March 2006 - Ag-tech - mailman3.cels.anl.gov

Re: [AG-TECH] Gentoo build
by Colin Macdonald 31 Mar '06

31 Mar '06

On Fri, 31 Mar 2006, Jeremy Mann wrote: > !!! Then environment variable GPT_LOCATION must be set > !!! If you need support, post the topmost build error, NOT this status > message. > > How can I fix this error? http://bugzilla.mcs.anl.gov/accessgrid/show_bug.cgi?id=1360 -- Colin Macdonald Graduate Student, Dept. of Mathematics, Simon Fraser University mail: cbm[at]sfu[dot]ca, phone: 604.268.6689 (office)

1 0

Re: [AG-TECH] Gentoo build
by Colin Macdonald 31 Mar '06

31 Mar '06

On Fri, 31 Mar 2006, Niall Moran wrote: > Then I got more build errors about insecure binaries. I got around these > by adding -static directives to the globus-data-management-client so http://bugzilla.mcs.anl.gov/accessgrid/show_bug.cgi?id=1431 See the attached (to the bug) ebuild for how I fixed this problem. I've later learned there are better ways to do this (using a tool in paxutils (emerge paxutils)), but I haven't updated the ebuild yet. Cheers, Colin -- Colin Macdonald Graduate Student, Dept. of Mathematics, Simon Fraser University mail: cbm[at]sfu[dot]ca, phone: 604.268.6689 (office)

1 0

Re: [AG-TECH] Gentoo build
by Niall Moran 31 Mar '06

31 Mar '06

Hi, The gentoo build seems to be broken alright. I managed to get around this problem with export GPT_LOCATION=/usr/lib/gpt-3.1 Then I got more build errors about insecure binaries. I got around these by adding -static directives to the globus-data-management-client so that the gpt build lines looked like ${GPT_LOCATION}/sbin/gpt-build -verbose -static ${WORKDIR}/${A} gcc32pthr ${GPT_LOCATION}/sbin/gpt-build -verbose -static ${WORKDIR}/${A} gcc32dbgpthr This involved placing the updated md5sum in the manitfest etc... Then this installs. But had to manually build these again without the static flags to get the required libraries in place. After this the build should work fine. I have this in use as a venue server where everything works fine. However on a client when trying to create a proxy cert from anything but an anonymous cert I get a seg fault. Everything else works fine however. Hope this helps. Its been a while since I did this so details are a bit flaky. I can probably dig up some more details instructions if you need them. Cheers, Niall. -- -- | Niall Moran | Systems Administrator | Irish Centre for High-End Computing \niall.moran(a)ichec.ie -------------------------- On Fri, Mar 31, 2006 at 09:51:11AM -0600, Jeremy Mann wrote: > I'm trying to build the AG 2.4 release on a Gentoo machine and I get the > following error: > > >>> Install globus-data-management-client-2.4.3-r3 into > /var/tmp/portage/globus-data-management-client-2.4.3-r3/image/ > category globus-client > > !!! ERROR: globus-client/globus-data-management-client-2.4.3-r3 failed. > !!! Function src_install, Line 35, Exitcode 0 > !!! Then environment variable GPT_LOCATION must be set > !!! If you need support, post the topmost build error, NOT this status > message. > > How can I fix this error? > > > -- > Jeremy Mann > jeremy(a)biochem.uthscsa.edu > > University of Texas Health Science Center > Bioinformatics Core Facility > http://www.bioinformatics.uthscsa.edu > Phone: (210) 567-2672 >

1 0

RE: [AG-TECH] vic and rat encryption
by Nagykaldi, Zsolt F. (HSC) 31 Mar '06

31 Mar '06

Anybody has experience with configuring PIX firewalls (v6.x) to route specific outside IPs to a NAT-ed 10.x.x.x inside IP address? I need this to let the AG Client communicate with trusted unicast bridge servers from behind firewalls. I had success allowing any incoming from specific IPs to the entire LAN to get around the port problems in vic and rat for 192.168.x.x (class C) addresses, but not for 10.x.x.x (class A) local IPs. Any useful suggestion would be highly appreciated! Zsolt _ _ _ Zsolt Nagykaldi, PhD Research Associate, Clinical IT Specialist University Of Oklahoma Health Sciences Center Department Of Family And Preventive Medicine Oklahoma Center For Family Medicine Research 900 NE 10th Street Oklahoma City, OK 73104 Phone: (405) 271-8000 Ext.:1-32212 Fax: (405) 271-1682

