<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif;" dir="ltr">
Email typo? You mean jlabl1, not jlab1 right?
<div><br>
</div>
<div>Wesley</div>
</div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Slepicka, Hugo Henrique <slepicka@slac.stanford.edu><br>
<b>Sent:</b> Monday, October 22, 2018 12:12:07 PM<br>
<b>To:</b> Wesley Moore<br>
<b>Cc:</b> Hoobler, Sonya; lerftest-ctrls@jlab.org; Williams Jr., Ernest L.; Pascual, Patrick James<br>
<b>Subject:</b> Re: [Lerftest-ctrls] Internet access from jlabl1.jlab.org</font>
<div> </div>
</div>
<meta content="text/html; charset=utf-8">
<div dir="auto">Hi Wesley,
<div><br>
</div>
<div>The issue that I noticed is that we can’t establish the tunnel now using jlab1... the process stops into connecting to jlab1.</div>
<div>Looks like we lost access to that machine with our SLAC accounts?</div>
<div><br>
</div>
<div>Hugo <br>
<br>
<div id="x_AppleMailSignature" dir="ltr">Sent from my iPhone</div>
<div dir="ltr"><br>
On Oct 22, 2018, at 9:07 AM, Wesley Moore <<a href="mailto:wmoore@jlab.org">wmoore@jlab.org</a>> wrote:<br>
<br>
</div>
<blockquote type="cite">
<div dir="ltr">
<div id="x_divtagdefaultwrapper" dir="ltr" style="font-size:12pt; color:#000000; font-family:Calibri,Helvetica,sans-serif">
<p style="margin-top:0; margin-bottom:0">It looks like your tunnels to jlabl1 aren't setup (connection refused to localhost:8888). From jlabl#, ssh to slac is working fine even though ping is blocked at the FW. </p>
<p style="margin-top:0; margin-bottom:0"><br>
</p>
<p style="margin-top:0; margin-bottom:0"># Example:</p>
<p style="margin-top:0; margin-bottom:0"></p>
<div><a href="mailto:wmoore@jlabl5.jlab.org">wmoore@jlabl5.jlab.org</a>> ssh <a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__rhel6-2D64.slac.stanford.edu&d=DwMGaQ&c=lz9TcOasaINaaC3U7FbMev2lsutwpI4--09aP8Lu18s&r=ciUk5UntV_Tki6hcVr3CdQ&m=A_eZkbrZ9w0Y9wMuBoOMOwlslN8CKBQLarMfkeV4cQM&s=8lNA5kwWPUCZe9xd4PJkzqiYn_o5CfehhAIcI-pTj0I&e=">
rhel6-64.slac.stanford.edu</a></div>
<div>The authenticity of host '<a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__rhel6-2D64.slac.stanford.edu&d=DwMGaQ&c=lz9TcOasaINaaC3U7FbMev2lsutwpI4--09aP8Lu18s&r=ciUk5UntV_Tki6hcVr3CdQ&m=A_eZkbrZ9w0Y9wMuBoOMOwlslN8CKBQLarMfkeV4cQM&s=8lNA5kwWPUCZe9xd4PJkzqiYn_o5CfehhAIcI-pTj0I&e=">rhel6-64.slac.stanford.edu</a>
(134.79.120.162)' can't be established.</div>
<div>RSA key fingerprint is SHA256:WVLfceuj9hUJCUZ21mWVx7OBKGH9IelGkdmvzvHjjcQ.</div>
<div>RSA key fingerprint is MD5:82:61:15:e9:36:3c:88:b0:7a:6e:2b:c2:2a:cc:5d:de.</div>
<div>Are you sure you want to continue connecting (yes/no)? yes</div>
