[Planetlab-devel] login-id issue with sfi
Chris Tracy
chris at maxgigapop.net
Mon Jun 15 12:25:11 EDT 2009
Hi Anil,
Thanks for the response, this makes sense to me now..
My /etc/geni/aggregates.xml and /etc/geni/registries.xml files are
both set to the default, (addr="" hrn="" port=""), so perhaps this is
why pointing to my port 12347 does not work.
In your installation, did you configure in aggregates.xml and
registries.xml? If so, would you mind sharing with me what values you
used?
I am also wondering if somebody could tell me which versions of
PlanetLab (v4.2 vs v4.3) interoperate with which versions of the
geniwrapper. (There are three tagged geniwrapper releases, 0.2-1,
0.2-2, and 0.2-3..) I am currently using MyPLC 4.2rc24, but I would
like to upgrade to 4.3. It would be very helpful to know which
release of geniwrapper I should be using for 4.2 versus 4.3.
Does the geniwrapper trunk only work with MyPLC 4.3 ?
Thanks,
-Chris
On Thu, Jun 11, 2009 at 10:59:25AM +0200, Anil-Kumar.Vengalil at sophia.inria.fr wrote:
> Hi,
>
> When we point SFI_SM to port no 12346, we are communicating with AM
> directly. This works if you have only one AM. But, when federation of
> multiple PLCs comes into picture (multiple AMs), it is the SM, which knows
> about all AMs. So a typical sequence (as far as I understand) is sfi
> contacts SM (port no. 12347), and SM decides which AM to be contacted.
>
> My test installation (a very recent version of trunk), SM points to 12347
> (see below) and sfi.py slices works.
> # env | grep SFI
> SFI_USER=plc.pl.root
> SFI_SM=http://vplc23.inria.fr:12347/
> SFI_AUTH=plc.pl
> SFI_REGISTRY=http://vplc23.inria.fr:12345/
>
> # sfi.py slices
> plc.pl.testA
> plc.pl.testA10
> plc.pl.test33
> plc.pl.testA44
> plc.pl.testA1
> plc.pl.testA11
> plc.pl.netflow
> plc.pl.sirius
> plc.pl.testB1
> plc.pl.testA22
> plc.pl.testA33
>
> I do not know the exact cause behind the protocol error. If I get some clue,
> will update you.
>
> Anil
> Chris Tracy wrote:
> > Anil,
> >
> >
> >>> Your SFI_SM is pointing to port no. 12346, but by default SM runs
> >>> on port no. 12347.
> >>>
> >
> > Speaking of the slice manager running on port 12347 -- I am a bit
> > confused about the recent geniwrapper commit (r13745) that you brought
> > up (changed SFI_SM default port from 12346 to 12347 in configSfi.sh).
> >
> > First, I am clear that the SM is indeed running on port 12347, as
> > shown below:
> >
> > [max-myplc] / # ps auxwww | grep plc | grep -- -s
> > root 17792 0.0 0.2 24308 9472 ? Sl May28 0:00
> > /usr/bin/python /usr/bin/plc.py -s -d
> > [max-myplc] / # lsof -i -U -P | grep 17792
> > plc.py 17792 root 5u IPv4 8357932 TCP *:12347
> > (LISTEN)
> >
> > However, I have been using the following configSfi.sh and running
> > sfi.py without any problems -- and it has SFI_SM pointing to port
> > 12346 (which is the port that the Aggregate Manager is running on):
> >
> > === configSfi.sh
> > export SFI_AUTH=maxpl.maxpl
> > export SFI_USER=$SFI_AUTH.chris
> > export SFI_REGISTRY=http://max-myplc.dragon.maxgigapop.net:12345/
> > export SFI_SM=http://max-myplc.dragon.maxgigapop.net:12346/
> > ===
> >
> > Everything works fine with this configuration:
> >
> > bash-3.2$ source configSfi.sh
> > bash-3.2$ sfi.py slices
> > maxpl.maxpl.netflow
> > maxpl.maxpl.sirius
> > maxpl.maxpl.testing
> >
> > If I change SFI_SM to port to port 12347 on the client side, without
> > changing anything else, I get ProtocolError / 500 Internal Server
> > Error, as you can see below:
> >
> > ===
> > bash-3.2$ export SFI_SM=http://max-myplc.dragon.maxgigapop.net:12347/
> > bash-3.2$ sfi.py slices
> > Traceback (most recent call last):
> > File "/usr/local/bin/sfi.py", line 693, in <module>
> > main()
> > File "/usr/local/bin/sfi.py", line 367, in main
> > dispatch(command, cmd_opts, cmd_args)
> > File "/usr/local/bin/sfi.py", line 333, in dispatch
> > globals()[command](cmd_opts, cmd_args)
> > File "/usr/local/bin/sfi.py", line 546, in slices
> > results = slicemgr.get_slices(user_cred)
> > File "Library/Python/2.5/site-packages/geni/util/geniclient.py", line
> > 337, in get_slices
> > File
> > "/System/Library/Frameworks/Python.framework/Versions/2.5/lib/python2.5/xmlrpclib.py",
> > line 1147, in __call__
> > return self.__send(self.__name, args)
> > File
> > "/System/Library/Frameworks/Python.framework/Versions/2.5/lib/python2.5/xmlrpclib.py",
> > line 1437, in __request
> > verbose=self.__verbose
> > File
> > "/System/Library/Frameworks/Python.framework/Versions/2.5/lib/python2.5/xmlrpclib.py",
> > line 1191, in request
> > headers
> > xmlrpclib.ProtocolError: <ProtocolError for
> > max-myplc.dragon.maxgigapop.net:12347/: 500 Internal Server Error>
> > ===
> >
> > I am running 'tags/geniwrapper-0.2-1' on the client side, trunk r13677
> > on the server side.
