<div dir="ltr"><div><div><div>Hi Smith<br></div><div> Thanks a lot for your reply. I'm sorry to reply to you so lately.<br></div><div> Your suggestion help me fix that problem. The IP address was wrong in /etc/hosts. <br> But there is a new problem.<br> on VM2, the following error is reported in /var/www/arvados-api/shared/log/production.log:<br>Faraday::Error::ConnectionFailed (SSL_connect returned=1 errno=0 state=unknown state: certificate verify failed):<br> app/middlewares/arvados_api_token.rb:59:in `call'<br></div><div> <br></div><div> Is it due to my self-signed certificate?<br></div><div> I greatly appreciate your reply and help. Thanks a lot !<br><br></div>Yours <br></div>Faithfully <br></div>Long<br></div><div class="gmail_extra"><br><div class="gmail_quote">2016-05-11 4:57 GMT+08:00 Brett Smith <span dir="ltr"><<a href="mailto:brett@curoverse.com" target="_blank">brett@curoverse.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF">
<div><span class="">
<p style="margin:1.2em 0px!important">On 05/09/2016 03:55 AM,
Pang Long wrote:</p>
<p style="margin:1.2em 0px!important"></p>
<div>
<p></p>
<blockquote type="cite">
<div dir="ltr"><br>
<div>
<ul>
<li><b> </b><b><b>on API/Git/Workbench server, on
VM1</b> , /var/log/nginx/error.log:</b></li>
</ul>
App 24530 stdout: (joshid) Callback phase initiated. <br>
App 23772 stdout: (joshid) Authentication failure!
timeout: Errno::ETIMEDOUT, Connection timed out -
connect(2) for "auth.xyworkflow" port 443<br>
</div>
</div>
</blockquote>
<p></p>
</div>
<p style="margin:1.2em 0px!important"></p>
</span><p style="margin:1.2em 0px!important">Pang,</p>
<p style="margin:1.2em 0px!important">The message here is the
fundamental error. After the user successfully authenticates
with the SSO server, their browser is redirected to the API
server. Then, the API server makes <em>its own request</em> to
the SSO server to get an authorization token. The error suggests
that the API server’s attempt to make this connection times out.</p>
<p style="margin:1.2em 0px!important">Is the API server able
to resolve the SSO server name <code style="font-size:0.85em;font-family:Consolas,Inconsolata,Courier,monospace;margin:0px 0.15em;padding:0px 0.3em;white-space:pre-wrap;border:1px solid rgb(234,234,234);background-color:rgb(248,248,248);border-radius:3px;display:inline">auth.xyworkflow</code>?