<div>Warning: Permanently added '<a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__rhel6-2D64.slac.stanford.edu&d=DwMGaQ&c=lz9TcOasaINaaC3U7FbMev2lsutwpI4--09aP8Lu18s&r=ciUk5UntV_Tki6hcVr3CdQ&m=A_eZkbrZ9w0Y9wMuBoOMOwlslN8CKBQLarMfkeV4cQM&s=8lNA5kwWPUCZe9xd4PJkzqiYn_o5CfehhAIcI-pTj0I&e=">rhel6-64.slac.stanford.edu</a>,134.79.120.162'
(RSA) to the list of known hosts.</div>
<div><a href="mailto:wmoore@rhel6-64.slac.stanford.edu">wmoore@rhel6-64.slac.stanford.edu</a>'s password: </div>
<div><br>
</div>
Wesley
<p></p>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="x_divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> Sonya Hoobler <<a href="mailto:sonya@slac.stanford.edu">sonya@slac.stanford.edu</a>><br>
<b>Sent:</b> Monday, October 22, 2018 11:58:41 AM<br>
<b>To:</b> Wesley Moore<br>
<b>Cc:</b> Slepicka, Hugo Henrique; <a href="mailto:lerftest-ctrls@jlab.org">lerftest-ctrls@jlab.org</a>; Williams Jr., Ernest L.; Pascual, Patrick James<br>
<b>Subject:</b> Re: [Lerftest-ctrls] Internet access from <a href="http://jlabl1.jlab.org">
jlabl1.jlab.org</a></font>
<div> </div>
</div>
<div class="x_BodyFragment"><font size="2"><span style="font-size:11pt">
<div class="x_PlainText">Great, thank you.<br>
<br>
Sonya<br>
<br>
<br>
On Mon, 22 Oct 2018, Wesley Moore wrote:<br>
<br>
> Not yet. Actively working on it though.<br>
><br>
><br>
> Wesley<br>
><br>
> ________________________________<br>
> From: Sonya Hoobler <<a href="mailto:sonya@slac.stanford.edu">sonya@slac.stanford.edu</a>><br>
> Sent: Monday, October 22, 2018 11:43:13 AM<br>
> To: Slepicka, Hugo Henrique<br>
> Cc: Wesley Moore; <a href="mailto:lerftest-ctrls@jlab.org">lerftest-ctrls@jlab.org</a>; Williams Jr., Ernest L.; Pascual, Patrick James<br>
> Subject: Re: [Lerftest-ctrls] Internet access from <a href="http://jlabl1.jlab.org">
jlabl1.jlab.org</a><br>
><br>
> Hi Wesley,<br>
><br>
> Any news on this?<br>
><br>
> Thanks,<br>
> Sonya<br>
><br>
><br>
> On Fri, 19 Oct 2018, Sonya Hoobler wrote:<br>
><br>
>> Thanks for looking into it, Hugo.<br>
>><br>
>> I'll wait to hear from Wesley.<br>
>><br>
>> Sonya<br>
>><br>
>><br>
>> On Fri, 19 Oct 2018, Slepicka, Hugo Henrique wrote:<br>
>><br>
>>> Hi Wesley and Sonya,<br>
>>><br>
>>> I just tried from home and <a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__rhel6-2D64.slac.stanford.edu&d=DwMGaQ&c=lz9TcOasaINaaC3U7FbMev2lsutwpI4--09aP8Lu18s&r=ciUk5UntV_Tki6hcVr3CdQ&m=A_eZkbrZ9w0Y9wMuBoOMOwlslN8CKBQLarMfkeV4cQM&s=8lNA5kwWPUCZe9xd4PJkzqiYn_o5CfehhAIcI-pTj0I&e=">
rhel6-64.slac.stanford.edu</a> can be reached with<br>
>>> no problems from my internet connection in here.<br>
>>> slepicka@TID-PC94483:~ $ ping <a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__rhel6-2D64.slac.stanford.edu&d=DwMGaQ&c=lz9TcOasaINaaC3U7FbMev2lsutwpI4--09aP8Lu18s&r=ciUk5UntV_Tki6hcVr3CdQ&m=A_eZkbrZ9w0Y9wMuBoOMOwlslN8CKBQLarMfkeV4cQM&s=8lNA5kwWPUCZe9xd4PJkzqiYn_o5CfehhAIcI-pTj0I&e=">
