Olson 22 Jan '04

22 Jan '04

At 05:27 PM 1/21/2004, Christoph Willing wrote: >On a system with python2.3, we have openssl-0.9.7c and Cert. Manager >does a seg fault trying to do: > xext = crypto.X509Extension(name, critical, value) >at line 604 of CertificateRepository.py. > >If I additionally install python2.2 in this second system, then the >Certificate Manager runs OK again. This makes me suspect the python >version. I'm not sure about the dependence on the python version, but I could see why the crash was happening. It is now fixed in CVS: http://fl-cvs.mcs.anl.gov/viewcvs/viewcvs.cgi/pyOpenSSL/src/crypto/x509ext.… http://snipurl.com/402h --bob

1 0