On 01/29/2010 05:44 PM, Massimo Sgaravatto - INFN Padova wrote:
> I guess the problem is that range GLOBUS_TCP_PORT_RANGE (usually
> 20000-25000) (data channel) is not open
Well .. right, it is not open .. should be ?
at page
http://grid.pd.infn.it/cream/field.php?n=Main.PortsUsedInACREAMCE
it is not reminded about those.
opened now
Thanks,
Adrian
> On Fri, 29 Jan 2010, Adrian Sevcenco wrote:
>
>> On 01/29/2010 05:08 PM, Massimo Sgaravatto - INFN Padova wrote:
>>> If I tru a gridftp towards your CREAM CE:
>>>
>>> $ uberftp grid03.spacescience.ro
>>> 220 grid03.spacescience.ro GridFTP Server 2.8 (gcc64dbg, 1217607445-63)
>>> [VDT patched 4.0.8] ready.
>>> 230 User dteam046 logged in.
>>> uberftp> ls
>>>
>>> And then it is stuck
>> thanks for looking into it.
>> so .. what could be the problem ? giving that installed packages are at
>> a minimum that means that either creamCE or TORQUE_utils metapackages
>> contain something that is broken (as functionality or configuration)
>> my complete wonder is how everybody else have no problem with this ..
>> are we the only ones with a cream ce box with external torque server?
>> in the end should we just reinstall the os and reinstall the packages
>> (windows like tryout solution)?
>>
>> Thanks for all your help!
>> Best regards,
>> Adrian
>>
>> -------------------------------------------------------
>> Adrian Sevcenco - Institute of Space Sciences, Romania
>> -------------------------------------------------------
>>
>>
>>> On Fri, 29 Jan 2010, Ionel STAN wrote:
>>>
>>>> On 28.01.2010 16:25, Massimo Sgaravatto - INFN Padova wrote:
>>>>> I wanted to have a look at your CE via gridftp, but I am not able to
>>>>> connect
>>>>> It looks like there is a firewall problem
>>>>>
>>>>> Could you please refer to this:
>>>>> http://grid.pd.infn.it/cream/field.php?n=Main.PortsUsedInACREAMCE
>>>>>
>>>> Hi,
>>>> We know this page and what ports are used.
>>>> From a netstat command we have:
>>>> # netstat -ntulp
>>>> Active Internet connections (only servers)
>>>> Proto Recv-Q Send-Q Local Address Foreign Address
>>>> State PID/Program name
>>>> tcp 0 0 0.0.0.0:60000 0.0.0.0:* LISTEN
>>>> 10219/sshd
>>>> tcp 0 0 0.0.0.0:9002 0.0.0.0:* LISTEN
>>>> 9903/glite-lb-logd
>>>> tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN
>>>> 2992/mysqld
>>>> tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN
>>>> 10219/sshd
>>>> tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN
>>>> 3067/master
>>>> tcp 0 0 85.120.46.14:2170 0.0.0.0:* LISTEN
>>>> 7541/slapd
>>>> tcp 0 0 ::ffff:127.0.0.1:8005 :::* LISTEN
>>>> 7035/java
>>>> tcp 0 0 :::5001 :::* LISTEN
>>>> 7035/java
>>>> tcp 0 0 :::8009 :::* LISTEN
>>>> 7035/java
>>>> tcp 0 0 :::9909 :::* LISTEN
>>>> 7035/java
>>>> tcp 0 0 :::8443 :::* LISTEN
>>>> 7035/java
>>>> tcp 0 0 :::2811 :::* LISTEN
>>>> 6237/globus-gridftp
