You should have a $GLOBUS_LOCATION/share/certificates directory on nodeb containing 5776aba7.0 and 5776aba7.signing_policy files after doing the scp. The error from myproxy-retrieve is about not finding those CA files.
If you do have those files and you still get the error from myproxy-retrieve, then check if you have an /etc/grid-security/certificates directory or if you have the X509_CERT_DIR environment variable defined that is overriding $GLOBUS_LOCATION/share/certificates. An alternative to copying $GLOBUS_LOCATION/share/certificates via scp is to run "myproxy-retrieve -T ..." but if you already did the scp, you shouldn't need -T. The usual myproxy-retrieve command from the quickstart should work after the scp. arindam choudhury wrote: > Sir, > i could not copy it using globus account. It gives me permission denied > error. even not doing r...@nodea. so I scp from the root user. > should I run the myproxy-retrieve -T -s nodea -k nodeb.grid.tu -l nodeb this > command. > > Arindam > >> Date: Fri, 29 May 2009 06:56:49 -0500 >> From: jbas...@ncsa.uiuc.edu >> To: arin...@live.com >> CC: gt-user@lists.globus.org >> Subject: Re: [gt-user] problem setting up second node >> >> Did you scp your $GLOBUS_LOCATION/share/certificates directory from >> nodea to nodeb according to >> <http://www.globus.org/toolkit/docs/latest-stable/admin/quickstart/#q-security2>? >> >> Alternatively, you could try adding -T to your myproxy-retrieve >> command-line. >> >> arindam choudhury wrote: >>> Sir, >>> >>> I am trying to install globus 4.2.1 in fedora 8. i have configured the >>> first node. i am following the quickstart guide given in globus.org. >>> >>> when i try to set up security in 2nd machine, i get the following error: >>> >>> [r...@nodeb ~]# myproxy-retrieve -s nodea -k nodeb.grid.tu -l nodeb >>> Error authenticating: GSS Major Status: Authentication Failed >>> GSS Minor Status Error Chain: >>> globus_gss_assist: Error during context initialization >>> OpenSSL Error: s3_clnt.c:894: in library: SSL routines, function >>> SSL3_GET_SERVER_CERTIFICATE: certificate verify failed >>> globus_gsi_callback_module: Could not verify credential >>> globus_gsi_callback_module: Can't get the local trusted CA certificate: >>> Untrusted self-signed certificate in chain with hash 5776aba7 >>> >>> Please help >>> >>> Arindam >>> >>> _________________________________________________________________ >>> Drag n’ drop—Get easy photo sharing with Windows Live™ Photos. >>> >>> http://www.microsoft.com/india/windows/windowslive/photos.aspx > > Get easy photo sharing with Windows Live™ Photos. Drag n’ drop > _________________________________________________________________ > Drag n’ drop—Get easy photo sharing with Windows Live™ Photos. > > http://www.microsoft.com/india/windows/windowslive/photos.aspx
smime.p7s
Description: S/MIME Cryptographic Signature