Does the SSO server accept connections on port 443 from the API
server?</p>
<p style="margin:1.2em 0px!important">The logs below from the
SSO server suggest that all those authentication steps completed
successfully, so there’s nothing to worry about there.</p>
<p style="margin:1.2em 0px!important">Hope this helps,</p>
<p style="margin:1.2em 0px!important"></p>
<div>
<p></p>
<blockquote type="cite"><span class="">
<div dir="ltr">
<div>
<ul>
<li><b> </b><b><b>on SSO server, on VM2</b>,
/var/www/arvados-sso/shared/log/production.log</b></li>
</ul>
</div>
Started GET "/users/sign_in" for 127.0.0.1 at 2016-05-09
15:15:42 +0800<br>
Processing by SessionsController#new as HTML<br>
Rendered sessions/new.html.erb within layouts/application
(3.0ms)<br>
Rendered application/_links.html.erb (0.6ms)<br>
Completed 200 OK in 11ms (Views: 10.3ms | ActiveRecord:
0.0ms)<br>
<br>
<br>
Started POST "/users/sign_in" for 127.0.0.1 at 2016-05-09
15:15:47 +0800<br>
Processing by SessionsController#create as HTML<br>
Parameters: {"utf8"=>"✓",
"authenticity_token"=>"E7K5dpfrnKLAY3e2djlpYZpPy5Ll1iibNADIKRYZN5I=",
"user"=>{"email"=>"<a href="mailto:hitpanglong@163.com" target="_blank">hitpanglong@163.com</a>",
"password"=>"[FILTERED]"}, "commit"=>"Sign in"}<br>
Redirected to <a href="https://auth.xyworkflow/auth/josh_id/authorize?response_type=code&client_id=arvados-server&redirect_uri=https%3A%2F%2Fplm16.xyworkflow%2Fauth%2Fjoshid%2Fcallback%3Freturn_to%3Dhttps%253A%252F%252Fworkbench.plm16.xyworkflow%252Fusers%252Fwelcome%253Freturn_to%253D%25252F&auth_provider&state=7da100019dd1b4b002d5eebc245c8c3633e9ff57df8ad4ab" target="_blank">https://auth.xyworkflow/auth/josh_id/authorize?response_type=code&client_id=arvados-server&redirect_uri=https%3A%2F%2Fplm16.xyworkflow%2Fauth%2Fjoshid%2Fcallback%3Freturn_to%3Dhttps%253A%252F%252Fworkbench.plm16.xyworkflow%252Fusers%252Fwelcome%253Freturn_to%253D%25252F&auth_provider&state=7da100019dd1b4b002d5eebc245c8c3633e9ff57df8ad4ab</a><br>
Completed 302 Found in 64ms (ActiveRecord: 0.3ms)<br>
<br>
<br>
Started GET
