Skip to main content
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [ice-dev] ICE Remote VisIt connection error 
Hari,

Thanks for the help! Greg should have sent you one of the training accounts last night. Have you been able to use it to access Gordon? If so, can you tell us yet if this looks like the kind of simple problem that we can solve with configuring port forwarding, or is it so complex that we're unlikely to find a solution within the next day and should start preparing to fall back to local VisIt installations instead of using the remote machine?

Robert
________________________________________
From: ice-dev-bounces@xxxxxxxxxxx <ice-dev-bounces@xxxxxxxxxxx> on behalf of Harinarayan Krishnan <hkrishnan@xxxxxxx>
Sent: Wednesday, July 13, 2016 9:14 PM
To: ice developer discussions
Subject: Re: [ice-dev] ICE Remote VisIt connection error

Hi Greg,

Yes. A tunnel is necessary if the remote machine does not grant access
to direct connections.

The most common error I see is that the firewall or something in the
connection rejects or throws an error or times out.

When VisIt gets launched on the remote side you can give it an
explicit port and password to start with.

Then one can connect to the remote machine over ip and port or create
a forward tunnel and connect. This is a little trickier because VisIt
also opens more ports usually between (5900 - 5910).

The VisIt Java client tries to hide all these combinations for you,
and not all combinations may have been tested as super computing
facilities like to through curveballs.

If you have access to NERSC, I can show you what the code should do
when connecting to a remote machine.

Unfortunately, I can't replicate on machines that I don't have access
to (like Gordon). I used to have access, but my account has probably
lapsed.

Best regards,
Hari



On Wed, Jul 13, 2016 at 4:47 PM, Greg Watson <greg@watson.earth> wrote:
> There is no error output. A password dialog is displayed. I enter the password, and the dialog just comes back again.
>
> Gordon is just regular ssh, it doesn’t use OTP.
>
> Are you trying to tunnel over ssh? What ports need to be forwarded?
>
> Greg
>
>> On Jul 13, 2016, at 6:58 PM, Harinarayan Krishnan <hkrishnan@xxxxxxx> wrote:
>>
>> Hi all,
>>
>> 1. What does the error output look like?
>> I am not sure why the password would not be honored. Is Gordon OTP or
>> can an SSH key version be tested?
>>
>> A simple test might be to manually create an SSH tunnel and forward
>> the appropriate ports from the VisIt server. Then on the client side
>> do a direct connection to localhost:<forwarded port>
>>
>> Best regards,
>> Hari
>>
>>
>> On Wed, Jul 13, 2016 at 11:53 AM, McCaskey, Alex <mccaskeyaj@xxxxxxxx> wrote:
>>> Ok that’s good to know. We’ll see if Hari has any further insight then.
>>>
>>> Alex
>>>
>>> On Jul 13, 2016, at 2:51 PM, Greg Watson <greg@watson.earth> wrote:
>>>
>>> Alex,
>>>
>>> I’m not able to connect from my machine (outside the ORNL network) to either
>>> a TACC machine or an SDSC machine, so I don’t think this is a proxy issue.
>>>
>>> The problem is that the connection just keeps asking for a password, even if
>>> the correct one is entered.
>>>
>>> Greg
>>>
>>> On Jul 13, 2016, at 2:40 PM, McCaskey, Alex <mccaskeyaj@xxxxxxxx> wrote:
>>>
>>> Hey Hari,
>>>
>>> We are giving an ICE tutorial at the XSEDE conference next week. Part of
>>> that tutorial will be demonstrating a remote VisIt connection from ICE to
>>> XSEDE resources. However as of now, the remote connection mechanism as part
>>> of the visit_java_client is not working when we connect to those resources
>>> from within the ORNL internal network. We’re able to connect to machines
>>> within the network, but not without. My guess is the visit remote connection
>>> is not taking into account our ssh proxy server. Please see Robert’s
>>> detailed email below on what he’s found.
>>>
>>> Any thoughts on this, and would you be able to help us out? I think it may
>>> require a small modification to the visit_java_client.
>>>
>>> Best,
>>>
>>> Alex
>>>
>>> Begin forwarded message:
>>>
>>> From: "Smith, Robert W." <smithrw@xxxxxxxx>
>>> Subject: VisIt connection info
>>> Date: July 13, 2016 at 2:35:32 PM EDT
>>> To: "McCaskey, Alex" <mccaskeyaj@xxxxxxxx>
>>>
>>> Alex,
>>>
>>> I'm able to connect remotely to all of Bohr (my Mac desktop), Megafluffy,
>>> and Habilis. However, attempting to connect to Gordon or Stampede we've been
>>> getting into a loop where the password dialog keeps popping up without the
>>> authentication ever passing.
>>>
>>> When this became an issue for ParaView, I think the fix was adding
>>> session.setConfig("PreferredAuthentications",
>>> "privatekey,password,keyboard-interactive"); so that the session could
>>> handle the multiple different ways the server might specify the the password
>>> authentication. When you're emailing Hari, you can suggest that he add that
>>> line in the launch method of VisItSwtConnection in the VisIt Java client to
>>> see if that makes a difference.
>>>
>>> Robert
>>>
>>>
>>> _______________________________________________
>>> ice-dev mailing list
>>> ice-dev@xxxxxxxxxxx
>>> To change your delivery options, retrieve your password, or unsubscribe from
>>> this list, visit
>>> https://dev.eclipse.org/mailman/listinfo/ice-dev
>>>
>>>
>>> _______________________________________________
>>> ice-dev mailing list
>>> ice-dev@xxxxxxxxxxx
>>> To change your delivery options, retrieve your password, or unsubscribe from
>>> this list, visit
>>> https://dev.eclipse.org/mailman/listinfo/ice-dev
>>>
>>>
>>>
>>> _______________________________________________
>>> ice-dev mailing list
>>> ice-dev@xxxxxxxxxxx
>>> To change your delivery options, retrieve your password, or unsubscribe from
>>> this list, visit
>>> https://dev.eclipse.org/mailman/listinfo/ice-dev
>> _______________________________________________
>> ice-dev mailing list
>> ice-dev@xxxxxxxxxxx
>> To change your delivery options, retrieve your password, or unsubscribe from this list, visit
>> https://dev.eclipse.org/mailman/listinfo/ice-dev
>
> _______________________________________________
> ice-dev mailing list
> ice-dev@xxxxxxxxxxx
> To change your delivery options, retrieve your password, or unsubscribe from this list, visit
> https://dev.eclipse.org/mailman/listinfo/ice-dev
_______________________________________________
ice-dev mailing list
ice-dev@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/ice-dev

Back to the top