Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Access to INCD OpenStack #6

Closed
backeb opened this issue May 31, 2021 · 33 comments
Closed

Access to INCD OpenStack #6

backeb opened this issue May 31, 2021 · 33 comments
Assignees
@mariojmdavid

Comments

@backeb
Copy link
Contributor

backeb commented May 31, 2021

Hi @mariojmdavid

I'm Anna van Gils from Deltares and I should have access to the Aquamonitor recourses as well. I registered my credentials with EGI SSO (https://www.egi.eu/sso). My mail adress is anna.vangils@deltares.nl, username gilsa

Can you link my account so I can access the OpenStack environment?

Regards,

Anna

Hi @avgils, you need to get membership into the VO. this should be the right link: https://perun.egi.eu/gui/registrar/?vo=aquamonitor

Originally posted by @enolfc in #4 (comment)
@backeb
Copy link
Contributor Author

backeb commented May 31, 2021 •
edited

Hi @mariojmdavid

When @avgils follows the link to register: https://perun.egi.eu/gui/registrar/?vo=aquamonitor

She gets the below:
image

Can you advise on how to overcome this issue please?
cc @enolfc @sebastian-luna-valero

@enolfc
Copy link

enolfc commented Jun 1, 2021

You should have received an email for completing first the registration to EGI Check-in hat has a link to confirm the account. If you don't have it, let us know.

@avgils
Copy link
Contributor

avgils commented Jun 1, 2021 •
edited

The following steps resulated in access to the openstack evironment:

MicrosoftTeams-image

This was a really difficult process. I should not take hours scatterd over days to get access. This procedure to get access should be fixed.

@mariojmdavid
Copy link

@avgils I agree and this is something that is bugging us for years now, Enol, Nicolas (EGI Checkin) and several other have tried to debug this with me to no avail

can you and/or @backeb and/or @enol test the following
when you get to this error through the egi-checkin authentication, instead of removing the duplicate, put only

https://stratus.ncg.ingrid.pt/
and enter a second time through the egi-checkin

@sebastian-luna-valero
Copy link
Contributor

Hi,

I just tested it.

Pasting https://stratus.ncg.ingrid.pt/ brings me back to:
imagen

However, when I select "EGI Checkin":
imagen

It logs in automatically. I hope that helps.

Best regards,
Sebastian

@backeb
Copy link
Contributor Author

backeb commented Jun 16, 2021

Hi @mariojmdavid

I followed the link to https://stratus.ncg.ingrid.pt/dashboard/auth/login/?next=/dashboard/project/ and logged in via EGI Checkin which sent me to the 401 error.

I then copy-pasted https://stratus.ncg.ingrid.pt/ into my browser and logged into the OpenStack Dashboard using EGI Checkin which then took me to the OpenStack dashboard!

So, although not a very smooth workflow, it works.

@mariojmdavid
Copy link

hi all
the issue is solved, there is no duplicate in the url anymore, but please test it
if ok, I think you can close this issue

@sebastian-luna-valero
Copy link
Contributor

It works great, thank you very much @mariojmdavid

@backeb
Copy link
Contributor Author

backeb commented Jun 28, 2021

Hi @mariojmdavid

I followed the link to https://stratus.ncg.ingrid.pt/, selected EGI SSO and clicked the login process and got to the dashboard! So also from me, I can confirm it work. Nice work!

@mariojmdavid
Copy link

if you see fit, close the issue

@backeb backeb closed this as completed Jun 29, 2021
@backeb
Copy link
Contributor Author

backeb commented Aug 3, 2021

Hi @mariojmdavid

For some reason when I now follow the link to https://stratus.ncg.ingrid.pt/, select EGI Checkin and click through the login process I get an error:
{"error":{"code":401,"message":"The request you have made requires authentication.","title":"Unauthorized"}}

I tried in both normal and incognito windows.

Has something changed?

cc @sebastian-luna-valero

@backeb backeb reopened this Aug 3, 2021
@sebastian-luna-valero
Copy link
Contributor

Hi,

I have just tried as well and I don't see the aquamonitor project in OpenStack when I log in.

In case it is relevant, I will also copy this here:
c-scale-community/workflow-coastal-hydrowaq#5 (comment)

Not sure whether that's related.

