Project

General

Profile

Actions

Support #9342

closed

Cannot save file in workspace using HomeLibrary on preECO

Added by Konstantinos Giannakelos almost 8 years ago. Updated almost 8 years ago.

Status:
Closed
Priority:
Normal
Category:
-
Start date:
Jul 21, 2017
Due date:
% Done:

100%

Estimated time:
Infrastructure:
Pre-Production

Description

Hello, i cannot save techno-economic-analysis file in workspace using Home Library (from a portlet). You can find the error stacktrace in the following link:

https://support.d4science.org/pastes/5e673e10ecb6a6fc4110a836384b080f354d7be1

I am using a local gcube portal bundle (not installed in a preprod machine) so i suspect that this may has to do with some firewall issue on MongoDB filtering my machine's IP since it works properly on the https://pre.d4science.org/ .

Thus i am assigning this ticket to the infrastructure. Correct this assumption if it's wrong.

Actions #1

Updated by Konstantinos Giannakelos almost 8 years ago

  • Project changed from 2 to D4Science Infrastructure
  • Subject changed from Cannot save file in workspace using HL on preECO to Cannot save file in workspace using HomeLibrary on preECO
  • Description updated (diff)
  • Assignee set to _InfraScience Systems Engineer
  • Target version changed from zz - Unsprintable to UnSprintable
  • Infrastructure Pre-Production added
Actions #2

Updated by Andrea Dell'Amico almost 8 years ago

  • Assignee changed from _InfraScience Systems Engineer to Roberto Cirillo

It seems a matter of authentication and not of firewall rules, from the logs.

Actions #3

Updated by Roberto Cirillo almost 8 years ago

I suspect it is a firewall issue because the MongoDB credentials are discovered automatically by HomeLibrary. Please @k.giannakelos@cite.gr, could you provide your public ip?

Actions #4

Updated by Konstantinos Giannakelos almost 8 years ago

Yes of course. Please add the following static IPs :

62.38.16.245
193.92.137.229

Thank you

Actions #5

Updated by Roberto Cirillo almost 8 years ago

  • Assignee changed from Roberto Cirillo to _InfraScience Systems Engineer

Please, could you add the IPs reported by Kostantinos to the MongoDB development cluster?

Actions #6

Updated by Andrea Dell'Amico almost 8 years ago

  • Assignee changed from _InfraScience Systems Engineer to Roberto Cirillo

Roberto Cirillo wrote:

Please, could you add the IPs reported by Kostantinos to the MongoDB development cluster?

Both the IP addresses were already present on the firewall ACLs, and as I wrote earlier it's not a firewall problem. From these logs:

[PORTAL] 1402160 [cluster-ClusterId{value='5971bba5ed3c6309faeac4c6', description='null'}-mongo1-d-d4s.d4science.org:27017] INFO  org.mongodb.driver.connection  - Opened connection [connectionId{localValue:19, serverValue:122242}] to mongo1-d-d4s.d4science.org:27017
[PORTAL] 1402494 [cluster-ClusterId{value='5971bba5ed3c6309faeac4c6', description='null'}-mongo1-d-d4s.d4science.org:27017] INFO  org.mongodb.driver.cluster  - Monitor thread successfully connected to server with description ServerDescription{address=mongo1-d-d4s.d4science.org:27017, type=REPLICA_SET_ARBITER, state=CONNECTED, ok=true, version=ServerVersion{versionList=[3, 0, 8]}, minWireVersion=0, maxWireVersion=3, electionId=null, maxDocumentSize=16777216, roundTripTimeNanos=333019829, setName='storagedev', canonicalAddress=mongo1-d-d4s.d4science.org:27017, hosts=[mongo2-d-d4s.d4science.org:27017, mongo3-d-d4s.d4science.org:27017], passives=[], arbiters=[mongo1-d-d4s.d4science.org:27017], primary='mongo3-d-d4s.d4science.org:27017', tagSet=TagSet{[]}}
[PORTAL] 1403348 [Thread-39] INFO  org.mongodb.driver.connection  - Opened connection [connectionId{localValue:20, serverValue:1582110}] to mongo3-d-d4s.d4science.org:27017
com.mongodb.MongoCommandException: Command failed with error 13: 'not authorized on remotefs to execute command { createIndexes: "fs.files", indexes: [ { key: { filename: 1 }, name: "filename_1", ns: "remotefs.fs.files" } ] }' on server mongo3-d-d4s.d4science.org:27017. The full response is { "ok" : 0.0, "errmsg" : "not authorized on remotefs to execute command { createIndexes: \"fs.files\", indexes: [ { key: { filename: 1 }, name: \"filename_1\", ns: \"remotefs.fs.files\" } ] }", "code" : 13 }
        at com.mongodb.connection.ProtocolHelper.getCommandFailureException(ProtocolHelper.java:77)

two facts are clear:

  1. the application can contact mongo, so the firewall is not blocking anything
  2. the operations were not authorized
Actions #7

Updated by Roberto Cirillo almost 8 years ago

Maybe it could be a key problem but, if this is the case, I guess you should see another exception before the authentication exception. Have you other exception before?
@k.giannakelos@cite.gr please, could you check if there is the "preprod.gcubekey" in your classpath?

Actions #8

Updated by Konstantinos Giannakelos almost 8 years ago

  • Status changed from New to Closed
  • % Done changed from 0 to 100

It was indeed a key problem. Thanks for pointing that out.
That was all the error stacktrace i got. No "key missing" exception occured, that's why i got a bit confused.

Thanks for your help!

Actions

Also available in: Atom PDF

Add picture from clipboard (Maximum size: 8.91 MB)