geni-nsf / geni-portal Goto Github PK

The various _client methods should check arguments: not empty or missing, otherwise valid.

When there are problems, you get cryptic error messages like:
put_message error: <url> malformed, referer: h....

Imported from trac ticket #5, created by ahelsing on 04-13-2012 at 14:23, last modified: 04-02-2014 at 16:39

The GCF PGCH proxy should check for valid UUIDs in various places

Imported from trac ticket #11, created by ahelsing on 05-09-2012 at 11:52, last modified: 12-05-2013 at 13:16

The GCF PGCH proxy does not really implement GetKeys. Flack will need the SSH keys in order to get them installed on slivers.
But the keys are currently in the portal DB. So what should pgch do?

Imported from trac ticket #13, created by ahelsing on 05-09-2012 at 11:54, last modified: 05-29-2012 at 14:49

The current proxy AM needs hardening

Imported from trac ticket #23, created by ahelsing on 05-23-2012 at 13:57, last modified: 11-21-2013 at 15:52

URNs are hardcoded in a few spots.

Don't do that.

Imported from trac ticket #10, created by ahelsing on 04-24-2012 at 16:30, last modified: 02-04-2014 at 16:50

Imported from trac ticket #48, created by tmitchel on 05-23-2012 at 15:00, last modified: 05-24-2012 at 16:38

The ssh pages need instructions - what to do with the thing you downloaded or how to create one for upload (ask Niky if she already has this)

Imported from trac ticket #47, created by tmitchel on 05-23-2012 at 14:58, last modified: 12-05-2013 at 09:47

When we run Flack against pgch.py and pgch.py returns a URN ending in "cm" from ListComponents, Flack has an uncaught exception.

This appears to be the result of Flack detecting a ProtoGENI ComponentManager and following a code path that uses the ProtoGENI CM API instead of the GENI AM API. When we forced flack (via code modification) to use the GENI AM API path, Flack successfully talks to the ProtoGENI CM (pgeni3).

Imported from trac ticket #15, created by tmitchel on 05-14-2012 at 15:31, last modified: 01-04-2013 at 16:39

Flack only sends the experimenter certificate, not the full chain, when negotiating a TLS connection. Flack uses the forge JavaScript package for TLS support, and there is a note in tls.createCertificate() (in tls.js) "TODO: support sending more than 1 certificate?". RFC 2246 defines TLS and section 7.4.2 documents the layout of the certificate message that is used to send the client-side certificate.

Imported from trac ticket #16, created by tmitchel on 05-15-2012 at 11:29, last modified: 04-02-2014 at 16:56

Mark Berman made the following suggestions for initial canned RSpecs in an email on May 23:

I agree with you that there's a simple set of topologies that would provide a lot of mileage for relatively little effort. As Tom points out, there's a free parameter in most of these (number of points in star, nodes in line, etc.), but we probably can't support that in our initial rollout. I'd suggest starting with a minimal set:

1. Single node (very useful as a build / test host, not so much for actual experiment)

2. Two nodes, one link (dumbbell, with n=1 for each star).

3. Two nodes, one link with a delay node. (Technically, this is a three-node linear topology, but the delay node is special.)

4. A diamond topology for simple multipath. (Perhaps see the click router example for a variation with two end nodes, plus four router nodes in a diamond, figure at http://groups.geni.net/geni/wiki/ClickExampleExperiment.)

   That may be enough for the first round. Could we support a selection between two different OSs / images, to be applied across the board to all nodes in the topology (except delay nodes)?

   Imported from trac ticket #37, created by tmitchel on 05-23-2012 at 14:42, last modified: 08-30-2012 at 09:53

Each portal page should show where you are like:
Home->Project Foo->Edit Project
Where each of the names is a link.

Imported from trac ticket #7, created by ahelsing on 04-13-2012 at 14:38, last modified: 04-26-2012 at 15:28

How should we proceed on this? We have added a URL in the authorityInfoAccess field using the ProtoGENI custom OID. This is sufficient for now. We can ask ProtoGENI to relax this constraint, or we can use our own custom OID.

