Re: [gt-user] Problem with globus-url-copy

Mon, 07 Dec 2009 08:16:46 -0800

Both errors show clock skew problems. Fix that and see if you still have issues. 

Mike

cmasmas cmasmas wrote:

Hello everybody:
I'm trying to make gridftp work on two nodes, called GTMaster and CFrontend (GTMaster is the upstream for CFrontend). Could anyone help me with this, please? Thanks!! 

*FIRST CASE*
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

If I try to copy a file in the same machine, I get this: (with -dbg option)
/*globus-url-copy -dbg -vb gsiftp://cfrontend.xxx.es/etc/group <http://cfrontend.xxx.es/etc/group> file:///tmp/a*/ 

/Source: gsiftp://cfrontend.xxx.es/etc/ <http://cfrontend.xxx.es/etc/>
Dest:   file:///tmp/
  group  ->  a
debug: starting to get gsiftp://cfrontend.xxx.es/etc/group <http://cfrontend.xxx.es/etc/group> debug: connecting to gsiftp://cfrontend.xxx.es/etc/group <http://cfrontend.xxx.es/etc/group>
debug: response from gsiftp://cfrontend.xxx.es/etc/group <http://cfrontend.xxx.es/etc/group>: 220 cfrontend.xxx.es <http://cfrontend.xxx.es> GridFTP Server 3.15 (gcc32, 1222656151-78) [Globus Toolkit 4.2.1] ready.
debug: authenticating with gsiftp://cfrontend.xxx.es/etc/group <http://cfrontend.xxx.es/etc/group> debug: response from gsiftp://cfrontend.xxx.es/etc/group <http://cfrontend.xxx.es/etc/group>: 
530-globus_xio: Authentication Error
530-OpenSSL Error: s3_srvr.c:2533: in library: SSL routines, function SSL3_GET_CLIENT_CERTIFICATE: no certificate returned 
530-globus_gsi_callback_module: Could not verify credential
530-globus_gsi_callback_module: The certificate is not yet valid: Cert with subject: /O=Grid/OU=GlobusTest/OU=simpleCA-gtmaster.xxx.es/OU=xxx.es/CN=Charles <http://simpleCA-gtmaster.xxx.es/OU=xxx.es/CN=Charles> Bacon/CN=422956853 is not yet valid- check clock skew between hosts. 
530 End.
debug: fault on connection to gsiftp://cfrontend.xxx.es/etc/group <http://cfrontend.xxx.es/etc/group> debug: data callback, error globus_ftp_client: the server responded with an error, buffer 0xb79de008, length 0, offset=0, eof=true 
debug: operation complete

error: globus_ftp_client: the server responded with an error
530 530-globus_xio: Authentication Error
530-OpenSSL Error: s3_srvr.c:2533: in library: SSL routines, function SSL3_GET_CLIENT_CERTIFICATE: no certificate returned 
530-globus_gsi_callback_module: Could not verify credential
530-globus_gsi_callback_module: The certificate is not yet valid: Cert with subject: /O=Grid/OU=GlobusTest/OU=simpleCA-gtmaster.xxx.es/OU=xxx.es/CN=Charles <http://simpleCA-gtmaster.xxx.es/OU=xxx.es/CN=Charles> Bacon/CN=422956853 is not yet valid- check clock skew between hosts. 
530 End./
The problem seems to be that both nodes are not synchronized. It's true. But I'm using Xen VMs and had not managed to synz them. 