"/auth/josh_id/authorize?response_type=code&client_id=arvados-server&redirect_uri=https%3A%2F%2Fplm16.xyworkflow%2Fauth%2Fjoshid%2Fcallback%3Freturn_to%3Dhttps%253A%252F%252Fworkbench.plm16.xyworkflow%252Fusers%252Fwelcome%253Freturn_to%253D%25252F&auth_provider&state=7da100019dd1b4b002d5eebc245c8c3633e9ff57df8ad4ab"
for 127.0.0.1 at 2016-05-09 15:15:47 +0800<br>
Processing by AuthController#authorize as HTML<br>
Parameters: {"response_type"=>"code",
"client_id"=>"arvados-server", "redirect_uri"=>"<a href="https://plm16.xyworkflow/auth/joshid/callback?return_to=https%3A%2F%2Fworkbench.plm16.xyworkflow%2Fusers%2Fwelcome%3Freturn_to%3D%252F" target="_blank"></a><a href="https://plm16.xyworkflow/auth/joshid/callback?return_to=https%3A%2F%2Fworkbench.plm16.xyworkflow%2Fusers%2Fwelcome%3Freturn_to%3D%252F" target="_blank">https://plm16.xyworkflow/auth/joshid/callback?return_to=https%3A%2F%2Fworkbench.plm16.xyworkflow%2Fusers%2Fwelcome%3Freturn_to%3D%252F</a>",
"auth_provider"=>nil,
"state"=>"7da100019dd1b4b002d5eebc245c8c3633e9ff57df8ad4ab"}<br>
Redirected to <a href="https://plm16.xyworkflow/auth/joshid/callback?return_to=https%3A%2F%2Fworkbench.plm16.xyworkflow%2Fusers%2Fwelcome%3Freturn_to%3D%252F&code=4f21d265337016b00e9889c852a2a594&response_type=code&state=7da100019dd1b4b002d5eebc245c8c3633e9ff57df8ad4ab" target="_blank">https://plm16.xyworkflow/auth/joshid/callback?return_to=https%3A%2F%2Fworkbench.plm16.xyworkflow%2Fusers%2Fwelcome%3Freturn_to%3D%252F&code=4f21d265337016b00e9889c852a2a594&response_type=code&state=7da100019dd1b4b002d5eebc245c8c3633e9ff57df8ad4ab</a><br>
Completed 302 Found in 4ms (ActiveRecord: 2.1ms)</div>
<br>
<fieldset></fieldset>
<br>
</span><pre>_______________________________________________
arvados mailing list
<a href="mailto:arvados@arvados.org" target="_blank">arvados@arvados.org</a>
<a href="http://lists.arvados.org/mailman/listinfo/arvados" target="_blank">http://lists.arvados.org/mailman/listinfo/arvados</a>
</pre>
</blockquote>
<p></p>
</div>
<p style="margin:1.2em 0px!important"></p>
<div title="MDH:PGRpdiBjbGFzcz0ibW96LWNpdGUtcHJlZml4Ij5PbiAwNS8wOS8yMDE2IDAzOjU1IEFNLCBQYW5nIExvbmcgd3JvdGU6PGJyPjwvZGl2PjxibG9ja3F1b3RlIGNpdGU9Im1pZDpDQURrWmt2Yzl0UDhf
c0pPUVk4VEptT0RGPUNMV0tOZkNQcWVfMnZQNjRFQTlZNzk3Q0FAbWFpbC5nbWFpbC5jb20iIHR5
cGU9ImNpdGUiPjxkaXYgZGlyPSJsdHIiPjxicj48ZGl2Pjx1bD48bGk+PGI+Jm5ic3A7Jm5ic3A7