What is the real purpose of the URL? ProtoGENI does not seem to use it. If the purpose is to do checks like revocation and info, should ProtoGENI allow the URL to be an OCSP URL? (ProtoGENI currently requires a custom OID, although any custom OID, in its regular expression to extract the URL.)

Imported from trac ticket #14, created by tmitchel on 05-14-2012 at 13:50, last modified: 04-07-2014 at 15:15

Merge the proxy branch onto the master branch and push it up. Also merge changes to gcf that support the proxy.

Imported from trac ticket #17, created by tmitchel on 05-23-2012 at 13:42, last modified: 05-23-2012 at 13:50

RSpec upload is not yet implemented.

Imported from trac ticket #35, created by tmitchel on 05-23-2012 at 14:22, last modified: 09-26-2012 at 12:06

put_message just does curl.
Apache may return an error code, and put_message must notice that is an error and act appropriately

Imported from trac ticket #9, created by ahelsing on 04-17-2012 at 13:49, last modified: 12-05-2013 at 13:16

We should support logs of actions, messages for users (same mechanism?)

So users can see, for example, that they've been added to a project.

Imported from trac ticket #8, created by ahelsing on 04-13-2012 at 14:38, last modified: 10-30-2012 at 16:23

Feedback indicated that we should use qualifiers for these terms.

Imported from trac ticket #39, created by tmitchel on 05-23-2012 at 14:45, last modified: 05-23-2012 at 15:45

The portal does too much with respect to user management, and the MA does too little. Cause the MA to do more, and expose APIs so that the portal can access the information it needs.

Imported from trac ticket #21, created by tmitchel on 05-23-2012 at 13:54, last modified: 09-05-2012 at 10:40

See (gst:3762) for improvements by Chaos

Imported from trac ticket #36, created by tmitchel on 05-23-2012 at 14:33, last modified: 05-30-2012 at 14:02

Imported from trac ticket #32, created by tmitchel on 05-23-2012 at 14:18, last modified: 06-07-2012 at 12:39

This may have disappeared due to authorization changes. Investigate.

Imported from trac ticket #43, created by tmitchel on 05-23-2012 at 14:52, last modified: 05-30-2012 at 10:57

server config allows listing directory contents, and shouldn't

Imported from trac ticket #1, created by ahelsing on 04-13-2012 at 13:42, last modified: 03-04-2013 at 17:06

Imported from trac ticket #31, created by tmitchel on 05-23-2012 at 14:17, last modified: 06-08-2012 at 12:02

Walk new users through the process of getting an account, joining or creating a project, creating a slice, etc. via a checklist/wizard type thing.

Imported from trac ticket #30, created by tmitchel on 05-23-2012 at 14:17, last modified: 05-31-2012 at 16:37

Resolve on a user is not really implemented. Implement it. This touches the MA, portal...

Imported from trac ticket #12, created by ahelsing on 05-09-2012 at 11:53, last modified: 12-05-2013 at 13:17

Imported from trac ticket #46, created by tmitchel on 05-23-2012 at 14:57, last modified: 06-05-2012 at 15:40

Imported from trac ticket #38, created by tmitchel on 05-23-2012 at 14:43, last modified: 08-05-2013 at 14:25

Replace the static map on the landing page and home page with an interactive map.

Imported from trac ticket #28, created by tmitchel on 05-23-2012 at 14:13, last modified: 07-31-2013 at 12:22

Imported from trac ticket #29, created by tmitchel on 05-23-2012 at 14:15, last modified: 05-31-2012 at 19:36

Imported from trac ticket #50, created by tmitchel on 05-23-2012 at 15:01, last modified: 05-25-2012 at 16:25

Feedback from demo 2.

Imported from trac ticket #44, created by tmitchel on 05-23-2012 at 14:56, last modified: 05-23-2012 at 17:04

Display text indicating how to login to allocated resources (username, hostname, port, etc.)

Imported from trac ticket #40, created by tmitchel on 05-23-2012 at 14:46, last modified: 06-05-2012 at 16:15

Add a few affordances for context sensitive help. This is intended to be a first implementation with just a few things documented. Mark suggested "what is a project?", and "how do I know whether to join a project or create one?" as some initial things to document.