> >
> > -Chris
> >
> >
> > On Wed, Jun 10, 2009 at 11:52:38AM -0400, Ihsan Qazi wrote:
> >
> >> Hi Anil,
> >>
> >>
> >>> Your SFI_SM is pointing to port no. 12346, but by default SM runs on port
> >>> no. 12347.
> >>>
> >> The default settings in the configuration file (configSfi.sh) suggest
> >> that the SM at PlanetLab is running on port 12346. It may be true that it
> >> is running on port 12347 but I'm encountering a problem before I can
> >> connect with the SM. When I issue the following command, I get the
> >> 'Record not found' error.
> >>
> >> [root at planetlabgeni cmdline]# ./sfi.py show plc.princeton
> >> ...
> >> ...
> >> File "usr/lib/python2.5/site-packages/geni/util/geniclient.py", line 30,
> >> in close
> >> geni.util.geniclient.ServerException: : get_credential: Record not found:
> >> plc.princeton.iqazi
> >>
> >>
> >>> Also, your SFI_REGISTRY points to http://www.planet-lab.org:12345/
> >>> <http://www.planet-lab.org:12345/> (planet-lab host) where as your SM
> >>> point to http://www.vini-veritas.org:12346/
> >>> <http://www.vini-veritas.org:12346/> (a host in vini domain). Is that you
> >>> wanted ?
> >>>
> >> Good point. I used the default settings but I'm not sure. I'll have to
> >> confirm this with the PlanetLab folks.
> >>
> >> Thanks!
> >> Ihsan
> >>
> >>
> >>> Anil
> >>>
> >>> Ihsan Qazi wrote:
> >>>
> >>>> Greetings folks,
> >>>>
> >>>> I'm having a login problem with the sfi command (that I plan to use for
> >>>> contacting the SM running at PLC). My login-id is 'iqazi at bbn.com' but
> >>>> since my id has a '.' in it, it doesn't work with UNIX ( I set
> >>>> SFI_USER=plc.princeton.iqazi at bbn.com ). I suppose, there should be a
> >>>> workaround to this problem. May be an alias can be created so that I
> >>>> don't have to use my email address as the login-id. I tried using
> >>>> 'iqazi' just to check if it is already enabled but then I get a 'Record
> >>>> not found' message, which is what I expected if it wasn't enabled. Am I
> >>>> missing something here? Any help would be appreciated. I have copied the
> >>>> output below.
> >>>>
> >>>> Thanks!
