Thanks for the catch Marcus, that was was the problem. On Wed, Oct 4, 2017 at 1:00 PM, Christie, Marcus Aaron <[email protected]> wrote:
> Neeraj, > > The DocumentRoute and Directory should be the public directory. Set them > to /Users/student/git/airavata-php-gateway/public/. See earlier email [1]. > > [1] http://mail-archives.apache.org/mod_mbox/airavata-dev/201709.mbox/% > 3CCAJ4Ojz6o2RDEafovC7DB0L%2BjBfFqyMWGHSdpm1okKU6eX891Yg% > 40mail.gmail.com%3E > <http://mail-archives.apache.org/mod_mbox/airavata-dev/201709.mbox/%3ccaj4ojz6o2rdeafovc7db0l+jbffqymwghsdpm1okku6ex89...@mail.gmail.com%3E> > > > > On Oct 4, 2017, at 10:56 AM, Neeraj Lad <[email protected]> wrote: > > Hi all, > > I was able to run PGA locally, then I changed the Virtual host to point to > a new directory to check out the new commits on PGA. > > Now when I try to access localhost:8080, I get the following error: > > Forbidden > > You don't have permission to access / on this server. > > Here is my httpd-pga.conf file > > <VirtualHost *:8080> > DocumentRoot /Users/student/git/airavata-php-gateway > <Directory "/Users/student/git/airavata-php-gateway"> > DirectoryIndex index.php > AllowOverride All > Require all granted > </Directory> > </VirtualHost> > > Any ideas about this? > > On Fri, Sep 29, 2017 at 11:59 AM, Neeraj Lad <[email protected]> wrote: > >> That sounds good to me. >> >> On Fri, Sep 29, 2017 at 11:56 AM, Marcus Christie <[email protected]> >> wrote: >> >>> Ok, we’ll probably have to debug this in person. I’ll be at the Science >>> Gateways course office hours today. >>> >>> On Sep 29, 2017, at 11:44 AM, Neeraj Lad <[email protected]> wrote: >>> >>> I do have the server certificate file path in my pga_config, Marcus. >>> >>> On Fri, Sep 29, 2017 at 9:18 AM, Christie, Marcus Aaron <[email protected] >>> > wrote: >>> >>>> Neeraj, >>>> >>>> Make sure in pga_config.php you have the following >>>> >>>> /** >>>> * Path to the server certificate file >>>> */ >>>> 'cafile-path' => app_path() . '/resources/security/incommon_ >>>> rsa_server_ca.pem', >>>> >>>> On Sep 28, 2017, at 3:34 PM, Neeraj Lad <[email protected]> wrote: >>>> >>>> Marcus, >>>> >>>> Thank you for the change. >>>> >>>> Now I can reach the CILogon page from localhost, but after selecting >>>> Indiana University as the Identity provider, I get this error: >>>> >>>> curl_exec() failed. Error: SSL certificate problem: Invalid certificate >>>> chain >>>> >>>> I tried to login in Incognito mode, but the error persists. >>>> >>>> >>>> >>>> On Thu, Sep 28, 2017 at 3:02 PM, Christie, Marcus Aaron < >>>> [email protected]> wrote: >>>> >>>>> Neeraj, >>>>> >>>>> Try again. This required a change in Keycloak to allow >>>>> http://localhost:8080 and http://localhost:8080/callback-url as >>>>> redirect URLs for the dev testdrive realm. >>>>> >>>>> On Sep 28, 2017, at 1:01 PM, Neeraj Lad <[email protected]> wrote: >>>>> >>>>> Marcus, >>>>> >>>>> Changing the oauth-callback-url gives me the Keycloak error 'Invalid >>>>> parameter: redirect_uri'. It tried using https, 127.0.0.1 but both did not >>>>> work. A Stack Overflow question mentions that Keycloak admin console needs >>>>> to be configured. Here is the question: >>>>> https://stackoverflow.com/questions/45352880/keycloak-invali >>>>> d-parameter-redirect-uri >>>>> >>>>> >>>>> There are three of files apart from pga_config which make use of the >>>>> variable oauth-callback-url. >>>>> >>>>> 1. /app/config/pga_config.php.template: This sets the url to ' >>>>> https://dev.seagrid.org/callback-url'. I guess this file is not >>>>> relevant here. >>>>> >>>>> 2. /app/libraries/Keycloak/KeycloakServiceProvider.php: This uses >>>>> Config::get('pga_config.wsis') to create a variable 'identityServerConfig' >>>>> which has the oauth-callback-url as a field. The file 'pga_config.wsis' is >>>>> not on the codebase. Config is related to Laravel. I am not sure how >>>>> Config >>>>> returns back 'identityServerConfig'. Am I right in guessing that you are >>>>> extracting the pga_config.wsis from some server? >>>>> >>>>> 3. /app/libraries/Wsis/Wsis.php: This again makes use of >>>>> Config::get('pga_config.wsis') >>>>> >>>>> >>>>> Do you think there is a need to change some configuration on Keycloak. >>>>> If yes, how can I do it? >>>>> >>>>> >>>>> >>>>> >>>>> On Thu, Sep 28, 2017 at 9:15 AM, Christie, Marcus Aaron < >>>>> [email protected]> wrote: >>>>> >>>>>> >>>>>> On Sep 28, 2017, at 8:24 AM, Neeraj Lad <[email protected]> wrote: >>>>>> >>>>>> Hi all, >>>>>> >>>>>> I've followed the instructions to install all the dependencies for >>>>>> the PGA. Now I need to run it locally. >>>>>> >>>>>> I got the pga_config file from Eroma, but using it and logging in >>>>>> with CILogon takes me to the dev.testdrive.airavata.org, instead of >>>>>> the version at localhost:8080. How can I avoid this? >>>>>> >>>>>> >>>>>> Neeraj, >>>>>> >>>>>> change oauth-callback-url in pga_config.php to have the value ‘ >>>>>> http://localhost:8080/callback-url' >>>>>> >>>>>> >>>>>> As another option, I know there are instructions to set PGA on CentOS >>>>>> using Ansible. But are there any similar instructions for OS X? >>>>>> >>>>>> >>>>>> No. Closest thing would be to run VirtualBox on OS X and use Ansible >>>>>> to install PGA on the VirtualBox VM. Eric Coulter did a POC of this: >>>>>> https://github.com/ECoulter/airavata/tree/develop/dev- >>>>>> tools/ansible/inventories/local-vbox. >>>>>> >>>>>> >>>>> >>>>> >>>> >>>> >>> >>> >> > >
