On Fri, Sep 30, 2005 at 09:36:24AM +0100 or thereabouts, Piotr Nyczyk wrote:
> Hi,
>
> Sorry for not answering before, but I was away for few days. There
> were two reasons why I started to use the non-standard port 9443:
> - SFT server normally runs on a MONBOX machine, where port 8443 is
> occupied by R-GMA (secure connector of tomcat) and I don't want to
> run SFT report page under tomcat
> - ports below 1024 are not allowed at CERN for incoming access for
> grid machines, and I didn't want to ask for special access
>
> I didn't realise that this will cause problems - but obviously I was
> wrong. I will try to figure out which port from the standard EGEE/LCG
> list I can use on SFT server and I will then configure it as
> additional port where SFT reports can be accessed. But this will take
> some time (by monday?)
A standard grid port may not be the best choice, I expect most people
are having problems from the desktop machines which are not in subnets
with grid services. These desktop machines may often be restricted to
80/443/8080/8443 or something. (A secondary ip address would allow you
to put apache on 8443.)
Steve
>
> Piotr
>
> On Sep 28, 2005, at 11:50 AM, Eduardo Huedo Cuesta wrote:
>
> >Hi,
> >
> >Did someone answer the below question regarding port 9443?
> >At INTA-CAB we are not able to read SFT reports. Luckily, we
> >receive e-mail alarms from our partners at CESGA but we can't check
> >the details of failures.
> >
> >Regards,
> >
> > Eduardo.
> >
> >Stephen Childs wrote:
> >
> >
> >>Can I ask why the detailed results of the SFTs are hosted on port
> >>9443? Is there any reason they can't be served on a standard https
> >>port (443 or 8443)? All our external web access goes through a web
> >>proxy which (unsurprisingly) doesn't allow port 9443. I don't
> >>particularly want to ask for special access on this port as I
> >>don't see the need. We have other more worthwhile battles to fight
> >>on this front and I don't want to use up my credit with the
> >>firewall admins!
> >>
> >>As I've said before, it's hard enough convincing site admins that
> >>we really need all of the Grid ports open; we shouldn't also need
> >>to ask them to open up non-standard ports for straightforward web
> >>accesses.
> >>
> >>Stephen
> >>
> >>
> >>
> >
> >--
> >**************************************************
> >
> >Eduardo Huedo Cuesta, PhD
> >Laboratorio de Computación Avanzada, Simulación
> > y Aplicaciones Telemáticas
> >Centro de Astrobiología (CSIC-INTA)
> >Ctra. de Ajalvir Km 4
> >28850 Torrejón de Ardoz, Madrid
> >Spain
> >
> >Tel: +34 91 520 64 28
> >Fax: +34 91 520 10 74
> >Email: [log in to unmask]
> >Web: http://www.cab.inta.es/~huedoce
> >
> >**************************************************
> >
> >GridWay, The Way to Grid! http://www.gridway.org
> >
--
Steve Traylen
[log in to unmask]
http://www.gridpp.ac.uk/
|