1 0

Gentoo build
by Jeremy Mann 31 Mar '06

31 Mar '06

I'm trying to build the AG 2.4 release on a Gentoo machine and I get the following error: >>> Install globus-data-management-client-2.4.3-r3 into /var/tmp/portage/globus-data-management-client-2.4.3-r3/image/ category globus-client !!! ERROR: globus-client/globus-data-management-client-2.4.3-r3 failed. !!! Function src_install, Line 35, Exitcode 0 !!! Then environment variable GPT_LOCATION must be set !!! If you need support, post the topmost build error, NOT this status message. How can I fix this error? -- Jeremy Mann jeremy(a)biochem.uthscsa.edu University of Texas Health Science Center Bioinformatics Core Facility http://www.bioinformatics.uthscsa.edu Phone: (210) 567-2672

1 0

AG Toolkit 2.4 fails to start
by Nagykaldi, Zsolt F. (HSC) 30 Mar '06

30 Mar '06

I installed an AG Toolkit v2.4 on an XP SP1 machine according to specs and when I try to start the venue client, it will abort. In debug mode it says "Initialization Error: unpack list of wrong size" right after it started the Certificate Request Wizard. Anybody knows what the heck this is? I am lost and would need a solution real quick! Thanks! Zsolt _ _ _ Zsolt Nagykaldi, PhD Research Associate, Clinical IT Specialist University Of Oklahoma Health Sciences Center Department Of Family And Preventive Medicine Oklahoma Center For Family Medicine Research 900 NE 10th Street Oklahoma City, OK 73104 Phone: (405) 271-8000 Ext.:1-32212 Fax: (405) 271-1682 ________________________________ From: owner-ag-tech(a)mcs.anl.gov on behalf of Derek Piper Sent: Thu 3/30/2006 7:26 AM To: Piers O'Hanlon Cc: jeremy(a)biochem.uthscsa.edu; ag-tech(a)mcs.anl.gov Subject: Re: [AG-TECH] vic and rat encryption Heheh.. yea.. quite right. Ooops. I hate that word for how often I misspell it. I really had to make sure I got it right in the source code for AGVCR. For emails, obviously I'm still having problems. :) Derek Piers O'Hanlon wrote: > Hi, > > Just a minor correction - just a typo - to save frustration: > One needs use "Rijndael/" instead of "Rjindael/" > > Piers. > > On 3/29/06, Derek Piper <dcpiper(a)indiana.edu> wrote: > >> You may be better off using Rjindael encryption, which is normally used >>on AG Venues when setting the 'encryption' option in the venue server >>config. >> A Rjindael key is passed to VIC and RAT as 'Rjindael/passphrase' where >>passphrase should be something random and unguessable, and distributed >>to those needing the key to enter manually. There's a program for Debian >>called 'pwgen' that I've used to generate a passphrase before. For >>manually entering the key, you would probably just disable the venue >>encryption and manually key it in. For a DES key, just use a passphrase >>that doesn't start with a string 'Rjindael/'. >> Of course you can also use certificates to secure a venue too, so not >>just anyone can enter and obtain the encryption key. >> >> Derek >> >>Jeremy Mann wrote: >> >>>We would like to demonstrate encryption in April to some fellow >>>colleagues. I set up a test room on our venue server with encryption. >>>Encryption works fine, but whoever enters the venue gets the encryption >>>key. I would like to "lock" down the room to whoever I give the key to, >>>not whoever enters the room. Can this be done? >>> >>>Also, I know I can manually enter a key into vic and rat. Is there a >>>program that I can run to get DES key? Or can I simply use a passphrase >>>instead? >>> >>>Thanks! >>> >>> >> >>-- >>Derek Piper - dcpiper(a)indiana.edu - (812) 856 0111 >>IRI 323, School of Informatics >>Indiana University, Bloomington, Indiana >> >> > > -- Derek Piper - dcpiper(a)indiana.edu - (812) 856 0111 IRI 323, School of Informatics Indiana University, Bloomington, Indiana

