<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
HI,<br>
<br>
I've tried it with "gt2:pbs", and got a "qsub not found" error, for
further investigation, I pulled the <i>env</i> used by globus,and
found that there is no "/opt/torque-2.3.6/bin/qsub" under the PATH= ,I
think that's why cause "qsub not found" problem.<br>
<br>
Any suggested solution ?<br>
<br>
<br>
Many thanks!<br>
<br>
-Yi Zhu<br>
<br>
<br>
Swift screen dump:<br>
<small><small><br>
Thu Apr 29 17:25:22 CDT 2010<br>
-bash-3.2$ swift -tc.file tc.test.data -sites.file sshpbscoast.xml
first.swift<br>
Swift svn swift-r3262 cog-r2729 (cog modified locally)<br>
<br>
RunID: 20100429-1725-16xmtae7<br>
Progress:<br>
Progress: Stage in:1<br>
Progress: Submitted:1<br>
Failed to transfer wrapper log from first-20100429-1725-16xmtae7/info/9
on ec2<br>
Progress: Failed:1<br>
Execution failed:<br>
Exception in echo:<br>
Arguments: [Hello, world!]<br>
Host: ec2<br>
Directory: first-20100429-1725-16xmtae7/jobs/9/echo-91j9i9rj<br>
stderr.txt: <br>
<br>
stdout.txt: <br>
<br>
----<br>
<br>
Caused by:<br>
Task failed: Error submitting block task<br>
org.globus.cog.abstraction.impl.common.task.TaskSubmissionException:
Cannot submit job: java.io.IOException: qsub: not found<br>
at
org.globus.cog.abstraction.impl.scheduler.common.AbstractJobSubmissionTaskHandler.submit(AbstractJobSubmissionTaskHandler.java:63)<br>
at
org.globus.cog.abstraction.impl.common.AbstractTaskHandler.submit(AbstractTaskHandler.java:46)<br>
at
org.globus.cog.abstraction.impl.common.task.ExecutionTaskHandler.submit(ExecutionTaskHandler.java:50)<br>
at
org.globus.cog.abstraction.coaster.service.job.manager.BlockTaskSubmitter.run(BlockTaskSubmitter.java:66)<br>
Caused by: java.io.IOException: java.io.IOException: qsub: not found<br>
at java.lang.UNIXProcess.<init>(UNIXProcess.java:148)<br>
at java.lang.ProcessImpl.start(ProcessImpl.java:65)<br>
at java.lang.ProcessBuilder.start(ProcessBuilder.java:451)<br>
at java.lang.Runtime.exec(Runtime.java:591)<br>
at
org.globus.cog.abstraction.impl.scheduler.common.AbstractExecutor.start(AbstractExecutor.java:89)<br>
at
org.globus.cog.abstraction.impl.scheduler.common.AbstractJobSubmissionTaskHandler.submit(AbstractJobSubmissionTaskHandler.java:53)<br>
... 3 more<br>
<br>
Cleaning up...<br>
Shutting down service at <a class="moz-txt-link-freetext" href="https://10.251.214.179:59447">https://10.251.214.179:59447</a><br>
Got channel MetaChannel: 1535747955 -> GSSSChannel-02065467484(1)<br>
Command(3, SHUTDOWNSERVICE): handling reply timeout;
sendReqTime=100429-172549.902, sendTime=100429-172549.903,
now=100429-172559.908<br>
- Done<br>
</small></small><br>
Env pulled from remote:<br>
<br>
<small><small>-bash-3.2$ globus-job-run
ec2-204-236-204-71.compute-1.amazonaws.com /bin/env<br>
[...]<br>
PATH=/opt/vdt-1.10.1/gums/scripts:/opt/vdt-1.10.1/prima/bin:/opt/vdt-1.10.1/cert-scripts/bin:/opt/vdt-1.10.1/glite/sbin:/opt/vdt-1.10.1/glite/bin:/opt/vdt-1.10.1/jdk1.5/bin:/opt/vdt-1.10.1/edg/sbin:/opt/vdt-1.10.1/gip/bin:/opt/vdt-1.10.1/gpt/sbin:/opt/vdt-1.10.1/globus/bin:/opt/vdt-1.10.1/globus/sbin:/opt/vdt-1.10.1/wget/bin:/opt/vdt-1.10.1/logrotate/sbin:/opt/vdt-1.10.1/perl/bin:/opt/pacman-3.26/bin:/opt/vdt-1.10.1/vdt/sbin:/opt/vdt-1.10.1/vdt/bin:/opt/vdt-1.10.1/gums/scripts:/opt/vdt-1.10.1/prima/bin:/opt/vdt-1.10.1/cert-scripts/bin:/opt/vdt-1.10.1/glite/sbin:/opt/vdt-1.10.1/glite/bin:/opt/vdt-1.10.1/jdk1.5/bin:/opt/vdt-1.10.1/edg/sbin:/opt/vdt-1.10.1/gip/bin:/opt/vdt-1.10.1/gpt/sbin:/opt/vdt-1.10.1/wget/bin:/opt/vdt-1.10.1/logrotate/sbin:/opt/vdt-1.10.1/perl/bin:/opt/pacman-3.26/bin:/opt/vdt-1.10.1/vdt/sbin:/opt/vdt-1.10.1/vdt/bin:/sbin:/usr/sbin:/bin:/usr/bin:/usr/X11R6/bin<br>