> >>>> Ihsan
> >>>>
> >>>> My configSfi.sh file reads as follows:
> >>>> ---------------------------------
> >>>>
> >>>> export SFI_AUTH=plc.princeton
> >>>> export SFI_USER=$SFI_AUTH.iqazi at bbn.com <mailto:SFI_AUTH.iqazi at bbn.com>
> >>>> #export SFI_USER=$SFI_AUTH.iqazi
> >>>> #export SFI_USER=$SFI_AUTH.Qazi_Ihsan
> >>>>
> >>>> export SFI_REGISTRY=http://www.planet-lab.org:12345/
> >>>> <http://www.planet-lab.org:12345/>
> >>>> export SFI_SM=http://www.vini-veritas.org:12346/
> >>>> <http://www.vini-veritas.org:12346/>
> >>>>
> >>>> ---------------------------------
> >>>>
> >>>> [root at planetlabgeni cmdline]# ./sfi.py slices
> >>>> Enter PEM pass phrase:
> >>>> Traceback (most recent call last):
> >>>> File "./sfi.py", line 692, in <module>
> >>>> main()
> >>>> File "./sfi.py", line 366, in main
> >>>> dispatch(command, cmd_opts, cmd_args)
> >>>> File "./sfi.py", line 332, in dispatch
> >>>> globals()[command](cmd_opts, cmd_args)
> >>>> File "./sfi.py", line 544, in slices
> >>>> user_cred = get_user_cred()
> >>>> File "./sfi.py", line 134, in get_user_cred
> >>>> user_cred = registry.get_credential(None, "user", user)
> >>>> File "usr/lib/python2.5/site-
> >>>> packages/geni/util/geniclient.py", line 157, in get_credential
> >>>> File "/usr/lib64/python2.5/xmlrpclib.py", line 1150, in __call__
> >>>> return self.__send(self.__name, args)
> >>>> File "/usr/lib64/python2.5/xmlrpclib.py", line 1440, in __request
> >>>> verbose=self.__verbose
> >>>> File "/usr/lib64/python2.5/xmlrpclib.py", line 1204, in request
> >>>> return self._parse_response(h.getfile(), sock)
> >>>> File "/usr/lib64/python2.5/xmlrpclib.py", line 1343, in
> >>>> _parse_response
> >>>> return u.close()
> >>>> File "usr/lib/python2.5/site-packages/geni/util/geniclient.py", line
> >>>> 30, in close
> >>>> geni.util.geniclient.ServerException: : get_credential: Missing
> >>>> authority: plc.princeton.iqazi at bbn
> >>>>
> >>>> ---------------------------------
> >>>>
> >>>> When I set SFI_USER=plc.princeton.iqazi, I get
> >>>>
> >>>> [root at planetlabgeni cmdline]# ./sfi.py show plc.princeton
> >>>> Enter PEM pass phrase:
> >>>> Traceback (most recent call last):
> >>>> File "./sfi.py", line 692, in <module>
> >>>> main()
> >>>> File "./sfi.py", line 366, in main
> >>>> dispatch(command, cmd_opts, cmd_args)
> >>>> File "./sfi.py", line 332, in dispatch
> >>>> globals()[command](cmd_opts, cmd_args)
> >>>> File "./sfi.py", line 395, in show
> >>>> user_cred = get_user_cred()
> >>>> File "./sfi.py", line 134, in get_user_cred
> >>>> user_cred = registry.get_credential(None, "user", user)
> >>>> File "usr/lib/python2.5/site-
> >>>> packages/geni/util/geniclient.py", line 157, in get_credential
> >>>> File "/usr/lib64/python2.5/xmlrpclib.py", line 1150, in __call__
> >>>> return self.__send(self.__name, args)
> >>>> File "/usr/lib64/python2.5/xmlrpclib.py", line 1440, in __request
> >>>> verbose=self.__verbose
> >>>> File "/usr/lib64/python2.5/xmlrpclib.py", line 1204, in request
> >>>> return self._parse_response(h.getfile(), sock)
> >>>> File "/usr/lib64/python2.5/xmlrpclib.py", line 1343, in
> >>>> _parse_response
> >>>> return u.close()
> >>>> File "usr/lib/python2.5/site-packages/geni/util/geniclient.py", line
> >>>> 30, in close
> >>>> geni.util.geniclient.ServerException: : get_credential: Record not
> >>>> found: plc.princeton.iqazi
> >>>>
> >>>> ------------------------------------------------------------------------
> >>>>
> >>>> _______________________________________________
> >>>> Devel mailing list
> >>>> Devel at lists.planet-lab.org
> >>>> https://lists.planet-lab.org/mailman/listinfo/devel
> >>>>
> >>> _______________________________________________
> >>> Devel mailing list
> >>> Devel at lists.planet-lab.org
> >>> https://lists.planet-lab.org/mailman/listinfo/devel
> >>>
> >>>
> >> _______________________________________________
> >> Devel mailing list
> >> Devel at lists.planet-lab.org
> >> https://lists.planet-lab.org/mailman/listinfo/devel
> >>
> >
> > ------------------------------------------------------------------------
> >
> > _______________________________________________
> > Devel mailing list
> > Devel at lists.planet-lab.org
> > https://lists.planet-lab.org/mailman/listinfo/devel
> >
>
> _______________________________________________
> Devel mailing list
> Devel at lists.planet-lab.org
> https://lists.planet-lab.org/mailman/listinfo/devel
--
Chris Tracy
Mid-Atlantic Crossroads (MAX)
Office phone: 301.314.6655
GPG key: 0xB3B9C93D
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 186 bytes
Desc: not available
Url : http://lists.planet-lab.org/pipermail/devel/attachments/20090615/7e04a205/attachment.bin
More information about the Devel
mailing list