rhel6-64.slac.stanford.edu</a><br>
>>> PING <a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__rhel6-2D64e.slac.stanford.edu&d=DwMGaQ&c=lz9TcOasaINaaC3U7FbMev2lsutwpI4--09aP8Lu18s&r=ciUk5UntV_Tki6hcVr3CdQ&m=A_eZkbrZ9w0Y9wMuBoOMOwlslN8CKBQLarMfkeV4cQM&s=Z0DoNsGm_Vgm4A_Cy8C3dt7fD0wJ-Im-pLtF4z6G49k&e=">
rhel6-64e.slac.stanford.edu</a> (134.79.120.159): 56 data bytes<br>
>>> 64 bytes from 134.79.120.159: icmp_seq=0 ttl=52 time=17.301 ms<br>
>>> 64 bytes from 134.79.120.159: icmp_seq=1 ttl=52 time=18.111 ms<br>
>>> 64 bytes from 134.79.120.159: icmp_seq=2 ttl=52 time=14.991 ms<br>
>>> 64 bytes from 134.79.120.159: icmp_seq=3 ttl=52 time=14.401 ms<br>
>>> 64 bytes from 134.79.120.159: icmp_seq=4 ttl=52 time=13.660 ms<br>
>>> ^C<br>
>>> --- <a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__rhel6-2D64e.slac.stanford.edu&d=DwMGaQ&c=lz9TcOasaINaaC3U7FbMev2lsutwpI4--09aP8Lu18s&r=ciUk5UntV_Tki6hcVr3CdQ&m=A_eZkbrZ9w0Y9wMuBoOMOwlslN8CKBQLarMfkeV4cQM&s=Z0DoNsGm_Vgm4A_Cy8C3dt7fD0wJ-Im-pLtF4z6G49k&e=">
rhel6-64e.slac.stanford.edu</a> ping statistics ---<br>
>>> 5 packets transmitted, 5 packets received, 0.0% packet loss<br>
>>> round-trip min/avg/max/stddev = 13.660/15.693/18.111/1.716 ms<br>
>>><br>
>>> Some weird issues are back to the VDI machine... If I try from the VDI<br>
>>> machine to ssh as softegr into lclsapp1 I asks me for my password again.<br>
>>> That happened in the past but it was fixed.<br>
>>> If I go through a regular SSH connection to hallgw and from there to<br>
>>> lclsapp1 as softegr the SSH works...<br>
>>><br>
>>> Once I am connected to the JLab system (lclsapp1) I can't establish my SSH<br>
>>> Tunnel as before:<br>
>>><br>
>>> [softegr@lclsapp1 slepicka]$ ssh -fNT -v -L<br>
>>> 6660:<a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__rhel6-2D64.slac.stanford.edu-3A22&d=DwMGaQ&c=lz9TcOasaINaaC3U7FbMev2lsutwpI4--09aP8Lu18s&r=ciUk5UntV_Tki6hcVr3CdQ&m=A_eZkbrZ9w0Y9wMuBoOMOwlslN8CKBQLarMfkeV4cQM&s=0BpM6bkXNfAuDum4lsm77SktvGJ24pWNo2_eyB3J9Hw&e=">rhel6-64.slac.stanford.edu:22</a>
<a href="mailto:slepicka@jlab1.jlab.org">slepicka@jlab1.jlab.org</a><br>
>>> OpenSSH_5.3p1, OpenSSL 1.0.1e-fips 11 Feb 2013<br>
>>> debug1: Reading configuration data /etc/ssh/ssh_config<br>
>>> debug1: Applying options for *<br>
>>> debug1: Connecting to <a href="http://jlab1.jlab.org">jlab1.jlab.org</a> [192.70.245.101] port 22.<br>
>>><br>
>>> If I try to ping <a href="http://jlab1.jlab.org">jlab1.jlab.org</a> it fails.<br>
>>><br>
>>> @Wesley did something change on the JLab network?<br>
>>><br>
>>> Cheers,<br>
>>> Hugo<br>
>>><br>
>>><br>
>>> On 10/18/18, 6:05 PM, "Lerftest-ctrls on behalf of Slepicka, Hugo Henrique"<br>