1 0

Re: [AG-TECH] vic and rat encryption
by Ivan R. Judson 30 Mar '06

30 Mar '06

no kidding! :-) --Ivan On Mar 30, 2006, at 8:38 AM, Colin Perkins wrote: > We might want to hack the code to make "AES" an accepted spelling > of Rijndael? :-) > Colin > > > On 30 Mar 2006, at 14:26, Derek Piper wrote: >> Heheh.. yea.. quite right. Ooops. I hate that word for how often >> I misspell it. I really had to make sure I got it right in the >> source code for AGVCR. For emails, obviously I'm still having >> problems. :) >> >> Derek >> >> Piers O'Hanlon wrote: >>> Hi, >>> Just a minor correction - just a typo - to save frustration: >>> One needs use "Rijndael/" instead of "Rjindael/" >>> Piers. >>> On 3/29/06, Derek Piper <dcpiper(a)indiana.edu> wrote: >>>> You may be better off using Rjindael encryption, which is >>>> normally used >>>> on AG Venues when setting the 'encryption' option in the venue >>>> server >>>> config. >>>> A Rjindael key is passed to VIC and RAT as 'Rjindael/ >>>> passphrase' where >>>> passphrase should be something random and unguessable, and >>>> distributed >>>> to those needing the key to enter manually. There's a program >>>> for Debian >>>> called 'pwgen' that I've used to generate a passphrase before. For >>>> manually entering the key, you would probably just disable the >>>> venue >>>> encryption and manually key it in. For a DES key, just use a >>>> passphrase >>>> that doesn't start with a string 'Rjindael/'. >>>> Of course you can also use certificates to secure a venue >>>> too, so not >>>> just anyone can enter and obtain the encryption key. >>>> >>>> Derek >>>> >>>> Jeremy Mann wrote: >>>> >>>>> We would like to demonstrate encryption in April to some fellow >>>>> colleagues. I set up a test room on our venue server with >>>>> encryption. >>>>> Encryption works fine, but whoever enters the venue gets the >>>>> encryption >>>>> key. I would like to "lock" down the room to whoever I give the >>>>> key to, >>>>> not whoever enters the room. Can this be done? >>>>> >>>>> Also, I know I can manually enter a key into vic and rat. Is >>>>> there a >>>>> program that I can run to get DES key? Or can I simply use a >>>>> passphrase >>>>> instead? >>>>> >>>>> Thanks! >>>>> >>>>> >>>> >>>> -- >>>> Derek Piper - dcpiper(a)indiana.edu - (812) 856 0111 >>>> IRI 323, School of Informatics >>>> Indiana University, Bloomington, Indiana >>>> >>>> >> >> -- >> Derek Piper - dcpiper(a)indiana.edu - (812) 856 0111 >> IRI 323, School of Informatics >> Indiana University, Bloomington, Indiana >> >

1 0

Re: [AG-TECH] vic and rat encryption
by Colin Perkins 30 Mar '06

30 Mar '06

We might want to hack the code to make "AES" an accepted spelling of Rijndael? :-) Colin On 30 Mar 2006, at 14:26, Derek Piper wrote: > Heheh.. yea.. quite right. Ooops. I hate that word for how often I > misspell it. I really had to make sure I got it right in the source > code for AGVCR. For emails, obviously I'm still having problems. :) > > Derek > > Piers O'Hanlon wrote: >> Hi, >> Just a minor correction - just a typo - to save frustration: >> One needs use "Rijndael/" instead of "Rjindael/" >> Piers. >> On 3/29/06, Derek Piper <dcpiper(a)indiana.edu> wrote: >>> You may be better off using Rjindael encryption, which is >>> normally used >>> on AG Venues when setting the 'encryption' option in the venue >>> server >>> config. >>> A Rjindael key is passed to VIC and RAT as 'Rjindael/ >>> passphrase' where >>> passphrase should be something random and unguessable, and >>> distributed >>> to those needing the key to enter manually. There's a program for >>> Debian >>> called 'pwgen' that I've used to generate a passphrase before. For >>> manually entering the key, you would probably just disable the venue >>> encryption and manually key it in. For a DES key, just use a >>> passphrase >>> that doesn't start with a string 'Rjindael/'. >>> Of course you can also use certificates to secure a venue >>> too, so not >>> just anyone can enter and obtain the encryption key. >>> >>> Derek >>> >>> Jeremy Mann wrote: >>> >>>> We would like to demonstrate encryption in April to some fellow >>>> colleagues. I set up a test room on our venue server with >>>> encryption. >>>> Encryption works fine, but whoever enters the venue gets the >>>> encryption >>>> key. I would like to "lock" down the room to whoever I give the >>>> key to, >>>> not whoever enters the room. Can this be done? >>>> >>>> Also, I know I can manually enter a key into vic and rat. Is >>>> there a >>>> program that I can run to get DES key? Or can I simply use a >>>> passphrase >>>> instead? >>>> >>>> Thanks! >>>> >>>> >>> >>> -- >>> Derek Piper - dcpiper(a)indiana.edu - (812) 856 0111 >>> IRI 323, School of Informatics >>> Indiana University, Bloomington, Indiana >>> >>> > > -- > Derek Piper - dcpiper(a)indiana.edu - (812) 856 0111 > IRI 323, School of Informatics > Indiana University, Bloomington, Indiana >