Jm5ic3A7IDwvYj48Yj48Yj5vbiBBUEkvR2l0L1dvcmtiZW5jaCBzZXJ2ZXIsIG9uIFZNMTwvYj4g
LCAvdmFyL2xvZy9uZ2lueC9lcnJvci5sb2c6PC9iPjwvbGk+PC91bD5BcHAgMjQ1MzAgc3Rkb3V0
OiAoam9zaGlkKSBDYWxsYmFjayBwaGFzZSBpbml0aWF0ZWQuIDxicj5BcHAKIDIzNzcyIHN0ZG91
dDogKGpvc2hpZCkgQXV0aGVudGljYXRpb24gZmFpbHVyZSEgdGltZW91dDogCkVycm5vOjpFVElN
RURPVVQsIENvbm5lY3Rpb24gdGltZWQgb3V0IC0gY29ubmVjdCgyKSBmb3IgCiJhdXRoLnh5d29y
a2Zsb3ciIHBvcnQgNDQzPGJyPjwvZGl2PjwvZGl2PjwvYmxvY2txdW90ZT5QYW5nLDxicj48YnI+
VGhlIG1lc3NhZ2UgaGVyZSBpcyB0aGUgZnVuZGFtZW50YWwgZXJyb3IuwqAgQWZ0ZXIgdGhlIHVz
ZXIgc3VjY2Vzc2Z1bGx5IGF1dGhlbnRpY2F0ZXMgd2l0aCB0aGUgU1NPIHNlcnZlciwgdGhlaXIg
YnJvd3NlciBpcyByZWRpcmVjdGVkIHRvIHRoZSBBUEkgc2VydmVyLsKgIFRoZW4sIHRoZSBBUEkg
c2VydmVyIG1ha2VzICppdHMgb3duIHJlcXVlc3QqIHRvIHRoZSBTU08gc2VydmVyIHRvIGdldCBh
biBhdXRob3JpemF0aW9uIHRva2VuLsKgIFRoZSBlcnJvciBzdWdnZXN0cyB0aGF0IHRoZSBBUEkg
c2VydmVyJ3MgYXR0ZW1wdCB0byBtYWtlIHRoaXMgY29ubmVjdGlvbiB0aW1lcyBvdXQuPGJyPjxi
cj5JcyB0aGUgQVBJIHNlcnZlciBhYmxlIHRvIHJlc29sdmUgdGhlIFNTTyBzZXJ2ZXIgbmFtZSBg
YXV0aC54eXdvcmtmbG93YD/CoCBEb2VzIHRoZSBTU08gc2VydmVyIGFjY2VwdCBjb25uZWN0aW9u
cyBvbiBwb3J0IDQ0MyBmcm9tIHRoZSBBUEkgc2VydmVyPzxicj48YnI+VGhlIGxvZ3MgYmVsb3cg
ZnJvbSB0aGUgU1NPIHNlcnZlciBzdWdnZXN0IHRoYXQgYWxsIHRob3NlIGF1dGhlbnRpY2F0aW9u
IHN0ZXBzIGNvbXBsZXRlZCBzdWNjZXNzZnVsbHksIHNvIHRoZXJlJ3Mgbm90aGluZyB0byB3b3Jy
eSBhYm91dCB0aGVyZS48YnI+PGJyPkhvcGUgdGhpcyBoZWxwcyw8YnI+PGJyPjxibG9ja3F1b3Rl
IGNpdGU9Im1pZDpDQURrWmt2Yzl0UDhfc0pPUVk4VEptT0RGPUNMV0tOZkNQcWVfMnZQNjRFQTlZ
Nzk3Q0FAbWFpbC5nbWFpbC5jb20iIHR5cGU9ImNpdGUiPjxkaXYgZGlyPSJsdHIiPjxkaXY+PHVs
PjxsaT48Yj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgPC9iPjxiPjxiPm9uIFNTTyBzZXJ2ZXIs
IG9uIFZNMjwvYj4sIC92YXIvd3d3L2FydmFkb3Mtc3NvL3NoYXJlZC9sb2cvcHJvZHVjdGlvbi5s
b2c8L2I+PC9saT48L3VsPjwvZGl2PlN0YXJ0ZWQgR0VUICIvdXNlcnMvc2lnbl9pbiIgZm9yIDEy
Ny4wLjAuMSBhdCAyMDE2LTA1LTA5IDE1OjE1OjQyICswODAwPGJyPlByb2Nlc3NpbmcgYnkgU2Vz
c2lvbnNDb250cm9sbGVyI25ldyBhcyBIVE1MPGJyPiZuYnNwOyBSZW5kZXJlZCBzZXNzaW9ucy9u
ZXcuaHRtbC5lcmIgd2l0aGluIGxheW91dHMvYXBwbGljYXRpb24gKDMuMG1zKTxicj4mbmJzcDsg
UmVuZGVyZWQgYXBwbGljYXRpb24vX2xpbmtzLmh0bWwuZXJiICgwLjZtcyk8YnI+Q29tcGxldGVk
IDIwMCBPSyBpbiAxMW1zIChWaWV3czogMTAuM21zIHwgQWN0aXZlUmVjb3JkOiAwLjBtcyk8YnI+
PGJyPjxicj5TdGFydGVkIFBPU1QgIi91c2Vycy9zaWduX2luIiBmb3IgMTI3LjAuMC4xIGF0IDIw
