[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: 20001023: LDM errors at Utah State

On Tue, 24 Oct 2000, Dan A. Dansereau wrote:

> Rob
>       The system manager as a big firewall's), and a "secure"
> network - He also has most things turned off - except for the
> ssh ( secure shell ) , and tcp wrappers around most things -
> I have the appropriate machines in the hosts.allow files, and I'm
> my machine ( .home.com) machine for testing the allegan machine(SUN).
> (I can do anything I want - on it (DEC ALPHA) ). The ultimate goal
> is to connect the SUN machine to Arizona and ?? the lightning machine,
> along with some local feeds via ldm. I'm sure it is a combination
> of items relate to the perceived security wanted by the system
> administrator - along with the fact that he thinks every thing done
> vi LDM/IDD is outdated and done the wrong way. So a list of services
> that need to be turned on is the logical next step.
> 

Dan,

The LDM's are having trouble contacting each other, I think the problem is
that the portmapper(bind) service is not available to connections outside
the firewall.  For a LDM to be able to trasfer data, it needs access to 
the machine, portmappper, port number and to be able to use TCP and UDP 
protocols. I'm curious about your system admin comments about the
RPC structure of the LDM/IDD being outdated.  I would welcome his comments
because we are always looking for ways to improve the LDM software.  The
current RPC spec is at:

http://www.ietf.org/html.charters/oncrpc-charter.html


Robb... 

