[Go-essp-tech] [esg-node-dev] PKI to dap.cccma.uvic.ca

[Estanislao Gonzalez]

Hi,

The problem is that the OpenidRelyingParty is not working properly.
https://dap.cccma.uvic.ca/OpenidRelyingParty/
Shows 404 instead of the common Page (e.g. 
https://bmbf-ipcc-ar5.dkrz.de/OpenidRelyingParty/home.htm)

The Gateway does not require to use this OpenidRelyingParty (I think) 
But certainly the Token access don't requires this and thus it's working.

We've seen some problems here with the latest node installation that is 
preventing OpenidRelyingParty from starting.
We haven't found the source of the problem yet, but I still think the 
problem at cccma might be a different one.

the tomcat/logs/catalina.err should hold more information.

Thanks,
Estani

Am 23.09.2011 09:17, schrieb Kettleborough, Jamie:
> Hello Mike,
>
> Thanks for getting back to me on this.  I've tried both ways.  I generated a wget script from the pcmdi gateway with the authzToken.  This works.  Then I took the same URL and tried to run with the --certificate, --private_key methods.  This gives the 404 response.
>
> I think the requests would have come from an address like:
> 151.170.240.10
> Though I can't be sure as I don't understand how our network is set up.
>
> If you need any more information to help then let me know.
>
> Thanks,
>
> Jamie
>
>> -----Original Message-----
>> From: Mike Berkley [mailto:mike.berkley at gmail.com]
>> Sent: 22 September 2011 17:10
>> To: Kettleborough, Jamie
>> Cc: go-essp-tech at ucar.edu; esg-node-dev at lists.llnl.gov
>> Subject: Re: [esg-node-dev] PKI to dap.cccma.uvic.ca
>>
>> How are you trying to use that URL?
>>
>> wget scripts from the PCMDI gateway (where CCCma is indexed)
>> use an authzToken for authentication.
>> wget scripts from the BADC gateway use myproxy certificates,
>> specified with "--certificate" and "--private-key" on the
>> wget command line.
>>
>>
>>
>> On Thu, Sep 22, 2011 at 02:56, Kettleborough, Jamie
>> <jamie.kettleborough at metoffice.gov.uk>  wrote:
>>> Hello,
>>>
>>> Is there a problem with PKI to the CCCMA data at the
>> moment?  I think
>>> this has worked before for retrievals from uvic to BADC,
>> IPSL and DKRZ.
>>> I'm now getting 404 not found errors (Martin has confirmed BADC now
>>> get the same).
>>>
>>> Connecting to dap.cccma.uvic.ca|142.104.195.6|:443... connected.
>>> WARNING: cannot verify dap.cccma.uvic.ca's certificate, issued by
>>>
>> `/O=Grid/OU=GlobusTest/OU=simpleCA-pcmdi3.llnl.gov/CN=dap.cccm
>> a.uvic.ca'
>>> :
>>>   Self-signed certificate encountered.
>>> HTTP request sent, awaiting response... 404 Not Found
>> 13:40:50 ERROR
>>> 404: Not Found.
>>>
>>> I think the file exists though as I've managed to fetch it
>> using the
>>> token based wget.  (And I don't think I've made a typo between the
>>> token based and PKI based tries).
>>>
>>> An example url is
>>>
>> http://dap.cccma.uvic.ca/thredds/fileServer/esg_dataroot/AR5/CMIP5/out
>>> pu
>>>
>> t/CCCma/CanESM2/historical/mon/atmos/tas/r1i1p1/tas_Amon_CanESM2_histo
>>> ri
>>> cal_r1i1p1_185001-200512.nc
>>>
>>> Thanks,
>>>
>>> Jamie
>>>
>>>
> _______________________________________________
> GO-ESSP-TECH mailing list
> GO-ESSP-TECH at ucar.edu
> http://mailman.ucar.edu/mailman/listinfo/go-essp-tech
>


-- 
Estanislao Gonzalez

Max-Planck-Institut für Meteorologie (MPI-M)
Deutsches Klimarechenzentrum (DKRZ) - German Climate Computing Centre
Room 108 - Bundesstrasse 45a, D-20146 Hamburg, Germany

Phone:   +49 (40) 46 00 94-126
E-Mail:  gonzalez at dkrz.de