October 2005 - Ag-tech - mailman3.cels.anl.gov

Re: [AG-TECH] ANL bridge machine and port info?
by Derek Piper 31 Oct '05

31 Oct '05

Hi, How would I go about running the server on its own? The binary that comes with the AGConnector package complains about being run incorrectly but doesn't give any useful information. I'm having trouble finding a UMTP server that I can run on a central machine. I'm modifying the AGConnector python script to have this machine as the default, so people should be able to run it without configuring a new server. Derek Thomas D. Uram wrote: > Hi Derek: > > Comments inline... > > On 10/27/05 8:55 AM, Derek Piper wrote: > >> >> Hi Tom, >> >> I tried playing with AGConnector, does it have to go to just your >> server there? Is it possible to run a server on a local machine and >> have other clients connect to it? Like the local bridge, but simpler? > > > The default server is the one here at ANL (umtp.mcs.anl.gov) AGConnector > does allow you to specify which server to use, so yes: if you have a > UMTP server running, you can specify it in AGConnector and it will be > used instead. In fact, in the future I'd like to see umtp servers > proliferate > and be discoverable. > > I also > >> have a question about how it works too, in trying to test it on two >> machines that are on a LAN (and so have full visibility of each other >> wrt multicast) I didn't notice any difference - should I? .. > > > UMTP is a solution for people who have no multicast, and it actually > shuts down if it receives a packet from itself over multicast (see > the ietf UMTP draft). > > I'm trying > >> to test it so I know what I'm doing with it to help a remote site with >> their AG connection. Actually, I'm wanting it for helping someone at >> Argonne / University of Chicago combat the draconian firewalling :) >> >> Derek >> >> Thomas D. Uram wrote: >> >>> I'd recommend that you look at the AGConnector shared app. It does >>> everything over >>> a single, fixed port (8010) to a server here at ANL >>> (umtp.mcs.anl.gov) No port range >>> needed, and coverage for every venue, not just those that people >>> chose to bridge. >>> >>> Tom >>> >>> >>> On 10/26/05 12:36 PM, Julia Mullen wrote: >>> >>>> Hi - >>>> >>>> I'm trying to get the okay to open ports so that I can attend the Town >>>> Halls, and any >>>> other events on the ANL venue server, so I need some information re: >>>> the bridge server IP and ports. Is there a document, or easy way to >>>> get the list of bridged ANL venues, and the >>>> bridge IP address, as well as the range of ports for the bridge. . . >>>> >>>> yup, a continuation of the Security Office's questions. >>>> >>>> Thanks - >>>> >>>> Julie >>>> >>>> >>> >>> >> > > -- Derek Piper - dcpiper(a)indiana.edu - (812) 856 0111 IRI 323, School of Informatics Indiana University, Bloomington, Indiana

1 0

Multicast Testing
by Jon Rosenthal 30 Oct '05

30 Oct '05

All~ EVL wants to test our temporary multicast setup on Wednesday, November 2, at 11:00 am CST. We please ask that whoever can make it to show up in the NCSA Lobby around that time. I will stay for an hour or two. Thanks. Jonathan

1 0

AGTk 2.4 x86-64 FC3 RPMs released
by Douglas Kosovic 30 Oct '05

30 Oct '05

Hi, AGTk 2.4 RPMs for x86-64 Fedora Core 3 can now be found at: http://www.vislab.uq.edu.au/research/accessgrid/software/fedora/ Should also work for x86-64 FC3 derivatives such as RHEL 4.x and CentOS 4.x. Doug

1 0

AG Testing today (for visiting Academics)
by Matthew Rendell 30 Oct '05

30 Oct '05

Hi guys I believe that the testing session for today (31/10/05) has been cancelled We have some visiting academics coming in to check out our Access Grid at 1pm SA time (12:30pm Queensland time, 2pm Vic, NSW time) I was hoping if anyone is available, if they could jump in the AP lobby, just so we have someone to say hi and show the academics what an AG can do, that would be fantastic Thanks -- Matthew Rendell Technical Theatre Support - Access Grid Operator Theatre Support, Information Services Division Flinders University, Adelaide SA Phone: 08 8201 5728 matthew.rendell(a)flinders.edu.au