>>>> udp 0 0 172.16.0.253:123 0.0.0.0:* 2902/ntpd
>>>> udp 0 0 85.120.46.14:123 0.0.0.0:* 2902/ntpd
>>>> udp 0 0 127.0.0.1:123 0.0.0.0:* 2902/ntpd
>>>> udp 0 0 0.0.0.0:123 0.0.0.0:* 2902/ntpd
>>>> udp 0 0 :::47371 :::*
>>>> 6237/globus-gridftp
>>>> udp 0 0 fe80::230:48ff:fe8c:123 :::* 2902/ntpd
>>>> udp 0 0 ::1:123 :::* 2902/ntpd
>>>> udp 0 0 :::123 :::* 2902/ntpd
>>>> All this ports is open in firewall:
>>>>
>>>> tcp: 2170, 2811, 5001, 8005, 8009, 8443, 9002, 9091, 9909, 32236,
>>>> udp: 47405
>>>>
>>>> and between CREAM and torque server, SE and vobox is no firewall
>>>>
>>>> but the error at CREAMCE-sft-job still exists:
>>>>
>>>> Reason = Failed to create a delegation id for
>>>> job https://wms206.cern.ch:9000/Pw54wYIFQNN5xcb_ChlMNg: reason is
>>>> Connection to service
>>>> [http(s)://grid03.spacescience.ro/ce-cream/services/gridsite-delegation]
>>>>
>>>> failed: FaultString=[HTTP error] - FaultCode=[SOAP-ENV:Server] -
>>>> FaultSubCode=[SOAP-ENV:Server] - FaultDetail=[HTTP/1.1 404 Not Found]
>>>>
>>>> also no status available for the other tests:
>>>> CA certs version, Replica Management, Software Version (WN),
>>>> BrokerInfo, CSH test
>>>>
>>>> Any ideas?
>>>>
>>>> Thank you very much!
>>>> Ionel Stan
>>>>
>>>>
>>>>
>>>>> to see which ports are used ?
>>>>>
>>>>> Thanks, Massimo
>>>>>
>>>>> On Thu, 28 Jan 2010, Ionel STAN wrote:
>>>>>
>>>>>> On 27.01.2010 15:42, Massimo Sgaravatto - INFN Padova wrote:
>>>>>>> If I try to delegate a proxy there:
>>>>>>>
>>>>>>> $ glite-ce-delegate-proxy -e grid03.spacescience.ro ss
>>>>>>> 2010-01-27 14:37:26,588 ERROR - Connection to service
>>>>>>> [http(s)://grid03.spacescience.ro//ce-cream/services/gridsite-delegation]
>>>>>>>
>>>>>>> failed: FaultString=[HTTP error] - FaultCode=[SOAP-ENV:Server] -
>>>>>>> FaultSubCode=[SOAP-ENV:Server] - FaultDetail=[HTTP/1.1 404 Not
>>>>>>> Found]
>>>>>>>
>>>>>>> So it looks like the service is not deployed and/or there are some
>>>>>>> network (firewall) problems
>>>>>>>
>>>>>>>
>>>>>>> I am trying to have a look via gridftp, but it looks like there are
>>>>>>> some firewall problems.
>>>>>>>
>>>>>>>
>>>>>>> May I suggest first of all to follow the checks suggested here:
>>>>>>>
>>>>>>> http://grid.pd.infn.it/cream/field.php?n=Main.HowToCheckAndTestYourCREAMCE
>>>>>>>
>>>>>>
>>>>>>
>>>>>> Thanks for the info! this is very useful indeed. unfortunatly we are
>>>>>> stuck at step 2 :
>>>>>> accesing https://grid03.spacescience.ro:8443/ce-cream/services
>>>>>> we receive the error :
>>>>>> error establishing an encrypted conection to grid03.spacescience.ro.
>>>>>> Error code : -12188
>>>>>>
>>>>>> also on our crem ce we have a java procees that would listen to 8443
>>>>>> and tomcat is running ..
>>>>>>
>>>>>> any idea about this?
>>>>>> Many thanks,
>>>>>> Ionel
>>>>>>
>>>>>>
>>>>>>>
>>>>>>> ?