Imported from trac ticket #26, created by tmitchel on 05-23-2012 at 14:03, last modified: 08-08-2014 at 16:58

Before inserting anything into the DB, safely quote it

Imported from trac ticket #3, created by ahelsing on 04-13-2012 at 13:43, last modified: 10-02-2012 at 16:21

Start with the join/invite pages for projects. From there, we'll get feedback and iterate before rolling out to slices.

Imported from trac ticket #19, created by tmitchel on 05-23-2012 at 13:46, last modified: 05-30-2012 at 11:32

Add logging.config to git and have it installed in the right place on the portal host.

Imported from trac ticket #18, created by tmitchel on 05-23-2012 at 13:45, last modified: 05-24-2012 at 12:26

Adjust the height/width of these images per the portal header and public landing page.

Imported from trac ticket #42, created by tmitchel on 05-23-2012 at 14:51, last modified: 05-23-2012 at 16:39

Sarah took notes when she built sergyar from scratch as a portal/CH host. Update the instructions based on those notes.

Where are they instructions? Add a link here.

Imported from trac ticket #22, created by tmitchel on 05-23-2012 at 13:56, last modified: 05-31-2012 at 13:27

The portal should invoke the logging service on some AM actions like CreateSliver and DeleteSliver so that they show up in the slice history.

Imported from trac ticket #33, created by tmitchel on 05-23-2012 at 14:20, last modified: 08-21-2012 at 08:03

Parse the manifest RSpec output from omni (CreateSliver and ListResources) for pretty display on portal pages.

Imported from trac ticket #20, created by tmitchel on 05-23-2012 at 13:48, last modified: 06-03-2012 at 21:50

All inputs - from environment, GET, POST, DB should be filtered by the PHP pages

Imported from trac ticket #2, created by ahelsing on 04-13-2012 at 13:43, last modified: 08-29-2013 at 11:15

Feedback from Niky

Imported from trac ticket #41, created by tmitchel on 05-23-2012 at 14:50, last modified: 05-23-2012 at 16:28

cascade is a lab VM that we'll use for Niky and Mark to review progress and provide feedback about the portal. Build it from the base image, capturing snapshots along the way.

Imported from trac ticket #24, created by tmitchel on 05-23-2012 at 13:58, last modified: 05-31-2012 at 14:20

Allow a user to download a private SSH key after the portal has generated a keypair. The public key should go on the list of keys to install on allocated resrouces.

Check with Niky about the pros and cons of generating the ssh keys from ssl keys (like the inside keys).

Imported from trac ticket #25, created by tmitchel on 05-23-2012 at 14:01, last modified: 05-30-2012 at 13:47

Imported from trac ticket #45, created by tmitchel on 05-23-2012 at 14:56, last modified: 10-04-2012 at 09:18

The various *_controller functions need to check arguments before doing DB queries.

EG, a missing project ID to lookup_project gives a cryptic error like:

DB ERROR: : 'Array', details: '_doQuery: [Error message: Could not execute statement]\n[Last executed query: select project_name, lead_id, project_email, project_purpose FROM pa_project WHERE project_id = _]\n[Native message: ERROR:  invalid input syntax for uuid: ""\nLINE 1: ...email, project_purpose FROM pa_project WHERE project_id = ''\n                                                                     ^]\n', doing query: 'select project_name, lead_id, project_email, project_purpose FROM pa_project WHERE project_id = '_<br/>\n

Imported from trac ticket #6, created by ahelsing on 04-13-2012 at 14:24, last modified: 12-05-2013 at 13:16

This is done.

Imported from trac ticket #34, created by tmitchel on 05-23-2012 at 14:21, last modified: 08-21-2012 at 08:32

Any addressable .php file needs to check user permissions, to restrict showing pages that we shouldn't be showing

Imported from trac ticket #4, created by ahelsing on 04-13-2012 at 13:44, last modified: 10-04-2012 at 16:10

Imported from trac ticket #49, created by tmitchel on 05-23-2012 at 15:01, last modified: 07-16-2014 at 08:52

Chip wants a map of resources. For starters, screen grab the flack map showing resources and display it on the public landing page and on the home page.

Imported from trac ticket #27, created by tmitchel on 05-23-2012 at 14:05, last modified: 05-30-2012 at 09:06