1 0

interoperation of AG Connector and unicast bridges
by Andrew Patrick 28 Oct '05

28 Oct '05

Is there an interoperability problem when people connect to a venue with the AG Connector and unicast bridges? I have 2 machines on 2 separate unicast-only networks. If both machines connect to a venue using AG Connector, they can see/hear each other fine. If one of the machines, however, connects via a unicast bridge, it is not able to see the machine that connected using the Connector. I would have thought that people coming in over bridges would get multicast to the UMTP server where it would be picked up for Connector users. I have tested this on two different venue servers, including the Argonne institutional venues where the unicast bridge and the UMTP server should be near to one another. -- Andrew Patrick, Ph.D. Senior Scientist Information Security Group, Institute for Information Technology National Research Council (NRC), Ottawa, Canada E-mail: Andrew.Patrick(a)nrc-cnrc.gc.ca WWW - NRC: http://iit-iti.nrc-cnrc.gc.ca WWW - Personal: http://www.andrewpatrick.ca Phone: (613) 991-3374 Fax: (613) 952-7151 Cell/SMS: (613) 277-9211

1 0

LAST CALL!! SC Desktop
by Julia Mullen 28 Oct '05

28 Oct '05

Greetings, SC DESKTOP REGISTRATION CLOSES THIS WEEKEND! WE ARE ACCEPTING ROOM NODE REGISTRATIONS! (Please contact julia.mullen(a)gmail.com directly for room node registrations). SC Desktop, the use of AG Technology to enable 'Virtual Attendance' is your bridge to the Technical Program of SC|05, linking you to Technical paper presentations, the Exhibitor Forum, Masterworks, Invited Speakers and SC Keynote by Bill Gates of Microsoft. For more information, please see: http://sc05.supercomputing.org/programs/sc_global_desktop.php We look forward to 'seeing' you at SC|05. Julie Mullen Chair, SC Global'05