>>>>>>>
>>>>>>> Cheers, Massimo
>>>>>>>
>>>>>>> On Wed, 27 Jan 2010, Ionel STAN wrote:
>>>>>>>
>>>>>>>> Hi,
>>>>>>>> Now CE publishses status:
>>>>>>>>
>>>>>>>> [root@grid03 ~]# ldapsearch -x -h lcg-bdii.cern.ch:2170 -b o=grid
>>>>>>>> '(GlueCEUniqueID=grid03.spacescience.ro:*)' GlueCEStateStatus |
>>>>>>>> grep ^GlueCEStateStatus
>>>>>>>> GlueCEStateStatus: Production
>>>>>>>> GlueCEStateStatus: Production
>>>>>>>> GlueCEStateStatus: Production
>>>>>>>> GlueCEStateStatus: Production
>>>>>>>>
>>>>>>>> but for CREAMCE-sft-job we have the following error:
>>>>>>>>
>>>>>>>> - Reason = Failed to create a delegation id
>>>>>>>> for job
>>>>>>>> https://wms208.cern.ch:9000/a5vsfiTir4cYPgUSHZhq5Q: reason is
>>>>>>>> Connection to service
>>>>>>>> [http(s)://grid03.spacescience.ro/ce-cream/services/gridsite-delegation]
>>>>>>>>
>>>>>>>> failed: FaultString=[HTTP
>>>>>>>> error] - FaultCode=[SOAP-ENV:Server] -
>>>>>>>> FaultSubCode=[SOAP-ENV:Server] - FaultDetail=[HTTP/1.1 404
>>>>>>>> Not Found]
>>>>>>>>
>>>>>>>> https://lcg-sam.cern.ch:8443/sam/sam.py?funct=ShowHistory&sensors=CREAMCE&vo=ops&nodename=grid03.spacescience.ro
>>>>>>>>
>>>>>>>>
>>>>>>>> And also no status available for the other tests:
>>>>>>>> CA certs version, Replica Management, Software Version (WN),
>>>>>>>> BrokerInfo, CSH test
>>>>>>>>
>>>>>>>> Any ideas?
>>>>>>>>
>>>>>>>> Thank you very much!
>>>>>>>> Ionel Stan
>>>>>>>>
>>>>>>>> On 26.01.2010 17:09, Ionel STAN wrote:
>>>>>>>>>
>>>>>>>>> Thanks Maarten,
>>>>>>>>> I made the necessary changes.
>>>>>>>>> Ionel
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> On 26.01.2010 15:46, Maarten Litmaath wrote:
>>>>>>>>>> Ionel STAN wrote:
>>>>>>>>>>
>>>>>>>>>>> We install and configure a CREAM-CE (3.2) only with glite-CREAM
>>>>>>>>>>> and
>>>>>>>>>>> glite-TORQUE_utils metapackages because we want to submit jobs
>>>>>>>>>>> from
>>>>>>>>>>> CREAM-CE to lcg-CE (3.1) torque server and this in working ok,
>>>>>>>>>>> but in
>>>>>>>>>>> SAM test we have error at CREAMCE-sft-job:
>>>>>>>>>>>
>>>>>>>>>>> https://lcg-sam.cern.ch:8443/sam/sam.py?funct=ShowHistory&sensors=CREAMCE&vo=ops&nodename=grid03.spacescience.ro
>>>>>>>>>>>
>>>>>>>>>>> ----------------
>>>>>>>>>>> Test Summary : : LISTMATCHFAILED
>>>>>>>>>>>
>>>>>>>>>>> - Reason = BrokerHelper: no compatible
>>>>>>>>>>> resources
>>>>>>>>>>> ---------------
>>>>>>>>>> The CE still publishes the wrong status:
>>>>>>>>>>
>>>>>>>>>> $ ldapsearch -x -h lcg-bdii.cern.ch:2170 -b o=grid \
>>>>>>>>>> '(GlueCEUniqueID=grid03.spacescience.ro:*)' GlueCEStateStatus |
>>>>>>>>>> grep ^GlueCEStateStatus
>>>>>>>>>> GlueCEStateStatus: Special
>>>>>>>>>> GlueCEStateStatus: Special
>>>>>>>>>> GlueCEStateStatus: Special
>>>>>>>>>> GlueCEStateStatus: Special
|