PERL5LIB=/opt/vdt-1.10.1/vdt/lib:/opt/vdt-1.10.1/perl/lib/5.8.0:/opt/vdt-1.10.1/perl/lib/5.8.0/i686-linux:/opt/vdt-1.10.1/perl/lib/site_perl/5.8.0:/opt/vdt-1.10.1/perl/lib/site_perl/5.8.0/i686-linux:/opt/vdt-1.10.1/vdt/lib:/opt/vdt-1.10.1/perl/lib/5.8.0:/opt/vdt-1.10.1/perl/lib/5.8.0/i686-linux-thread-multi:/opt/vdt-1.10.1/perl/lib/site_perl/5.8.0:/opt/vdt-1.10.1/perl/lib/site_perl/5.8.0/i686-linux-thread-multi::/opt/vdt-1.10.1/perl/lib/5.8.8:/opt/vdt-1.10.1/perl/lib/site_perl:/opt/vdt-1.10.1/perl/lib/5.8.8:/opt/vdt-1.10.1/perl/lib/site_perl<br>
X509_USER_PROXY=/home/torqueuser/.globus/job/ec2-204-236-204-71.compute-1.amazonaws.com/24453.1272579976/x509_up<br>
-bash-3.2$ </small></small><br>
<br>
compare to env on remote machine:<br>
<br>
<small><small>[torqueuser@ip-10-251-214-179 ~]$ env<br>
[...]<br>
PATH=/opt/torque-2.3.6/bin/:/opt/torque-2.3.6/sbin:/opt/vdt-1.10.1/gums/scripts:/opt/vdt-1.10.1/prima/bin:/opt/vdt-1.10.1/cert-scripts/bin:/opt/vdt-1.10.1/glite/sbin:/opt/vdt-1.10.1/glite/bin:/opt/vdt-1.10.1/jdk1.5/bin:/opt/vdt-1.10.1/edg/sbin:/opt/vdt-1.10.1/gip/bin:/opt/vdt-1.10.1/gpt/sbin:/opt/vdt-1.10.1/globus/bin:/opt/vdt-1.10.1/globus/sbin:/opt/vdt-1.10.1/wget/bin:/opt/vdt-1.10.1/logrotate/sbin:/opt/vdt-1.10.1/perl/bin:/opt/pacman-3.26/bin:/opt/vdt-1.10.1/vdt/sbin:/opt/vdt-1.10.1/vdt/bin:/opt/pacman-3.26/bin:/usr/local/bin:/bin:/usr/bin:/usr/X11R6/bin:/home/torqueuser/bin<br>
[..]<br>
[torqueuser@ip-10-251-214-179 ~]$ </small></small><br>
<br>
<br>
On 4/29/2010 11:18 AM, Mihael Hategan wrote:
<blockquote cite="mid:1272557888.17680.15.camel@localhost" type="cite">
<pre wrap="">On Thu, 2010-04-29 at 10:57 -0500, Michael Wilde wrote:
</pre>
<blockquote type="cite">
<pre wrap="">OK, thanks. Its not clear to me exactly whats happening, but I get the
high-level idea that it relates to trust relationships that get broken
because of differences in DN settings and/or interpretations.
</pre>
</blockquote>
<pre wrap="">
No. It's something that someone while writing up GSI thought was going
to make things easier. Well, it doesn't and it makes things unsecure.
But once in, it never changed.
Normally, when you connect to bankofamerica.com, the browser resolves
that name to an IP, contacts that IP, gets a certificate and checks the
DN against the name you typed.
In GSI, when you connect to bankofamerica.com, the browser resolves that
name to an IP, contacts that IP, gets a certificate, does a
reverse-resolution on that IP and then checks the DN of the cert against
the reverse-resolved name of the IP. That reverse-resolved name may not
be bankofamerica.com.
This was done to provide easy (for the sysadmin) ways of having multiple
DNS entries be used with the same machine. The problem is that it also
fails for some scenarios (like the one we have). Not only that, it is an
abomination in terms of security since impersonating a service can now
be done with DNS hacks instead of the more difficult schemes involving
cracking RSA/DSA.
</pre>
<blockquote type="cite">
<pre wrap="">
Yi, can you try gt2:pbs?
Mihael, at some point can you post a note explaining the issues?
I think we need to document or automate/fix the various interactions between coasters and GSI:
- this new issue/restriction with gt2:gt2:pbs
- the GSI needs and user config procedures for ssh:pbs
Thanks,
Mike
----- "Mihael Hategan" <a class="moz-txt-link-rfc2396E" href="mailto:hategan@mcs.anl.gov"><hategan@mcs.anl.gov></a> wrote:
</pre>
<blockquote type="cite">
<pre wrap="">The host cert isn't incorrect. It's GSI with its silly reverse lookup
that causes things to fail.
gt2:pbs should work (assuming the pbs provider does).
On Wed, 2010-04-28 at 23:54 -0500, Michael Wilde wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Mihael,
Can you post an update on Yi's problem in getting coasters running
</pre>
</blockquote>
<pre wrap="">over Nimbus/AWS?
</pre>
<blockquote type="cite">
<pre wrap="">Easy to fix or hard?
Should he try SSH for the coaster launch? (jobmanager=ssh:pbs ???)
Thanks,
Mike
</pre>
</blockquote>
</blockquote>
<pre wrap="">
</pre>
</blockquote>
<pre wrap="">
</pre>
</blockquote>
<br>
</body>
</html>