>>> <<a href="mailto:lerftest-ctrls-bounces@jlab.org">lerftest-ctrls-bounces@jlab.org</a> on behalf of
<a href="mailto:slepicka@slac.stanford.edu">slepicka@slac.stanford.edu</a>><br>
>>> wrote:<br>
>>><br>
>>> Hi,<br>
>>><br>
>>> I will take a look at that and get back to you later tonight.<br>
>>><br>
>>> Cheers,<br>
>>> Hugo<br>
>>><br>
>>> Sent from my iPhone<br>
>>><br>
>>> > On Oct 18, 2018, at 5:52 PM, Wesley Moore <<a href="mailto:wmoore@jlab.org">wmoore@jlab.org</a>> wrote:<br>
>>> ><br>
>>> > Looks more like an issue with an ssh tunnel you guys setup. Does that<br>
>>> ring a bell?<br>
>>> ><br>
>>> > Wesley<br>
>>> ><br>
>>> > On 10/18/18, 8:44 PM, "Sonya Hoobler" <<a href="mailto:sonya@slac.stanford.edu">sonya@slac.stanford.edu</a>> wrote:<br>
>>> ><br>
>>> > Okay, my image was too large and is holding up the submission.<br>
>>> ><br>
>>> > The test was:<br>
>>> ><br>
>>> > cd /usr/local/lcls/tools/edm/display/llrf<br>
>>> > cvs stat rf_ampset_diag.edl<br>
>>> ><br>
>>> > But I have to leave work now, so I'll have to come back to this<br>
>>> tomorrow.<br>
>>> > Thanks for your help so late!<br>
>>> ><br>
>>> > Sonya<br>
>>> ><br>
>>> ><br>
>>> ><br>
>>> ><br>
>>> >> On Thu, 18 Oct 2018, Sonya Hoobler wrote:<br>
>>> >><br>
>>> >> Yes, I've attached a screenshot of an example command (can't<br>
>>> copy/paste).<br>
>>> >><br>
>>> >> I could use scp as a temporary solution if we can get access between<br>
>>> jlabl1<br>
>>> >> and <a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__rhel6-2D64.slac.stanford.edu&d=DwMGaQ&c=lz9TcOasaINaaC3U7FbMev2lsutwpI4--09aP8Lu18s&r=ciUk5UntV_Tki6hcVr3CdQ&m=A_eZkbrZ9w0Y9wMuBoOMOwlslN8CKBQLarMfkeV4cQM&s=8lNA5kwWPUCZe9xd4PJkzqiYn_o5CfehhAIcI-pTj0I&e=">
rhel6-64.slac.stanford.edu</a> (which we used to have, right?<br>
>>> checking my<br>
>>> >> memory).<br>
>>> >><br>
>>> >> Thanks,<br>
>>> >> Sonya<br>
>>> >><br>
>>> >><br>
>>> >><br>
>>> >><br>
>>> >><br>
>>> >>> On Fri, 19 Oct 2018, Wesley Moore wrote:<br>
>>> >>><br>
>>> >>> Can you send me a cvs and git command to try? I'll see what the<br>
>>> network<br>
>>> >>> traffic looks like to see if that well highlight the issue.<br>
>>> >>><br>
>>> >>> Wesley<br>
>>> >>><br>
>>> >>> On 10/18/18, 8:13 PM, "Sonya Hoobler" <<a href="mailto:sonya@slac.stanford.edu">sonya@slac.stanford.edu</a>><br>
>>> wrote:<br>
>>> >>><br>
>>> >>> Hmm, I seem to be able to ping the world (google, FNAL) from my<br>
>>> SLAC<br>
>>> >>> machine (using <a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__rhel6-2D64c.slac.stanford.edu&d=DwMGaQ&c=lz9TcOasaINaaC3U7FbMev2lsutwpI4--09aP8Lu18s&r=ciUk5UntV_Tki6hcVr3CdQ&m=A_eZkbrZ9w0Y9wMuBoOMOwlslN8CKBQLarMfkeV4cQM&s=8gPC4_CMRmGFwnz6Sf_i4Ruod-UBqFNbCLt0TWfYKn0&e=">