MTYtMDUtMDkgMTU6MTU6NDcgKzA4MDA8YnI+UHJvY2Vzc2luZyBieSBTZXNzaW9uc0NvbnRyb2xs
ZXIjY3JlYXRlIGFzIEhUTUw8YnI+Jm5ic3A7IFBhcmFtZXRlcnM6IHsidXRmOCI9Jmd0OyLinJMi
LCAiYXV0aGVudGljaXR5X3Rva2VuIj0mZ3Q7IkU3SzVkcGZybktMQVkzZTJkamxwWVpwUHk1TGwx
aWliTkFESUtSWVpONUk9IiwgInVzZXIiPSZndDt7ImVtYWlsIj0mZ3Q7IjxhIG1vei1kby1ub3Qt
c2VuZD0idHJ1ZSIgaHJlZj0ibWFpbHRvOmhpdHBhbmdsb25nQDE2My5jb20iIHRhcmdldD0iX2Js
YW5rIj5oaXRwYW5nbG9uZ0AxNjMuY29tPC9hPiIsICJwYXNzd29yZCI9Jmd0OyJbRklMVEVSRURd
In0sICJjb21taXQiPSZndDsiU2lnbiBpbiJ9PGJyPlJlZGlyZWN0ZWQgdG8gPGEgbW96LWRvLW5v
dC1zZW5kPSJ0cnVlIiBocmVmPSJodHRwczovL2F1dGgueHl3b3JrZmxvdy9hdXRoL2pvc2hfaWQv
YXV0aG9yaXplP3Jlc3BvbnNlX3R5cGU9Y29kZSZhbXA7Y2xpZW50X2lkPWFydmFkb3Mtc2VydmVy
JmFtcDtyZWRpcmVjdF91cmk9aHR0cHMlM0ElMkYlMkZwbG0xNi54eXdvcmtmbG93JTJGYXV0aCUy
Rmpvc2hpZCUyRmNhbGxiYWNrJTNGcmV0dXJuX3RvJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZ3b3Jr
YmVuY2gucGxtMTYueHl3b3JrZmxvdyUyNTJGdXNlcnMlMjUyRndlbGNvbWUlMjUzRnJldHVybl90
byUyNTNEJTI1MjUyRiZhbXA7YXV0aF9wcm92aWRlciZhbXA7c3RhdGU9N2RhMTAwMDE5ZGQxYjRi
MDAyZDVlZWJjMjQ1YzhjMzYzM2U5ZmY1N2RmOGFkNGFiIiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6
Ly9hdXRoLnh5d29ya2Zsb3cvYXV0aC9qb3NoX2lkL2F1dGhvcml6ZT9yZXNwb25zZV90eXBlPWNv
ZGUmYW1wO2NsaWVudF9pZD1hcnZhZG9zLXNlcnZlciZhbXA7cmVkaXJlY3RfdXJpPWh0dHBzJTNB
JTJGJTJGcGxtMTYueHl3b3JrZmxvdyUyRmF1dGglMkZqb3NoaWQlMkZjYWxsYmFjayUzRnJldHVy
bl90byUzRGh0dHBzJTI1M0ElMjUyRiUyNTJGd29ya2JlbmNoLnBsbTE2Lnh5d29ya2Zsb3clMjUy
RnVzZXJzJTI1MkZ3ZWxjb21lJTI1M0ZyZXR1cm5fdG8lMjUzRCUyNTI1MkYmYW1wO2F1dGhfcHJv
dmlkZXImYW1wO3N0YXRlPTdkYTEwMDAxOWRkMWI0YjAwMmQ1ZWViYzI0NWM4YzM2MzNlOWZmNTdk
ZjhhZDRhYjwvYT48YnI+Q29tcGxldGVkIDMwMiBGb3VuZCBpbiA2NG1zIChBY3RpdmVSZWNvcmQ6
IDAuM21zKTxicj48YnI+PGJyPlN0YXJ0ZWQgR0VUICIvYXV0aC9qb3NoX2lkL2F1dGhvcml6ZT9y
ZXNwb25zZV90eXBlPWNvZGUmYW1wO2NsaWVudF9pZD1hcnZhZG9zLXNlcnZlciZhbXA7cmVkaXJl
Y3RfdXJpPWh0dHBzJTNBJTJGJTJGcGxtMTYueHl3b3JrZmxvdyUyRmF1dGglMkZqb3NoaWQlMkZj
YWxsYmFjayUzRnJldHVybl90byUzRGh0dHBzJTI1M0ElMjUyRiUyNTJGd29ya2JlbmNoLnBsbTE2
Lnh5d29ya2Zsb3clMjUyRnVzZXJzJTI1MkZ3ZWxjb21lJTI1M0ZyZXR1cm5fdG8lMjUzRCUyNTI1
MkYmYW1wO2F1dGhfcHJvdmlkZXImYW1wO3N0YXRlPTdkYTEwMDAxOWRkMWI0YjAwMmQ1ZWViYzI0
NWM4YzM2MzNlOWZmNTdkZjhhZDRhYiIgZm9yIDEyNy4wLjAuMSBhdCAyMDE2LTA1LTA5IDE1OjE1
OjQ3ICswODAwPGJyPlByb2Nlc3NpbmcgYnkgQXV0aENvbnRyb2xsZXIjYXV0aG9yaXplIGFzIEhU
