[arvados] Help on Login of Arvados Workbench.

Pang Long hitpanglong at gmail.com
Fri May 27 04:56:06 EDT 2016


Hi Smith
    Thanks a lot for your reply. I'm sorry to reply to you so lately.
    Your suggestion help me fix that problem. The IP address was wrong in
/etc/hosts.
    But there is a new problem.
    on VM2, the following error is reported in
/var/www/arvados-api/shared/log/production.log:
Faraday::Error::ConnectionFailed (SSL_connect returned=1 errno=0
state=unknown state: certificate verify failed):
  app/middlewares/arvados_api_token.rb:59:in `call'

    Is it due to my self-signed certificate?
    I greatly appreciate your reply and help. Thanks a lot !

Yours
Faithfully
Long

2016-05-11 4:57 GMT+08:00 Brett Smith <brett at curoverse.com>:

> On 05/09/2016 03:55 AM, Pang Long wrote:
>
>
>
>    -     *on API/Git/Workbench server, on VM1 , /var/log/nginx/error.log:*
>
> App 24530 stdout: (joshid) Callback phase initiated.
> App 23772 stdout: (joshid) Authentication failure! timeout:
> Errno::ETIMEDOUT, Connection timed out - connect(2) for "auth.xyworkflow"
> port 443
>
> Pang,
>
> The message here is the fundamental error. After the user successfully
> authenticates with the SSO server, their browser is redirected to the API
> server. Then, the API server makes *its own request* to the SSO server to
> get an authorization token. The error suggests that the API server’s
> attempt to make this connection times out.
>
> Is the API server able to resolve the SSO server name auth.xyworkflow?
> Does the SSO server accept connections on port 443 from the API server?
>
> The logs below from the SSO server suggest that all those authentication
> steps completed successfully, so there’s nothing to worry about there.
>
> Hope this helps,
>
>
>    -      *on SSO server, on VM2,
>    /var/www/arvados-sso/shared/log/production.log*
>
> Started GET "/users/sign_in" for 127.0.0.1 at 2016-05-09 15:15:42 +0800
> Processing by SessionsController#new as HTML
>   Rendered sessions/new.html.erb within layouts/application (3.0ms)
>   Rendered application/_links.html.erb (0.6ms)
> Completed 200 OK in 11ms (Views: 10.3ms | ActiveRecord: 0.0ms)
>
>
> Started POST "/users/sign_in" for 127.0.0.1 at 2016-05-09 15:15:47 +0800
> Processing by SessionsController#create as HTML
>   Parameters: {"utf8"=>"✓",
> "authenticity_token"=>"E7K5dpfrnKLAY3e2djlpYZpPy5Ll1iibNADIKRYZN5I=",
> "user"=>{"email"=>"hitpanglong at 163.com", "password"=>"[FILTERED]"},
> "commit"=>"Sign in"}
> Redirected to
> https://auth.xyworkflow/auth/josh_id/authorize?response_type=code&client_id=arvados-server&redirect_uri=https%3A%2F%2Fplm16.xyworkflow%2Fauth%2Fjoshid%2Fcallback%3Freturn_to%3Dhttps%253A%252F%252Fworkbench.plm16.xyworkflow%252Fusers%252Fwelcome%253Freturn_to%253D%25252F&auth_provider&state=7da100019dd1b4b002d5eebc245c8c3633e9ff57df8ad4ab
> Completed 302 Found in 64ms (ActiveRecord: 0.3ms)
>
>
> Started GET
> "/auth/josh_id/authorize?response_type=code&client_id=arvados-server&redirect_uri=https%3A%2F%2Fplm16.xyworkflow%2Fauth%2Fjoshid%2Fcallback%3Freturn_to%3Dhttps%253A%252F%252Fworkbench.plm16.xyworkflow%252Fusers%252Fwelcome%253Freturn_to%253D%25252F&auth_provider&state=7da100019dd1b4b002d5eebc245c8c3633e9ff57df8ad4ab"
> for 127.0.0.1 at 2016-05-09 15:15:47 +0800
> Processing by AuthController#authorize as HTML
>   Parameters: {"response_type"=>"code", "client_id"=>"arvados-server",
> "redirect_uri"=>"
> <https://plm16.xyworkflow/auth/joshid/callback?return_to=https%3A%2F%2Fworkbench.plm16.xyworkflow%2Fusers%2Fwelcome%3Freturn_to%3D%252F>
> https://plm16.xyworkflow/auth/joshid/callback?return_to=https%3A%2F%2Fworkbench.plm16.xyworkflow%2Fusers%2Fwelcome%3Freturn_to%3D%252F",
> "auth_provider"=>nil,
> "state"=>"7da100019dd1b4b002d5eebc245c8c3633e9ff57df8ad4ab"}
> Redirected to
> https://plm16.xyworkflow/auth/joshid/callback?return_to=https%3A%2F%2Fworkbench.plm16.xyworkflow%2Fusers%2Fwelcome%3Freturn_to%3D%252F&code=4f21d265337016b00e9889c852a2a594&response_type=code&state=7da100019dd1b4b002d5eebc245c8c3633e9ff57df8ad4ab
> Completed 302 Found in 4ms (ActiveRecord: 2.1ms)
>
>
> _______________________________________________
> arvados mailing listarvados at arvados.orghttp://lists.arvados.org/mailman/listinfo/arvados
>
>> --
> Brett Smith
> Product Manager, Curoverse
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.arvados.org/pipermail/arvados/attachments/20160527/1897d7d3/attachment.html>


More information about the arvados mailing list