rhel6-64c.slac.stanford.edu</a> at the moment) but<br>
>>> cannot<br>
>>> >>> ping<br>
>>> >>> rhel6-64c from jlabl1.<br>
>>> >>><br>
>>> >>> Do you have a favorite domain to ping or other test I should run<br>
>>> from<br>
>>> >>> <a href="http://jlabl1.jlab.org">jlabl1.jlab.org</a>?<br>
>>> >>><br>
>>> >>> Thanks,<br>
>>> >>> Sonya<br>
>>> >>><br>
>>> >>><br>
>>> >>>> On Fri, 19 Oct 2018, Wesley Moore wrote:<br>
>>> >>>><br>
>>> >>>> It looks to be proxied. So it should work from the lcls hosts<br>
>>> also.<br>
>>> >>> I'll have to see it there's something special required for cvs/git,<br>
>>> but I<br>
>>> >>> know git works through the proxy. Possible issue on the slac side<br>
>>> (maybe<br>
>>> >>> not open to the world)?<br>
>>> >>>><br>
>>> >>>> Wesley<br>
>>> >>>><br>
>>> >>>> On 10/18/18, 8:01 PM, "Sonya Hoobler" <<a href="mailto:sonya@slac.stanford.edu">sonya@slac.stanford.edu</a>><br>
>>> wrote:<br>
>>> >>>><br>
>>> >>>> Hi Wesley,<br>
>>> >>>><br>
>>> >>>> If I remember correctly, <a href="http://jlabl1.jlab.org">jlabl1.jlab.org</a> (and friends) should<br>
>>> have<br>
>>> >>>> internet access, but it does not seem to currently. For example,<br>
>>> I<br>
>>> >>> am<br>
>>> >>>> unable to ping <a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__rhel6-2D64.slac.stanford.edu&d=DwMGaQ&c=lz9TcOasaINaaC3U7FbMev2lsutwpI4--09aP8Lu18s&r=ciUk5UntV_Tki6hcVr3CdQ&m=A_eZkbrZ9w0Y9wMuBoOMOwlslN8CKBQLarMfkeV4cQM&s=8lNA5kwWPUCZe9xd4PJkzqiYn_o5CfehhAIcI-pTj0I&e=">
rhel6-64.slac.stanford.edu</a>. (I also suspect this<br>
>>> is<br>
>>> >>> why<br>
>>> >>>> remote cvs/git is not currently working.)<br>
>>> >>>><br>
>>> >>>> Should I be using a different server?<br>
>>> >>>><br>
>>> >>>> Thanks,<br>
>>> >>>> Sonya<br>
>>> >>>><br>
>>> >>>><br>
>>> >>>><br>
>>> >>>><br>
>>> >>><br>
>>> >><br>
>>> ><br>
>>> ><br>
>>> > _______________________________________________<br>
>>> > Mailing List: <a href="mailto:Lerftest-ctrls@jlab.org">Lerftest-ctrls@jlab.org</a><br>
>>> > <a href="https://mailman.jlab.org/mailman/listinfo/lerftest-ctrls">https://mailman.jlab.org/mailman/listinfo/lerftest-ctrls</a><br>
>>> > Wiki: <a href="https://wiki.jlab.org/lerf/index.php/Network">https://wiki.jlab.org/lerf/index.php/Network</a><br>
>>><br>
>>> _______________________________________________<br>
>>> Mailing List: <a href="mailto:Lerftest-ctrls@jlab.org">Lerftest-ctrls@jlab.org</a><br>
>>> <a href="https://mailman.jlab.org/mailman/listinfo/lerftest-ctrls">https://mailman.jlab.org/mailman/listinfo/lerftest-ctrls</a><br>
>>> Wiki: <a href="https://wiki.jlab.org/lerf/index.php/Network">https://wiki.jlab.org/lerf/index.php/Network</a><br>
>>><br>
>>><br>
>><br>
></div>
</span></font></div>
</div>
</blockquote>
</div>
</div>
</body>
</html>