search

c-scale-community / use-case-aquamonitor

Apache License 2.0
2 stars 1 forks source link

Access to INCD OpenStack #6

Closed backeb closed 2 years ago

backeb commented 3 years ago

Hi @mariojmdavid

I'm Anna van Gils from Deltares and I should have access to the Aquamonitor recourses as well. I registered my credentials with EGI SSO (https://www.egi.eu/sso). My mail adress is anna.vangils@deltares.nl, username gilsa

Can you link my account so I can access the OpenStack environment?

Regards,

Anna

Hi @avgils, you need to get membership into the VO. this should be the right link: https://perun.egi.eu/gui/registrar/?vo=aquamonitor

Originally posted by @enolfc in https://github.com/c-scale-community/use-case-aquamonitor/issues/4#issuecomment-851373282

backeb commented 3 years ago

Hi @mariojmdavid

When @avgils follows the link to register: https://perun.egi.eu/gui/registrar/?vo=aquamonitor

She gets the below: image

Can you advise on how to overcome this issue please? cc @enolfc @sebastian-luna-valero

enolfc commented 3 years ago

You should have received an email for completing first the registration to EGI Check-in hat has a link to confirm the account. If you don't have it, let us know.

avgils commented 3 years ago

The following steps resulated in access to the openstack evironment:

This was a really difficult process. I should not take hours scatterd over days to get access. This procedure to get access should be fixed.

mariojmdavid commented 3 years ago

@avgils I agree and this is something that is bugging us for years now, Enol, Nicolas (EGI Checkin) and several other have tried to debug this with me to no avail

can you and/or @backeb and/or @enol test the following when you get to this error through the egi-checkin authentication, instead of removing the duplicate, put only

https://stratus.ncg.ingrid.pt/ and enter a second time through the egi-checkin

sebastian-luna-valero commented 3 years ago

Hi,

I just tested it.

Pasting https://stratus.ncg.ingrid.pt/ brings me back to: imagen

However, when I select "EGI Checkin": imagen

It logs in automatically. I hope that helps.

Best regards, Sebastian

backeb commented 3 years ago

Hi @mariojmdavid

I followed the link to https://stratus.ncg.ingrid.pt/dashboard/auth/login/?next=/dashboard/project/ and logged in via EGI Checkin which sent me to the 401 error.

I then copy-pasted https://stratus.ncg.ingrid.pt/ into my browser and logged into the OpenStack Dashboard using EGI Checkin which then took me to the OpenStack dashboard!

So, although not a very smooth workflow, it works.

mariojmdavid commented 3 years ago

hi all the issue is solved, there is no duplicate in the url anymore, but please test it if ok, I think you can close this issue

sebastian-luna-valero commented 3 years ago

It works great, thank you very much @mariojmdavid

backeb commented 3 years ago

Hi @mariojmdavid

I followed the link to https://stratus.ncg.ingrid.pt/, selected EGI SSO and clicked the login process and got to the dashboard! So also from me, I can confirm it work. Nice work!

mariojmdavid commented 3 years ago

if you see fit, close the issue

backeb commented 3 years ago

Hi @mariojmdavid

For some reason when I now follow the link to https://stratus.ncg.ingrid.pt/, select EGI Checkin and click through the login process I get an error: {"error":{"code":401,"message":"The request you have made requires authentication.","title":"Unauthorized"}}

I tried in both normal and incognito windows.

Has something changed?

cc @sebastian-luna-valero

sebastian-luna-valero commented 3 years ago

Hi,

I have just tried as well and I don't see the aquamonitor project in OpenStack when I log in.

In case it is relevant, I will also copy this here: https://github.com/c-scale-community/use-case-hisea/issues/5#issuecomment-891814006

Not sure whether that's related.

Best regards, Sebastian

jopina commented 3 years ago

Hi Bjorn,

I'm able to access INCD openstack using a federated access trough check-in nevertheless I can't test access to the aquamonitor because i'm not part of the VO. Can you ad me or tell me how I can request acess?

Cheers

Joao Pina

On 8/3/21 3:07 PM, Sebastian Luna-Valero wrote:

Hi,

I have just tried as well and I don't see the |aquamonitor| project in OpenStack when I log in.

In case it is relevant, I will also copy this here: c-scale-community/use-case-hisea#5 (comment) https://github.com/c-scale-community/use-case-hisea/issues/5#issuecomment-891814006

Not sure whether that's related.

Best regards, Sebastian

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/c-scale-community/use-case-aquamonitor/issues/6#issuecomment-891876894, or unsubscribe https://github.com/notifications/unsubscribe-auth/ADVKHH2ZFD2D2QTVVNJREJLT27ZZVANCNFSM453BDGWA. Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&utm_campaign=notification-email.

sebastian-luna-valero commented 3 years ago

Hi @jopina

Please request access to the aquamonitor VO by accessing: https://perun.egi.eu/fed/registrar/?vo=aquamonitor

You should get to a screen like this one: https://github.com/c-scale-community/use-case-aquamonitor/issues/1#issuecomment-842114208

Please click on It's not me and that should trigger your request.