1 0

Setting web proxy for AG2 ?
by Thierry Delaitre 30 Mar '06

30 Mar '06

Hi, I've installed AG2 under windows & MACOSX and was wondering how to set the web proxy for connecting to a venue server ? Our university does not have a transparent web proxy and we need to specify the url of the web proxy for applications otherwise applications like AG2 cannot contact web servers directly. I tried to set the http_proxy env var under Windows but to no avail. Any help would be grately appreciated. Thanks, ---------------------------------------- Dr Thierry DELAITRE Systems and Services Manager, CSCS University of Westminster 115 New Cavendish Street, London W1W 6UW Tel: 020 7911 5000 ext: 3586 Fax: 020 7911 5089 Mobile short dial code 1788 http://www.cscs.wmin.ac.uk/~delaitt ---------------------------------------- This e-mail and its attachments are intended for the above named only and may be confidential. If they have come to you in error you must not copy or show them to anyone, nor should you take any action based on them, other than to notify the error by replying to the sender.

1 0

Re: [AG-TECH] vic and rat encryption
by Derek Piper 30 Mar '06

30 Mar '06

Heheh.. yea.. quite right. Ooops. I hate that word for how often I misspell it. I really had to make sure I got it right in the source code for AGVCR. For emails, obviously I'm still having problems. :) Derek Piers O'Hanlon wrote: > Hi, > > Just a minor correction - just a typo - to save frustration: > One needs use "Rijndael/" instead of "Rjindael/" > > Piers. > > On 3/29/06, Derek Piper <dcpiper(a)indiana.edu> wrote: > >> You may be better off using Rjindael encryption, which is normally used >>on AG Venues when setting the 'encryption' option in the venue server >>config. >> A Rjindael key is passed to VIC and RAT as 'Rjindael/passphrase' where >>passphrase should be something random and unguessable, and distributed >>to those needing the key to enter manually. There's a program for Debian >>called 'pwgen' that I've used to generate a passphrase before. For >>manually entering the key, you would probably just disable the venue >>encryption and manually key it in. For a DES key, just use a passphrase >>that doesn't start with a string 'Rjindael/'. >> Of course you can also use certificates to secure a venue too, so not >>just anyone can enter and obtain the encryption key. >> >> Derek >> >>Jeremy Mann wrote: >> >>>We would like to demonstrate encryption in April to some fellow >>>colleagues. I set up a test room on our venue server with encryption. >>>Encryption works fine, but whoever enters the venue gets the encryption >>>key. I would like to "lock" down the room to whoever I give the key to, >>>not whoever enters the room. Can this be done? >>> >>>Also, I know I can manually enter a key into vic and rat. Is there a >>>program that I can run to get DES key? Or can I simply use a passphrase >>>instead? >>> >>>Thanks! >>> >>> >> >>-- >>Derek Piper - dcpiper(a)indiana.edu - (812) 856 0111 >>IRI 323, School of Informatics >>Indiana University, Bloomington, Indiana >> >> > > -- Derek Piper - dcpiper(a)indiana.edu - (812) 856 0111 IRI 323, School of Informatics Indiana University, Bloomington, Indiana

1 0