> 
> Dan
> 
> 
> -----Original Message-----
> From: Robb Kambic [mailto:address@hidden]
> Sent: Tuesday, October 24, 2000 9:58 AM
> To: Dan A. Dansereau
> Cc: support-ldm
> Subject: Re: 20001023: LDM errors at Utah State
> 
> 
> On Mon, 23 Oct 2000, Unidata Support wrote:
> 
> >
> > ------- Forwarded Message
> >
> > >From: "Dan A. Dansereau" <address@hidden>
> > >Organization: Utah State University
> > >Keywords: 200010232306.e9NN6F420189 LDM
> >
> > HI support
> > I'm having a problem getting to machines to talk via ldm
> > ldm appears to be running on both machines
> >
> > when I try this from C253946-B.logan1.ut.home.com - every time
> >
> ============================================================================
> > =========start
> > ldmping allegan.nr.usu.edu
> > Oct 23 22:33:55      State    Elapsed Port   Remote Host
> rpc_stat
> > Oct 23 22:33:55 SVC_UNAVAIL   0.512707    0   allegan.nr.usu.edu  RPC:
> > Program not registered
> > Oct 23 22:34:21 SVC_UNAVAIL   0.166996    0   allegan.nr.usu.edu  RPC:
> > Program not registered
> > Oct 23 22:34:46 SVC_UNAVAIL   0.510754    0   allegan.nr.usu.edu  RPC:
> > Unable to receive; errno = Connection reset by peer
> > Oct 23 22:35:12 SVC_UNAVAIL   0.531262    0   allegan.nr.usu.edu  RPC:
> > Unable to receive; errno = Connection reset by peer
> >
> ============================================================================
> > =========end
> > when I start with the suggested debug lines - I get this!
> > ( this is on allegan )
> >
> ============================================================================
> > =========start
> > ldm@allegan:/home/ldm>bin/rpc.ldmd -vl - -q data/ldm.pq etc/ldmd.conf
> > Oct 23 22:22:11 rpc.ldmd[3464]: Starting Up (built: Aug 25 2000 10:05:46)
> > Oct 23 22:22:11 C253946-B[3467]: run_requester: Starting Up:
> > C253946-B.logan1.ut.home.com
> > Oct 23 22:22:11 C253946-B[3467]: run_requester: 20001023212211.306 TS_ENDT
> > {{ANY,  ".*"}}
> > Oct 23 22:22:11 C253946-B[3467]: FEEDME(C253946-B.logan1.ut.home.com): OK
> > Oct 23 22:22:39 rpc.ldmd[3464]: Denying connection from C253946-B
> > Oct 23 22:23:10 rpc.ldmd[3464]: Denying connection from C253946-B
> > Oct 23 22:23:40 rpc.ldmd[3464]: Denying connection from C253946-B
> > Oct 23 22:24:10 rpc.ldmd[3464]: Denying connection from C253946-B
> > Oct 23 22:24:41 rpc.ldmd[3464]: Denying connection from C253946-B
> > Oct 23 22:25:11 rpc.ldmd[3464]: Denying connection from C253946-B
> > ^COct 23 22:25:23 C253946-B[3467]: Interrupt
> > Oct 23 22:25:23 C253946-B[3467]: Exiting
> > Oct 23 22:25:23 rpc.ldmd[3464]: Interrupt
> > Oct 23 22:25:23 rpc.ldmd[3464]: Exiting
> > Oct 23 22:25:23 rpc.ldmd[3464]: Terminating process group
> > ldm@allegan:/home/ldm>^C
> >
> ============================================================================
> > =========end
> > or when I do the same on C253946-B.logan1.ut.home.com
> > This is my home machine - Note: ssh , xterm etc runs
> > between these two systems correctly - but I get this
> >
> > C253946-B.logan1.ut.home.com> bin/rpc.ldmd -vl - -q data/ldm.pq
> > etc/ldmd.conf
> > Oct 23 22:43:52 rpc.ldmd[1145]: Starting Up (built: Aug 29 2000 08:38:39)
> > Oct 23 22:43:52 129.123.57.192[1148]: run_requester: Starting Up:
> > 129.123.57.192
> > Oct 23 22:43:52 129.123.57.192[1148]: run_requester: 20001023214352.043
> > TS_ENDT {{ANY,  ".*"}}
> > Oct 23 22:43:52 129.123.57.192[1148]: FEEDME(129.123.57.192): 7: Access
> > denied by remote server
> > Oct 23 22:43:58 rpc.ldmd[1145]: child 1147 exited with status 1
> > Oct 23 22:43:58 rpc.ldmd[1145]: child 1146 exited with status 4
> > Oct 23 22:44:06 allegan[1149]: Connection from allegan.nr.usu.edu
> > Oct 23 22:44:06 allegan[1149]: feedme: allegan.nr.usu.edu:
> > 20001023214406.900 TS_ENDT {{ANY,  ".*"}}
> > Oct 23 22:44:06 allegan(feed)[1149]: Starting Up: 20001023214406.900
> TS_ENDT
> > {{ANY,  ".*"}}
> > Oct 23 22:44:06 allegan(feed)[1149]: topo:  allegan.nr.usu.edu ANY
> > Oct 23 22:44:22 129.123.57.192[1148]: run_requester: 20001023214422.398
> > TS_ENDT {{ANY,  ".*"}}
> > Oct 23 22:44:22 129.123.57.192[1148]: FEEDME(129.123.57.192): 7: Access
> > denied by remote server
> > Oct 23 22:44:26 rpc.ldmd[1145]: Interrupt
> > Oct 23 22:44:26 rpc.ldmd[1145]: Exiting
> > Oct 23 22:44:26 allegan(feed)[1149]: Interrupt
> > Oct 23 22:44:26 allegan(feed)[1149]: Exiting
> > Oct 23 22:44:26 129.123.57.192[1148]: Interrupt
> > Oct 23 22:44:26 129.123.57.192[1148]: Exiting
> > Oct 23 22:44:26 rpc.ldmd[1145]: Terminating process group
> >
> > I'm 90% sure that the ldmd.conf files are correct on both systems
> > Any Ideas??  Again Thanks Much
> 
> Dan,
> 
> This sounds like an allow configuration problem in the ldmd.conf file. I'm
> sure you have an allows for each other's machines in the ldmd.conf file.
> One thing to check is if the hostname resolves to the correct IP address
> from the remote machines. You can use the nslookup command to check this
> issue.  Also, you might want to use the IP address in the ldmd.conf file
> instead of the text host name. Also, are there any firewalls involved in
> the configuration between the machines?  When the configuration is correct
> between machine you should be able to run notifyme without getting any
> denied permission messages.  You might check the LDM against some other
> LDMs running to see if the same problem occurs. Let me know the status.
> 
> Robb...
> 
> 
> 
> >
> > Dan A. Dansereau
> >
> >
> > ------- End of Forwarded Message
> >
> >
> 
> ============================================================================
> ===
> Robb Kambic                              Unidata Program Center
> Software Engineer III                    Univ. Corp for Atmospheric Research
> address@hidden                   WWW: http://www.unidata.ucar.edu/
> ============================================================================
> ===
> 
> 

===============================================================================
Robb Kambic                                Unidata Program Center
Software Engineer III                      Univ. Corp for Atmospheric Research
address@hidden             WWW: http://www.unidata.ucar.edu/
===============================================================================