*SECOND CASE*
---------------------------------------------------------------------------------------------------------------------------------------------------------------
Trying to copy a file from CFrontend to GTMaster. See that the output says nothing about clock skew.
/*globus-url-copy -dbg -vb gsiftp://cfrontend.XXX.es/etc/group <http://cfrontend.XXX.es/etc/group> gsiftp://gtmaster.xxx.es/tmp/a <http://gtmaster.xxx.es/tmp/a>* 
/
/Source: gsiftp://cfrontend.xxx.es/etc/ <http://cfrontend.xxx.es/etc/>
Dest:   gsiftp://gtmaster.xxx.es/tmp/ <http://gtmaster.xxx.es/tmp/>
  group  ->  a
debug: starting to size gsiftp://cfrontend.xxx.es/etc/group <http://cfrontend.xxx.es/etc/group> debug: connecting to gsiftp://cfrontend.xxx.es/etc/group <http://cfrontend.xxx.es/etc/group> debug: response from gsiftp://cfrontend.xxx.es/etc/group <http://cfrontend.xxx.es/etc/group>: 220 cfrontend.xxx.es <http://cfrontend.xxx.es> GridFTP Server 3.15 (gcc32, 1222656151-78) [Globus Toolkit 4.2.1] ready.
debug: authenticating with gsiftp://cfrontend.xxx.es/etc/group <http://cfrontend.xxx.es/etc/group> debug: response from gsiftp://cfrontend.xxx.es/etc/group <http://cfrontend.xxx.es/etc/group>: 
530-globus_xio: Authentication Error
530-OpenSSL Error: s3_srvr.c:2533: in library: SSL routines, function SSL3_GET_CLIENT_CERTIFICATE: no certificate returned 
530-globus_gsi_callback_module: Could not verify credential
530-globus_gsi_callback_module: The certificate is not yet valid: Cert with subject: /O=Grid/OU=GlobusTest/OU=simpleCA-gtmaster.xxx.es/OU=xxx.es/CN=Charles <http://simpleCA-gtmaster.xxx.es/OU=xxx.es/CN=Charles> Bacon/CN=422956853 is not yet valid- check clock skew between hosts. 
530 End.
debug: fault on connection to gsiftp://cfrontend.xxx.es/etc/group <http://cfrontend.xxx.es/etc/group> 
debug: operation complete
debug: starting to transfer gsiftp://cfrontend.xxx.es/etc/group <http://cfrontend.xxx.es/etc/group> to gsiftp://gtmaster.xxx.es/tmp/a <http://gtmaster.xxx.es/tmp/a> debug: connecting to gsiftp://gtmaster.xxx.es/tmp/a <http://gtmaster.xxx.es/tmp/a>
debug: response from gsiftp://gtmaster.xxx.es/tmp/a <http://gtmaster.xxx.es/tmp/a>: 220 gtmaster.xxx.es <http://gtmaster.xxx.es> GridFTP Server 3.15 (gcc32, 1222656151-78) [Globus Toolkit 4.2.1] ready.
debug: authenticating with gsiftp://gtmaster.xxx.es/tmp/a <http://gtmaster.xxx.es/tmp/a> debug: response from gsiftp://gtmaster.xxx.es/tmp/a <http://gtmaster.xxx.es/tmp/a>: 
230 User bacon logged in.
debug: sending command to gsiftp://gtmaster.xxx.es/tmp/a <http://gtmaster.xxx.es/tmp/a>: 
SITE HELP
debug: response from gsiftp://gtmaster.xxx.es/tmp/a <http://gtmaster.xxx.es/tmp/a>: 
214-The following commands are recognized:
    ALLO    APPE    REST    CWD     CDUP    DCAU    EPSV    FEAT
    ERET    MDTM    STAT    ESTO    HELP    LIST    MODE    NLST
    MLSD    PASV    RNFR    MLST    NOOP    OPTS    STOR    PASS
    PBSZ    PORT    PROT    SITE    EPRT    RETR    SPOR    SCKS
    TREV    PWD     QUIT    SBUF    SIZE    SPAS    STRU    SYST
    RNTO    TYPE    USER    LANG    MKD     RMD     DELE    CKSM
214 End
debug: sending command to gsiftp://gtmaster.xxx.es/tmp/a <http://gtmaster.xxx.es/tmp/a>: 
FEAT
debug: response from gsiftp://gtmaster.xxx.es/tmp/a <http://gtmaster.xxx.es/tmp/a>: 
211-Extensions supported
 AUTHZ_ASSERT
 UTF8
 LANG EN
 DCAU
 PARALLEL
 SIZE
MLST Type*;Size*;Modify*;Perm*;Charset;UNIX.mode*;UNIX.owner*;UNIX.group*;Unique*;UNIX.slink*; 
 ERET
 ESTO
 SPAS
 SPOR
 REST STREAM
 MDTM
 PASV AllowDelayed;
211 End.
debug: sending command to gsiftp://gtmaster.xxx.es/tmp/a <http://gtmaster.xxx.es/tmp/a>: 
TYPE I
debug: response from gsiftp://gtmaster.xxx.es/tmp/a <http://gtmaster.xxx.es/tmp/a>: 
200 Type set to I.
debug: sending command to gsiftp://gtmaster.xxx.es/tmp/a <http://gtmaster.xxx.es/tmp/a>: 
MODE E
debug: response from gsiftp://gtmaster.xxx.es/tmp/a <http://gtmaster.xxx.es/tmp/a>: 
200 Mode set to E.
debug: sending command to gsiftp://gtmaster.xxx.es/tmp/a <http://gtmaster.xxx.es/tmp/a>: 
PBSZ 1048576
debug: response from gsiftp://gtmaster.xxx.es/tmp/a <http://gtmaster.xxx.es/tmp/a>: 
200 PBSZ=1048576
debug: sending command to gsiftp://gtmaster.xxx.es/tmp/a <http://gtmaster.xxx.es/tmp/a>: 
PASV
debug: response from gsiftp://gtmaster.xxx.es/tmp/a <http://gtmaster.xxx.es/tmp/a>: 
227 Entering Passive Mode (192,168,51,74,205,97)
debug: sending command to gsiftp://gtmaster.xxx.es/tmp/a <http://gtmaster.xxx.es/tmp/a>: 
STOR /tmp/a
debug: sending command to gsiftp://cfrontend.xxx.es/etc/group <http://cfrontend.xxx.es/etc/group>: 
TYPE I
debug: response from gsiftp://cfrontend.xxx.es/etc/group <http://cfrontend.xxx.es/etc/group>: 
530 Must perform GSSAPI authentication.
debug: fault on connection to gsiftp://cfrontend.xxx.es/etc/group <http://cfrontend.xxx.es/etc/group> 
debug: operation complete

error: globus_ftp_client: the server responded with an error
530 Must perform GSSAPI authentication.
/

Reply via email to