Best regards,
Sebastian

@jopina
Copy link

jopina commented Aug 4, 2021 via email

@sebastian-luna-valero
Copy link
Contributor

Hi @jopina

Please request access to the aquamonitor VO by accessing:
https://perun.egi.eu/fed/registrar/?vo=aquamonitor

You should get to a screen like this one: #1 (comment)

Please click on It's not me and that should trigger your request.

Then @backeb will receive a notification to approve it.

I hope that helps.

Best regards,
Sebastian

@jopina
Copy link

jopina commented Aug 4, 2021 via email

@backeb
Copy link
Contributor Author

backeb commented Aug 4, 2021

Hi @jopina

I have just approved the request.

Cheers
Bjorn

@mariojmdavid
Copy link

@backeb and @sebastian-luna-valero can you login in
https://aai.egi.eu/
in the top right in your username click and you will see "My EGI user community identity" click there
then send me your "Identifiers" something like

nnnnnn@egi.eu (ePUID)
below you Name

@mariojmdavid
Copy link

enter again in stratus with EGI checkin and put date/time as approximate as possible, so I can get in recent logs

@sebastian-luna-valero
Copy link
Contributor

Hi,

My EGI ID: 5722[...]92c94e@egi.eu

Access date and time: 9th Aug 2021, 5.36pm CEST

Many thanks,
Sebastian

@backeb
Copy link
Contributor Author

backeb commented Aug 10, 2021

Hi @mariojmdavid,

My EGI ID: bd94[...]f9b131e74@egi.eu

Access date and time: 10 August, 10h30 CET

Cheers
Bjorn

@mariojmdavid
Copy link

hi, can you both do it again, I had to increase the logging to debug, otherwise nothing strange shows
also put the aproximate timestamp

@backeb
Copy link
Contributor Author

backeb commented Aug 10, 2021

Hi @mariojmdavid

Retried at approx 13:09 CET

@sebastian-luna-valero
Copy link
Contributor

Hi,

Access date and time: 10th Aug, 1.07pm CEST.

Please bear in mind this as well:
c-scale-community/workflow-coastal-hydrowaq#5 (comment)

i.e., I am seeing double group in:

urn:mace:egi.eu:group:group:aquamonitor:role=member#aai.egi.eu

In case it's relevant.

Best regards,
Sebastian

@mariojmdavid
Copy link

that it is very relevant and probably the source of the trouble, please try again now, I have added the duplicate in the mapping

@backeb
Copy link
Contributor Author

backeb commented Aug 10, 2021

@mariojmdavid I'v retried (14:26 CET), but still get the same error.
I used an incognito window.

@sebastian-luna-valero
Copy link
Contributor

Hi,

I confirm I don't see the aquamonitor project in OpenStack yet.

Access date and time: 10th Aug, 2.30pm CEST.

Best regards,
Sebastian

@backeb
Copy link
Contributor Author

backeb commented Aug 10, 2021

@mariojmdavid I'v retried (14:26 CET), but still get the same error.
I used an incognito window.

To be clear I get this error after I try logging into the OpenStack using EGI SSO:
{"error":{"code":401,"message":"The request you have made requires authentication.","title":"Unauthorized"}}

@mariojmdavid
Copy link

please try again now
seems to be

urn:mace:egi.eu:group:group:aquamonitor:role=member#aai.egi.eu

before
urn:mace:egi.eu:group:group:aquamonitor:members:role=member#aai.egi.eu$

@sebastian-luna-valero
Copy link
Contributor

It works for me now, many thanks @mariojmdavid

@backeb
Copy link
Contributor Author

backeb commented Aug 10, 2021

@mariojmdavid can confirm that I have access to the OpenStack again 💪

@mariojmdavid
Copy link

thanks
ok, so the real point and this has to be taken to either perun (or EGI Checkin) is
they changed the entitlement, and it seems it affected all VOs (or at least 2) and have not notified the resource providers

@enolfc
Copy link

enolfc commented Aug 17, 2021

@mariojmdavid I have contacted Check-in about this with you in CC
I was also not aware of the change and indeed this shouldn't happen without clear notification. Let's dig the issue so we can avoid similar situations in the future

@sebastian-luna-valero
Copy link
Contributor

Thanks All, I have access again with entitlement urn:mace:egi.eu:group:aquamonitor:role=member#aai.egi.eu

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@mariojmdavid mariojmdavid

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
6 participants
@enolfc @sebastian-luna-valero @mariojmdavid @avgils @jopina @backeb