Yes, I agree... Anyway I will enable the default https port (443) on
sft server machine, but this will take some time (netops processing)
Piotr
On Sep 30, 2005, at 10:43 AM, Steve Traylen wrote:
> On Fri, Sep 30, 2005 at 09:36:24AM +0100 or thereabouts, Piotr
> Nyczyk wrote:
>
>> Hi,
>>
>> Sorry for not answering before, but I was away for few days. There
>> were two reasons why I started to use the non-standard port 9443:
>> - SFT server normally runs on a MONBOX machine, where port 8443 is
>> occupied by R-GMA (secure connector of tomcat) and I don't want to
>> run SFT report page under tomcat
>> - ports below 1024 are not allowed at CERN for incoming access for
>> grid machines, and I didn't want to ask for special access
>>
>> I didn't realise that this will cause problems - but obviously I was
>> wrong. I will try to figure out which port from the standard EGEE/LCG
>> list I can use on SFT server and I will then configure it as
>> additional port where SFT reports can be accessed. But this will take
>> some time (by monday?)
>>
>
> A standard grid port may not be the best choice, I expect most people
> are having problems from the desktop machines which are not in subnets
> with grid services. These desktop machines may often be restricted to
> 80/443/8080/8443 or something. (A secondary ip address would allow you
> to put apache on 8443.)
>
> Steve
>
>
>>
>> Piotr
>>
>> On Sep 28, 2005, at 11:50 AM, Eduardo Huedo Cuesta wrote:
>>
>>
>>> Hi,
>>>
>>> Did someone answer the below question regarding port 9443?
>>> At INTA-CAB we are not able to read SFT reports. Luckily, we
>>> receive e-mail alarms from our partners at CESGA but we can't check
>>> the details of failures.
>>>
>>> Regards,
>>>
>>> Eduardo.
>>>
>>> Stephen Childs wrote:
>>>
>>>
>>>
>>>> Can I ask why the detailed results of the SFTs are hosted on port
>>>> 9443? Is there any reason they can't be served on a standard https
>>>> port (443 or 8443)? All our external web access goes through a web
>>>> proxy which (unsurprisingly) doesn't allow port 9443. I don't
>>>> particularly want to ask for special access on this port as I
>>>> don't see the need. We have other more worthwhile battles to fight
>>>> on this front and I don't want to use up my credit with the
>>>> firewall admins!
>>>>
>>>> As I've said before, it's hard enough convincing site admins that
>>>> we really need all of the Grid ports open; we shouldn't also need
>>>> to ask them to open up non-standard ports for straightforward web
>>>> accesses.
>>>>
>>>> Stephen
>>>>
>>>>
>>>>
>>>>
>>>
>>> --
>>> **************************************************
>>>
>>> Eduardo Huedo Cuesta, PhD
>>> Laboratorio de Computación Avanzada, Simulación
>>> y Aplicaciones Telemáticas
>>> Centro de Astrobiología (CSIC-INTA)
>>> Ctra. de Ajalvir Km 4
>>> 28850 Torrejón de Ardoz, Madrid
>>> Spain
>>>
>>> Tel: +34 91 520 64 28
>>> Fax: +34 91 520 10 74
>>> Email: [log in to unmask]
>>> Web: http://www.cab.inta.es/~huedoce
>>>
>>> **************************************************
>>>
>>> GridWay, The Way to Grid! http://www.gridway.org
>>>
>>>
>
> --
> Steve Traylen
> [log in to unmask]
> http://www.gridpp.ac.uk/
>
|