1 0

RE: [AG-TECH] encryption protocols
by Andrew A Rowley 28 Oct '05

28 Oct '05

Hi, InSORS definitely supports at least the DES standard. To make this work, I would guess that if you are going to use the AGTk automatic distribution of the key, you will need to set the key manually in the Venue Management console. This will then have to use DES encryption to guarantee interoperability i.e. specify the key as DES/<key>. At the InSORS key prompt, just enter the <key> part. It is probably easier to just enter the key into the vic and rat encryption boxes manually (see http://www.agsc.ja.net/faqs.php#Q6) Andrew :) ============================================ Access Grid Support Centre, RSS Group, Manchester Computing, Kilburn Building, University of Manchester, Oxford Road, Manchester, M13 9PL, UK Tel: +44(0)161-275 0685 Email: Andrew.Rowley(a)manchester.ac.uk > -----Original Message----- > From: Julia Mullen [mailto:[email protected]] > Sent: 28 October 2005 14:02 > To: Andrew.Rowley(a)manchester.ac.uk > Cc: Thomas D. Uram; ag-tech(a)mcs.anl.gov > Subject: Re: [AG-TECH] encryption protocols > > Hi - > > I am not sure what protocol inSORS uses, but I do know that we can > encrypt mixed platform meetings - when an inSORS client attempts to > enter a venue where there are encrypted sites, you are asked for a > 'key' (this is when you enter via the taskbar tools, not the webpage, > I haven't used the web based connection method) - for inSORS, when you > submit the key it encrypts both audio and video at the same time. > > This is the only way that I have found for encrypting mixed inSORS/AG > meetings, and I did spend a good bit of time pursuing this. We have a > monthly encrypted mixed platform meeting and I was asked recently > about the protocols - thus the initial email. > > Thanks, > > Julie > > On 10/28/05, Andrew A Rowley <Andrew.Rowley(a)manchester.ac.uk> wrote: > > Hi, > > > > I am not sure if InSORS software supports Rijndael/AES though - a quick > test just now suggests that it doesn't... > > > > Andrew :) > > > > ============================================ > > Access Grid Support Centre, > > RSS Group, > > Manchester Computing, > > Kilburn Building, > > University of Manchester, > > Oxford Road, > > Manchester, > > M13 9PL, > > UK > > Tel: +44(0)161-275 0685 > > Email: Andrew.Rowley(a)manchester.ac.uk > > > > > -----Original Message----- > > > From: owner-ag-tech(a)mcs.anl.gov [mailto:[email protected]] On > > > Behalf Of Thomas D. Uram > > > Sent: 27 October 2005 16:38 > > > To: Andrew.Rowley(a)manchester.ac.uk > > > Cc: Julia Mullen; ag-tech(a)mcs.anl.gov > > > Subject: Re: [AG-TECH] encryption protocols > > > > > > The AG venue management software allows admins to specify the key to > be > > > used > > > for a venue. In the absence of > > > a user-specified key, for an encrypted venue, the venue server will > > > allocate a > > > key in the form 'Rijndael/key', and > > > so is relying on Rijndael/AES by default. > > > > > > Tom > > > > > > > > > On 10/27/05 4:51 AM, Andrew A Rowley wrote: > > > > Hi, > > > > > > > > The default RTP encryption is the DES standard. This is used by vic > and > > > rat if you do not enter any other standard (you enter a key as > > > <standard>/<key>, but if you just enter <key>, you will get DES). I > think > > > that some support has been added for AES (or rijindael) encryption, > but I > > > don't know if this works. > > > > > > > > Andrew :) > > > > > > > > ============================================ > > > > Access Grid Support Centre, > > > > RSS Group, > > > > Manchester Computing, > > > > Kilburn Building, > > > > University of Manchester, > > > > Oxford Road, > > > > Manchester, > > > > M13 9PL, > > > > UK > > > > Tel: +44(0)161-275 0685 > > > > Email: Andrew.Rowley(a)manchester.ac.uk > > > > > > > > > > > >>-----Original Message----- > > > >>From: owner-ag-tech(a)mcs.anl.gov [mailto:[email protected]] > On > > > >>Behalf Of Julia Mullen > > > >>Sent: 26 October 2005 17:36 > > > >>To: ag-tech(a)mcs.anl.gov > > > >>Subject: [AG-TECH] encryption protocols > > > >> > > > >>Hi - > > > >> > > > >>The security folks here at Lincoln are wondering what protocols we > use > > > >>for encryption - > > > >>in those instances when we encrypt audio and video. Can anyone tell > > > >>me - or point me > > > >>to the appropriate document? > > > >> > > > >>Many thanks, > > > >> > > > >> Julie > > > >> > > > > > > > > > > > > > > > > > > >

