Changes between Version 9 and Version 10 of GENIRacksHome/ExogeniRacks/AcceptanceTestStatus/EG-ADM-2

Timestamp:

05/27/12 17:10:25 (12 years ago)

Author:

chaos@bbn.com

Comment:

--

GENIRacksHome/ExogeniRacks/AcceptanceTestStatus/EG-ADM-2

@@ -5 +5 @@
 ''This page is GPO's working page for performing EG-ADM-2.  It is public for informational purposes, but it is not an official status report.  See [wiki:GENIRacksHome/ExogeniRacks/AcceptanceTestStatus] for the current status of ExoGENI acceptance tests.''
 
-''Last substantive edit of this page: 2012-05-08''
+''Last substantive edit of this page: 2012-05-27''
 
 == Page format ==
@@ -19 +19 @@
 == Status of test ==
 
-|| '''Step''' || '''State'''               || '''Date completed''' || '''Open Tickets''' || '''Closed Tickets/Comments'''                              ||
-|| 1A         || [[Color(orange,Blocked)]] ||                      || [exoticket:34]     || blocked on information about bbn-hn configuration ||
-|| 1B         ||                           ||                      ||                    || ready to test                                              ||
-|| 1C         ||                           ||                      ||                    || ready to test                                              ||
-|| 2A         ||                           ||                      ||                    || ready to test                                              ||
-|| 2B         ||                           ||                      ||                    || ready to test                                              ||
-|| 2C         ||                           ||                      ||                    || ready to test                                              ||
+|| '''Step''' || '''State'''               || '''Date completed''' || '''Open Tickets''' || '''Closed Tickets/Comments'''                                ||
+|| 1A         || [[Color(orange,Blocked)]] ||                      || [exoticket:34]     || blocked on information about bbn-hn configuration            ||
+|| 1B         || [[Color(green,Pass)]]     || 2012-05-27           ||                    ||                                                              ||
+|| 1C         ||                           ||                      ||                    || ready to test                                                ||
+|| 2A         ||                           ||                      ||                    || ready to test                                                ||
+|| 2B         ||                           ||                      ||                    || ready to test                                                ||
+|| 2C         ||                           ||                      ||                    || ready to test                                                ||
 || 3A         ||                           ||                      ||                    || ([exoticket:10]) [[BR]] ready to test                        ||
-|| 3B         ||                           ||                      ||                    || ready to test                                              ||
-|| 3C         ||                           ||                      ||                    || ready to test                                              ||
+|| 3B         ||                           ||                      ||                    || ready to test                                                ||
+|| 3C         ||                           ||                      ||                    || ready to test                                                ||
 || 3D         || [[Color(orange,Blocked)]] ||                      ||                    || ([exoticket:10]) [[BR]] blocked on serial access to switches ||
 || 4A         ||                           ||                      ||                    || ([exoticket:10]) [[BR]] ready to test                        ||
-|| 4B         ||                           ||                      ||                    || ready to test                                              ||
-|| 4C         ||                           ||                      ||                    || ready to test                                              ||
+|| 4B         ||                           ||                      ||                    || ready to test                                                ||
+|| 4C         ||                           ||                      ||                    || ready to test                                                ||
 || 4D         || [[Color(orange,Blocked)]] ||                      ||                    || ([exoticket:10]) [[BR]] blocked on serial access to switches ||
-|| 5          ||                           ||                      ||                    ||                                                            ||
+|| 5          ||                           ||                      ||                    ||                                                              ||
 
 == High-level description from test plan ==
@@ -107 +107 @@
  * Login does not succeed via any unencrypted login protocol
 
+==== Results of testing step 1B: 2012-05-27 ====
+
+ * First ran `sudo netstat -anp | grep LISTEN`, and got rid of:
+   * things bound to 10.100.x.x interfaces
+   * things bound to 127.0.0.1
+ * That left too many things to easily look at, so i also looked at the incoming-to-host firewall rules:
+{{{
+sudo iptables -L -v -n
+}}}
+   * Ignore things with source addresses in private or exogeni-server-old spaces
+   * Ignore things which reject incoming connections on the public interface before allowing them on private interfaces
+ * Finally, looking at what's left from all that, i identify the following listening programs:
+{{{
+/usr/sbin/sshd
+/usr/sbin/httpd
+/usr/sbin/nginx
+/usr/java/latest/bin/java (tomcat, in particular `/opt/orca*/tomcat/`)
+}}}
+Since httpd redirects to the SSL port and nginx is only serving the foam site, i don't see any obvious unencrypted login options.
+
 === Step 1C: verify sudo and sudo logging ===