TUw8YnI+Jm5ic3A7IFBhcmFtZXRlcnM6IHsicmVzcG9uc2VfdHlwZSI9Jmd0OyJjb2RlIiwgImNs
aWVudF9pZCI9Jmd0OyJhcnZhZG9zLXNlcnZlciIsICJyZWRpcmVjdF91cmkiPSZndDsiPGEgbW96
LWRvLW5vdC1zZW5kPSJ0cnVlIiBocmVmPSJodHRwczovL3BsbTE2Lnh5d29ya2Zsb3cvYXV0aC9q
b3NoaWQvY2FsbGJhY2s/cmV0dXJuX3RvPWh0dHBzJTNBJTJGJTJGd29ya2JlbmNoLnBsbTE2Lnh5
d29ya2Zsb3clMkZ1c2VycyUyRndlbGNvbWUlM0ZyZXR1cm5fdG8lM0QlMjUyRiIgdGFyZ2V0PSJf
YmxhbmsiPmh0dHBzOi8vcGxtMTYueHl3b3JrZmxvdy9hdXRoL2pvc2hpZC9jYWxsYmFjaz9yZXR1
cm5fdG89aHR0cHMlM0ElMkYlMkZ3b3JrYmVuY2gucGxtMTYueHl3b3JrZmxvdyUyRnVzZXJzJTJG
d2VsY29tZSUzRnJldHVybl90byUzRCUyNTJGPC9hPiIsICJhdXRoX3Byb3ZpZGVyIj0mZ3Q7bmls
LCAic3RhdGUiPSZndDsiN2RhMTAwMDE5ZGQxYjRiMDAyZDVlZWJjMjQ1YzhjMzYzM2U5ZmY1N2Rm
OGFkNGFiIn08YnI+UmVkaXJlY3RlZCB0byA8YSBtb3otZG8tbm90LXNlbmQ9InRydWUiIGhyZWY9
Imh0dHBzOi8vcGxtMTYueHl3b3JrZmxvdy9hdXRoL2pvc2hpZC9jYWxsYmFjaz9yZXR1cm5fdG89
aHR0cHMlM0ElMkYlMkZ3b3JrYmVuY2gucGxtMTYueHl3b3JrZmxvdyUyRnVzZXJzJTJGd2VsY29t
ZSUzRnJldHVybl90byUzRCUyNTJGJmFtcDtjb2RlPTRmMjFkMjY1MzM3MDE2YjAwZTk4ODljODUy
YTJhNTk0JmFtcDtyZXNwb25zZV90eXBlPWNvZGUmYW1wO3N0YXRlPTdkYTEwMDAxOWRkMWI0YjAw
MmQ1ZWViYzI0NWM4YzM2MzNlOWZmNTdkZjhhZDRhYiIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8v
cGxtMTYueHl3b3JrZmxvdy9hdXRoL2pvc2hpZC9jYWxsYmFjaz9yZXR1cm5fdG89aHR0cHMlM0El
MkYlMkZ3b3JrYmVuY2gucGxtMTYueHl3b3JrZmxvdyUyRnVzZXJzJTJGd2VsY29tZSUzRnJldHVy
bl90byUzRCUyNTJGJmFtcDtjb2RlPTRmMjFkMjY1MzM3MDE2YjAwZTk4ODljODUyYTJhNTk0JmFt
cDtyZXNwb25zZV90eXBlPWNvZGUmYW1wO3N0YXRlPTdkYTEwMDAxOWRkMWI0YjAwMmQ1ZWViYzI0
NWM4YzM2MzNlOWZmNTdkZjhhZDRhYjwvYT48YnI+Q29tcGxldGVkIDMwMiBGb3VuZCBpbiA0bXMg
KEFjdGl2ZVJlY29yZDogMi4xbXMpPC9kaXY+Cgo8YnI+PGZpZWxkc2V0IGNsYXNzPSJtaW1lQXR0
YWNobWVudEhlYWRlciI+PC9maWVsZHNldD48YnI+PHByZSB3cmFwPSIiPl9fX19fX19fX19fX19f
X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCmFydmFkb3MgbWFpbGluZyBsaXN0CmFy
dmFkb3NAYXJ2YWRvcy5vcmcKaHR0cDovL2xpc3RzLmFydmFkb3Mub3JnL21haWxtYW4vbGlzdGlu
Zm8vYXJ2YWRvcwo8L3ByZT4KCjwvYmxvY2txdW90ZT48YnI+PGJyPg==" style="min-height:0;width:0;max-height:0;max-width:0;overflow:hidden;font-size:0em;padding:0;margin:0"></div><span class="HOEnZb"><font color="#888888">
</font></span></div><span class="HOEnZb"><font color="#888888">
<div>-- <br>
Brett Smith<br>
Product Manager, Curoverse</div>
</font></span></div>
</blockquote></div><br></div>