Then @backeb will receive a notification to approve it.

I hope that helps.

Best regards, Sebastian

jopina commented 3 years ago

Hi Sebastion,

Perfect waiting for aproval now :)

Cheers

Joao pina

On 8/4/21 11:23 AM, Sebastian Luna-Valero wrote:

Hi @jopina https://github.com/jopina

Please request access to the aquamonitor VO by accessing: https://perun.egi.eu/fed/registrar/?vo=aquamonitor https://perun.egi.eu/fed/registrar/?vo=aquamonitor

You should get to a screen like this one: #1 (comment) https://github.com/c-scale-community/use-case-aquamonitor/issues/1#issuecomment-842114208

Please click on |It's not me| and that should trigger your request.

Then @backeb https://github.com/backeb will receive a notification to approve it.

I hope that helps.

Best regards, Sebastian

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/c-scale-community/use-case-aquamonitor/issues/6#issuecomment-892544615, or unsubscribe https://github.com/notifications/unsubscribe-auth/ADVKHHZ6WZNWG46U6SO57VTT3EILVANCNFSM453BDGWA. Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&utm_campaign=notification-email.

backeb commented 3 years ago

Hi @jopina

I have just approved the request.

Cheers Bjorn

mariojmdavid commented 3 years ago

@backeb and @sebastian-luna-valero can you login in https://aai.egi.eu/ in the top right in your username click and you will see "My EGI user community identity" click there then send me your "Identifiers" something like

nnnnnn@egi.eu (ePUID) below you Name

mariojmdavid commented 3 years ago

enter again in stratus with EGI checkin and put date/time as approximate as possible, so I can get in recent logs

sebastian-luna-valero commented 3 years ago

Hi,

My EGI ID: 5722[...]92c94e@egi.eu

Access date and time: 9th Aug 2021, 5.36pm CEST

Many thanks, Sebastian

backeb commented 3 years ago

Hi @mariojmdavid,

My EGI ID: bd94[...]f9b131e74@egi.eu

Access date and time: 10 August, 10h30 CET

Cheers Bjorn

mariojmdavid commented 3 years ago

hi, can you both do it again, I had to increase the logging to debug, otherwise nothing strange shows also put the aproximate timestamp

backeb commented 3 years ago

Hi @mariojmdavid

Retried at approx 13:09 CET

sebastian-luna-valero commented 3 years ago

Hi,

Access date and time: 10th Aug, 1.07pm CEST.

Please bear in mind this as well: https://github.com/c-scale-community/use-case-hisea/issues/5#issuecomment-891814006

i.e., I am seeing double group in: 

urn:mace:egi.eu:group:group:aquamonitor:role=member#aai.egi.eu

In case it's relevant.

Best regards, Sebastian

mariojmdavid commented 3 years ago

that it is very relevant and probably the source of the trouble, please try again now, I have added the duplicate in the mapping

backeb commented 3 years ago

@mariojmdavid I'v retried (14:26 CET), but still get the same error. I used an incognito window.

sebastian-luna-valero commented 3 years ago

Hi,

I confirm I don't see the aquamonitor project in OpenStack yet.

Access date and time: 10th Aug, 2.30pm CEST.

Best regards, Sebastian

backeb commented 3 years ago

@mariojmdavid I'v retried (14:26 CET), but still get the same error. I used an incognito window.

To be clear I get this error after I try logging into the OpenStack using EGI SSO: {"error":{"code":401,"message":"The request you have made requires authentication.","title":"Unauthorized"}}

mariojmdavid commented 3 years ago

please try again now seems to be

urn:mace:egi.eu:group:group:aquamonitor:role=member#aai.egi.eu

before urn:mace:egi.eu:group:group:aquamonitor:members:role=member#aai.egi.eu$

sebastian-luna-valero commented 3 years ago

It works for me now, many thanks @mariojmdavid

backeb commented 3 years ago

@mariojmdavid can confirm that I have access to the OpenStack again 💪

mariojmdavid commented 3 years ago

thanks ok, so the real point and this has to be taken to either perun (or EGI Checkin) is they changed the entitlement, and it seems it affected all VOs (or at least 2) and have not notified the resource providers

enolfc commented 3 years ago

@mariojmdavid I have contacted Check-in about this with you in CC I was also not aware of the change and indeed this shouldn't happen without clear notification. Let's dig the issue so we can avoid similar situations in the future

sebastian-luna-valero commented 3 years ago

Thanks All, I have access again with entitlement urn:mace:egi.eu:group:aquamonitor:role=member#aai.egi.eu