[arvados] Help on Login of Arvados Workbench.

[Brett Smith]

On 05/09/2016 03:55 AM, Pang Long wrote:

>
>   * *    ***on API/Git/Workbench server, on VM1* ,
>     /var/log/nginx/error.log:*
>
> App 24530 stdout: (joshid) Callback phase initiated.
> App 23772 stdout: (joshid) Authentication failure! timeout:
> Errno::ETIMEDOUT, Connection timed out - connect(2) for
> "auth.xyworkflow" port 443

Pang,

The message here is the fundamental error. After the user successfully
authenticates with the SSO server, their browser is redirected to the
API server. Then, the API server makes /its own request/ to the SSO
server to get an authorization token. The error suggests that the API
server’s attempt to make this connection times out.

Is the API server able to resolve the SSO server name |auth.xyworkflow|?
Does the SSO server accept connections on port 443 from the API server?

The logs below from the SSO server suggest that all those authentication
steps completed successfully, so there’s nothing to worry about there.

Hope this helps,

>   * *     ***on SSO server, on VM2*,
>     /var/www/arvados-sso/shared/log/production.log*
>
> Started GET "/users/sign_in" for 127.0.0.1 at 2016-05-09 15:15:42 +0800
> Processing by SessionsController#new as HTML
>   Rendered sessions/new.html.erb within layouts/application (3.0ms)
>   Rendered application/_links.html.erb (0.6ms)
> Completed 200 OK in 11ms (Views: 10.3ms | ActiveRecord: 0.0ms)
>
>
> Started POST "/users/sign_in" for 127.0.0.1 at 2016-05-09 15:15:47 +0800
> Processing by SessionsController#create as HTML
>   Parameters: {"utf8"=>"✓",
> "authenticity_token"=>"E7K5dpfrnKLAY3e2djlpYZpPy5Ll1iibNADIKRYZN5I=",
> "user"=>{"email"=>"hitpanglong at 163.com <mailto:hitpanglong at 163.com>",
> "password"=>"[FILTERED]"}, "commit"=>"Sign in"}
> Redirected to
> https://auth.xyworkflow/auth/josh_id/authorize?response_type=code&client_id=arvados-server&redirect_uri=https%3A%2F%2Fplm16.xyworkflow%2Fauth%2Fjoshid%2Fcallback%3Freturn_to%3Dhttps%253A%252F%252Fworkbench.plm16.xyworkflow%252Fusers%252Fwelcome%253Freturn_to%253D%25252F&auth_provider&state=7da100019dd1b4b002d5eebc245c8c3633e9ff57df8ad4ab
> Completed 302 Found in 64ms (ActiveRecord: 0.3ms)
>
>
> Started GET
> "/auth/josh_id/authorize?response_type=code&client_id=arvados-server&redirect_uri=https%3A%2F%2Fplm16.xyworkflow%2Fauth%2Fjoshid%2Fcallback%3Freturn_to%3Dhttps%253A%252F%252Fworkbench.plm16.xyworkflow%252Fusers%252Fwelcome%253Freturn_to%253D%25252F&auth_provider&state=7da100019dd1b4b002d5eebc245c8c3633e9ff57df8ad4ab"
> for 127.0.0.1 at 2016-05-09 15:15:47 +0800
> Processing by AuthController#authorize as HTML
>   Parameters: {"response_type"=>"code", "client_id"=>"arvados-server",
> "redirect_uri"=>"https://plm16.xyworkflow/auth/joshid/callback?return_to=https%3A%2F%2Fworkbench.plm16.xyworkflow%2Fusers%2Fwelcome%3Freturn_to%3D%252F",
> "auth_provider"=>nil,
> "state"=>"7da100019dd1b4b002d5eebc245c8c3633e9ff57df8ad4ab"}
> Redirected to
> https://plm16.xyworkflow/auth/joshid/callback?return_to=https%3A%2F%2Fworkbench.plm16.xyworkflow%2Fusers%2Fwelcome%3Freturn_to%3D%252F&code=4f21d265337016b00e9889c852a2a594&response_type=code&state=7da100019dd1b4b002d5eebc245c8c3633e9ff57df8ad4ab
> Completed 302 Found in 4ms (ActiveRecord: 2.1ms)
>
>
> _______________________________________________
> arvados mailing list
> arvados at arvados.org
> http://lists.arvados.org/mailman/listinfo/arvados

​
-- 
Brett Smith
Product Manager, Curoverse
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.arvados.org/pipermail/arvados/attachments/20160510/a83576f7/attachment.html>