1 0

Re: [AG-TECH] encryption protocols
by Julia Mullen 28 Oct '05

28 Oct '05

Hi - I am not sure what protocol inSORS uses, but I do know that we can encrypt mixed platform meetings - when an inSORS client attempts to enter a venue where there are encrypted sites, you are asked for a 'key' (this is when you enter via the taskbar tools, not the webpage, I haven't used the web based connection method) - for inSORS, when you submit the key it encrypts both audio and video at the same time. This is the only way that I have found for encrypting mixed inSORS/AG meetings, and I did spend a good bit of time pursuing this. We have a monthly encrypted mixed platform meeting and I was asked recently about the protocols - thus the initial email. Thanks, Julie On 10/28/05, Andrew A Rowley <Andrew.Rowley(a)manchester.ac.uk> wrote: > Hi, > > I am not sure if InSORS software supports Rijndael/AES though - a quick test just now suggests that it doesn't... > > Andrew :) > > ============================================ > Access Grid Support Centre, > RSS Group, > Manchester Computing, > Kilburn Building, > University of Manchester, > Oxford Road, > Manchester, > M13 9PL, > UK > Tel: +44(0)161-275 0685 > Email: Andrew.Rowley(a)manchester.ac.uk > > > -----Original Message----- > > From: owner-ag-tech(a)mcs.anl.gov [mailto:[email protected]] On > > Behalf Of Thomas D. Uram > > Sent: 27 October 2005 16:38 > > To: Andrew.Rowley(a)manchester.ac.uk > > Cc: Julia Mullen; ag-tech(a)mcs.anl.gov > > Subject: Re: [AG-TECH] encryption protocols > > > > The AG venue management software allows admins to specify the key to be > > used > > for a venue. In the absence of > > a user-specified key, for an encrypted venue, the venue server will > > allocate a > > key in the form 'Rijndael/key', and > > so is relying on Rijndael/AES by default. > > > > Tom > > > > > > On 10/27/05 4:51 AM, Andrew A Rowley wrote: > > > Hi, > > > > > > The default RTP encryption is the DES standard. This is used by vic and > > rat if you do not enter any other standard (you enter a key as > > <standard>/<key>, but if you just enter <key>, you will get DES). I think > > that some support has been added for AES (or rijindael) encryption, but I > > don't know if this works. > > > > > > Andrew :) > > > > > > ============================================ > > > Access Grid Support Centre, > > > RSS Group, > > > Manchester Computing, > > > Kilburn Building, > > > University of Manchester, > > > Oxford Road, > > > Manchester, > > > M13 9PL, > > > UK > > > Tel: +44(0)161-275 0685 > > > Email: Andrew.Rowley(a)manchester.ac.uk > > > > > > > > >>-----Original Message----- > > >>From: owner-ag-tech(a)mcs.anl.gov [mailto:[email protected]] On > > >>Behalf Of Julia Mullen > > >>Sent: 26 October 2005 17:36 > > >>To: ag-tech(a)mcs.anl.gov > > >>Subject: [AG-TECH] encryption protocols > > >> > > >>Hi - > > >> > > >>The security folks here at Lincoln are wondering what protocols we use > > >>for encryption - > > >>in those instances when we encrypt audio and video. Can anyone tell > > >>me - or point me > > >>to the appropriate document? > > >> > > >>Many thanks, > > >> > > >> Julie > > >> > > > > > > > > > > > > >

1 0

RE: [AG-TECH] encryption protocols
by Andrew A Rowley 28 Oct '05

28 Oct '05

Hi, I am not sure if InSORS software supports Rijndael/AES though - a quick test just now suggests that it doesn't... Andrew :) ============================================ Access Grid Support Centre, RSS Group, Manchester Computing, Kilburn Building, University of Manchester, Oxford Road, Manchester, M13 9PL, UK Tel: +44(0)161-275 0685 Email: Andrew.Rowley(a)manchester.ac.uk > -----Original Message----- > From: owner-ag-tech(a)mcs.anl.gov [mailto:[email protected]] On > Behalf Of Thomas D. Uram > Sent: 27 October 2005 16:38 > To: Andrew.Rowley(a)manchester.ac.uk > Cc: Julia Mullen; ag-tech(a)mcs.anl.gov > Subject: Re: [AG-TECH] encryption protocols > > The AG venue management software allows admins to specify the key to be > used > for a venue. In the absence of > a user-specified key, for an encrypted venue, the venue server will > allocate a > key in the form 'Rijndael/key', and > so is relying on Rijndael/AES by default. > > Tom > > > On 10/27/05 4:51 AM, Andrew A Rowley wrote: > > Hi, > > > > The default RTP encryption is the DES standard. This is used by vic and > rat if you do not enter any other standard (you enter a key as > <standard>/<key>, but if you just enter <key>, you will get DES). I think > that some support has been added for AES (or rijindael) encryption, but I > don't know if this works. > > > > Andrew :) > > > > ============================================ > > Access Grid Support Centre, > > RSS Group, > > Manchester Computing, > > Kilburn Building, > > University of Manchester, > > Oxford Road, > > Manchester, > > M13 9PL, > > UK > > Tel: +44(0)161-275 0685 > > Email: Andrew.Rowley(a)manchester.ac.uk > > > > > >>-----Original Message----- > >>From: owner-ag-tech(a)mcs.anl.gov [mailto:[email protected]] On > >>Behalf Of Julia Mullen > >>Sent: 26 October 2005 17:36 > >>To: ag-tech(a)mcs.anl.gov > >>Subject: [AG-TECH] encryption protocols > >> > >>Hi - > >> > >>The security folks here at Lincoln are wondering what protocols we use > >>for encryption - > >>in those instances when we encrypt audio and video. Can anyone tell > >>me - or point me > >>to the appropriate document? > >> > >>Many thanks, > >> > >> Julie > >> > > > > > > >

