Re: [gt-user] Problem with MyProxy and certificate_issuer_subca_certfile

2012-06-14 Thread Lukasz Lacinski
The error message is definitely misleading. It came out that subjects in mappings were incorrect. Every attribute name should be capitalized. For example, the following mappings will end up with the error: /c=us/o=Globus Testers/cn=John Doe joed What is interesting, the error appears when the

[gt-user] Problem with MyProxy and certificate_issuer_subca_certfile

2012-06-11 Thread Lukasz Lacinski
We use MyProxy server with Simple CA to issue user credentials. And wanted to use the certificate_issuer_subca_certfile option to add a certificate of the Simple CA to a certificate chain sent by MyProxy server. Unfortunately, the option causes the following error: Jun 11 13:36:34 auth1

Re: [gt-user] Problem with MyProxy and certificate_issuer_subca_certfile

2012-06-11 Thread Jim Basney
What are the contents of /var/lib/myproxy/.globus/simpleCA/cacert.pem? On 6/11/12 3:38 PM, Lukasz Lacinski wrote: We use MyProxy server with Simple CA to issue user credentials. And wanted to use the certificate_issuer_subca_certfile option to add a certificate of the Simple CA to a

Re: [gt-user] Problem with MyProxy and certificate_issuer_subca_certfile

2012-06-11 Thread Lukasz Lacinski
It is: root@auth1:/var/log# less /var/lib/myproxy/.globus/simpleCA/cacert.pem -BEGIN CERTIFICATE- MIIClTCCAf6gAwIBAgIJAI/w6x7BOKQMMA0GCSqGSIb3DQEBBQUAMGkxDTALBgNV BAoTBEdyaWQxEzARBgNVBAsTCkdsb2J1c1Rlc3QxKDAmBgNVBAsTH3NpbXBsZUNB