On Tue, Nov 23, 2004 at 10:52:46AM +0000 or thereabouts, Steve Fisher wrote:
> On Tue, 23 Nov 2004, Mario David wrote:
>
> We are aware of the problem. Unfortunately if a site tries to joing R-GMA
> and the firewall is not configured correclty the registry grinds to a
> halt. We are workign on a fix for this. This will be delivered as part of
> the gLite release candidate 1 and may also be reworked into the LCG
> release. As the problem is caused mostly by new sites, I would recommend
> configuring the registry to block all sites except for those which are
> known to be working. This will require manual intervention to add a new
> site but will mean that the system is controlled and that if the problem
> recurs it must be the site which has just been added.
I am welcome to comments but starting from next week the solution appears
to be to change the registry to default deny and give sites permission to
register explicitly.
Obviously we would start off giving all the current sites access and new
sites posted to lcg-rollout would be checked and added to the list.
I will also make sure the current access control list is published somewhere
to allow people to check things. Either a web page on even into R-GMA which
can then be looked at via the web browser until a site has been added. This
latter has the advantage that the current testing results being stuffed
into R-GMA can make use of it. "e.g R-GMA at site X does not work since it
is blocked at the registry."
Assuming all is well I will post a message next week when this has been
implemented.
Steve T
>
> Steve
>
>
> > Hi Nicolescu
> >
> > someone correct if I am wrong
> >
> > but your RGMA has no problems, "It seems that it has but ..."
> > this was reported about three months ago, then again two
> > monthes ago
> > I had the same "problem"
> > I even asked at the time for what was RGMA being used
> > and incredibly I got no answer
> > finally it seems that the accouting system is based on it "apel"
> > if you care to deploy it
> >
> > My question if anybody cares to answer is
> > are the questions in this mailing list being
> > picked up with the given answers somewhere???
> > if Yes
> > where is this documented ??
> >
> > cheers all
> >
> > Mario
> >
> >
> > Quoting "Nicolescu, Edward L" <[log in to unmask]>:
> >
> > > Any R-GMA guru's on this list who could provide some advice ? Or, at least,
> > > point me to some R-GMA documentation which I could use to solve the
> > > reported problem, below ? Thanks.
> > >
> > > Edward
> > >
> > >
> > > ------------------------ repost from Friday, Nov 19, 2004
> > > ------------------------
> > > Hi,
> > >
> > > a run of the edg-rgma-script at the BNL-LCG2 site indicates that,
> > >
> > > GlueCE not found in schema
> > > GlueSE not found in schema
> > > SiteInfo not found in schema
> > > ServiceStatus not found in schema
> > >
> > > The full output from edg-check-rgma is shown below. Also, appended below
> > > you
> > > will see
> > > the contents of the /var/log/tomcat4/Catalina.out and
> > > /opt/edg/var/log/edg-rgma-tools.log
> > > log files.
> > >
> > > Because of r-gma malfunctioning, I had to un-advertise/delete the BNL-LCG2
> > > MON node from
> > > the GOC Config database. If anybody has any advice regarding the
> > > aforementioned errors,
> > > I would love to hear it. Thanks.
> > >
> > > Edward Nicolescu
> > > Brookhaven National Labs
> > >
> > > ------------------------------------------------------- output from
> > > edg-rgma-check ------------------------------------------------
> > > R-GMA Site System Test
> > >
> > > Finding EDG_LOCATION...
> > >
> > > EDG_LOCATION=/opt/edg found.
> > >
> > > Trying to set up the R-GMA enviroment and obtain RGMA_PROPS...
> > >
> > > RGMA_PROPS=/opt/edg/var/edg-rgma found.
> > >
> > > Checking that ports 8080 and 8088 on IC and MON servers are accessible...
> > >
> > > Connect to 8080 () TCP port MON server: OK
> > > Connect to 8088 () TCP port MON server: OK
> > >
> > > Check Registry location is consistent...
> > >
> > > The two files contain the same registry URL
> > >
> > > Checking the status of the servlets...
> > >
> > > SchemaServlet OK
> > > RegistryServlet OK
> > > StreamProducerServlet OK
> > > LatestProducerServlet OK
> > > ConsumerServlet OK
> > >
> > > Checking the R-GMA command line interface...
> > >
> > > R-GMA command line interface: OK.
> > >
> > > Checking GOUT ldap port...
> > >
> > > Connect to GOUT server () TCP port : OK
> > >
> > > Checking Schema...
> > >
> > > GlueCE not found in schema
> > > GlueSE not found in schema
> > > SiteInfo not found in schema
> > > ServiceStatus not found in schema
> > >
> > > Site Name: Failed
> > > This check assumes that you are using your domain name for your site name
> > > If you are not using your domain name for you site name then this failure
> > > is
> > > not a problem
> > >
> > >
> > > SEs: None
> > >
> > > Checking for site RGMA in Service and Service Status Tables...
> > > R-GMA.ConsumerService: Failed
> > > R-GMA.StreamProducerService: Failed
> > > R-GMA.ArchiverService: Failed
> > > R-GMA.CanonicalProducerService: Failed
> > > R-GMA.DBProducerService: Failed
> > > R-GMA.LatestProducerService: Failed
> > >
> > > Checking for site GIN in Service and Service Status Tables...
> > >
> > > Checking for any VO Services runing at your site...
> > > Info: R-GMA.RegistryService not running at this site
> > > Info: R-GMA.SchemaService not running at this site
> > >
> > > Please check the above information is correct for your site
> > > ------------------------------- end of edg-rgma-check
> > > -------------------------------------------
> > > ~
> > >
> > >
> > > ----------------------------- contents of /var/log/tomcat4/Catalina.out
> > > ----------------------------------
> > > Starting service Tomcat-Insecure
> > > Apache Tomcat/4.1
> > > log4j:WARN No appenders could be found for logger
> > > (org.edg.info.ArchiverServlet).
> > > log4j:WARN Please initialize the log4j system properly.
> > > Stopping service Tomcat-Insecure
> > > -------------------------- end of /var/log/tomcat4/Catalina.out
> > > ---------------------------------------------
> > >
> > >
> > > ---------------------------------- contents of
> > > /opt/edg/var/log/edg-rgma-tools.log
> > > -----------------------------------------
> > > Fri Nov 19 21:34:01 UTC 2004: ServiceStatusPublisher dead but subsys locked
> > > Fri Nov 19 21:34:01 UTC 2004: edg-rgma-service-status-monitor aborted as
> > > rgma was restarted within the last 5 minutes
> > > Fri Nov 19 21:34:01 UTC 2004: /opt/edg/libexec/edg-rgma-servlet-status -
> > > Unable to create and ' + 'declare dummy table
> > > Fri Nov 19 21:34:01 UTC 2004 : Servlet Monitoring Script restarting Tomcat
> > > Fri Nov 19 21:34:01 UTC 2004: edg-rgma-restart-all restart aborted as it
> > > was
> > > done within last 5 minutes
> > > ~
> > >
> > >
> > >
> >
--
Steve Traylen
[log in to unmask]
http://www.gridpp.ac.uk/
|