1 0

RE: [AG-TECH] AG Connector
by NamGon Kim 27 Oct '05

27 Oct '05

Dear Zsolt, Sorry for late response. I think you should check your multicast connection. You can use multicast beacon. http://dast.nlanr.net/Projects/Beacon/ AG Connector shuts down if your site has multicast connection with UMTP Server. This might be the reason of dropping. And for firewall, in case of using iptables What you need to do is allowing outgoing traffic from your site and allowing incoming traffics which comes as a response of the outgoing traffic from your site. In /etc/sysconfig/iptables :OUTPUT ACCEPT [0:0] // default policy of outgoing traffic, ACCEPT -A INPUT -p udp --dport 1025: -m state --state ESTABLISHED,RELATED -j ACCEPT //allow incoming UDP traffics which comes as a response for the outgoing traffic from your site Or You can open udp port 8010(default AG Connector port) for both incoming and outgoing. :OUTPUT ACCEPT [0:0] // default policy of outgoing traffic, ACCEPT -A INPUT -p udp -dport 8010 -j ACCEPT AG Connector only uses one UDP port, 8010. If you need more help, let me know. Thanks for using AG Connector. Namgon Kim Netmedia Lab, GIST, KOREA http://netmedia.gist.ac.kr <http://netmedia.gist.ac.kr/> _____ From: Nagykaldi, Zsolt F. (HSC) [mailto:[email protected]] Sent: Friday, October 28, 2005 8:35 AM To: ag-tech(a)mcs.anl.gov Subject: [AG-TECH] AG Connector Our department is new to the AG world and we are in the process of setting up a room-based node to support our research infrastructure. Our network is not multicast enabled, so we have been trying to make the AG Connector work for weeks now and just about to give up. The documentation of the connector is very sub-optimal, to put it politely. In AG connector -driven multicast, if we manage to keep the connection to the server, which is dropped often, the other parties, who HAVE multicast enabled on their networks can not see or hear us at all (we can hear and see them). In unicast, without the connector, everything works both ways, but we can not see any of the parties (no incoming video), although we can hear them. I know that certain UDP ports must be open, but it must be more complicated than that, since *rarely* the whole system seems to be working well. The connector seems to work unreliably in many situations and outcome is often unpredictable. If you have suggestions to both scenarios (multicast with connector and unicast without), PLEASE, help us. Thanks! Zsolt _ _ _ Zsolt Nagykaldi, PhD Research Associate, Clinical IT Specialist University Of Oklahoma Health Sciences Center Department Of Family And Preventive Medicine Oklahoma Center For Family Medicine Research 900 NE 10th Street Oklahoma City, OK 73104 Phone: (405) 271-8000 Ext.:1-32212 Fax: (405) 271-1682

1 0