Re: [gt-user] Problem with globus-gatekeeper

[Jim Basney]

It looks like you need to decrypt your hostkey:

  openssl rsa -in /etc/grid-security/hostkey.pem \
             -out /etc/grid-security/hostkey.pem

JuanPablo wrote:
> hi,
>  I have a problem with the gatekeeper.
> if I try start the globus-gatekeeper to make a globus-job-run, but get
> this output
> 
> # service globus-gatekeeper start
> Starting globus-gatekeeperGSS failed getting server credentials:
> GSS Major Status: General failure
> GSS Minor Status Error Chain:
> globus_gsi_gssapi: Error with GSI credential
> globus_gsi_gssapi: Error with gss credential handle
> globus_credential: Valid credentials could not be found in any of the
> possible locations specified by the credential search order.
> Valid credentials could not be found in any of the possible locations
> specified by the credential search order.
> 
> Attempt 1
> 
> globus_credential: Error reading host credential
> globus_credential: Key is password protected: GSI does not currently
> support password protected private keys.
> OpenSSL Error: pem_lib.c:401: in library: PEM routines, function
> PEM_do_header: bad password read
> 
> Attempt 2
> 
> globus_credential: Error reading proxy credential
> globus_sysconfig: Could not find a valid proxy certificate file location
> globus_sysconfig: Error with key filename
> globus_sysconfig: File does not exist: /tmp/x509up_u0 is not a valid file
> 
> Attempt 3
> 
> globus_credential: Error reading user credential
> globus_credential: Key is password protected: GSI does not currently
> support password protected private keys.
> OpenSSL Error: pem_lib.c:401: in library: PEM routines, function
> PEM_do_header: bad password read
> 
> Failure: GSS failed to get server credentials
> 
>                                                            [FALLÓ]
> 
> 
> ... and my hostcert permision.
> # ls -l /etc/grid-security/host*
> -rw-r--r--  1 root root 2155 ago 12 00:29 /etc/grid-security/hostcert.pem
> -r--------  1 root root 1929 ago 12 00:29 /etc/grid-security/hostkey.pem
> 
> 
> any suggestion ?
> many thanks

smime.p7s
Description: S/MIME Cryptographic Signature