The problem with the anonymous certificate was identified and fixed in the 2.4 release. It would occur with old (pre-2.3) certificate repositories into which the anonymous CA certificate had been imported (automatically by the 2.3 software). The CA cert was not properly tagged, so was not used as a CA cert, causing anon cert verification ops to fail. Thanks to Darin Oman for submitting his log files; they helped me understand and resolve the problem.
There is no relationship between the certificate and the hostname. If you look in the VenueClient.log file (in ~/.AccessGrid/Logs), you should see an indication of the problem. I'm interested to see the logfile myself, to see what has gone wrong and try to help. Tom Eric Peterson wrote: > Hi All, > > I am having the same type of problem using 2.4 and Mac OS X 10.4. If I > use the default anonymous certificate I have no problems running the > "Manage my Node" and adding and deleting services. However when I > import my certificate and try to use it, everything breaks. I am not > able to set URL node etc. Not sure what the certificate has to do with > being able to set the URL node and hostname but it some how does. I'll > just be using the anonymous cert for now. Would requesting a new > certificate fix this? > > Thanks, > Eric Peterson > Arctic Region Supercomputing Center > > > On 8/24/05, Julia Mullen <julia.mul...@gmail.com> wrote: > >>Hi Tom, >> >>I have to support Darin's experience here as we had exactly the same thing >>happen with Ray Chen at U Maryland that day. You may recall an exchange of >>email - we had the added complexity of removing the previous expired >>cert - but once that was removed the anonymous cert still gave us the >>globus-host error. >>Once Ray was able to use his own cert the error went away and we were able to >>connect and test. >> >>Ray, can you grab the logfiles from the machine you used and send them to >>Tom? >> >>Thanks, >> >> Julie >> >> >>On 8/24/05, Thomas D. Uram <tu...@mcs.anl.gov> wrote: >> >>>Darin: >>> >>>I'd be very interested to see logfiles from your machines to understand >>>what went wrong. >>> >>>There is no relationship whatsoever between the certificate and the >>>hostname, so switching from an anonymous certificate to an identity >>>certificate can not have been the solution to the problem. >>> >>>If you can send the VenueClient.log from the display machine, and the >>>ServiceManager.log from any remote machine(s) involved, we should be >>>able to identify the problem. >>> >>>Thanks in advance for your help, Darin. >>> >>>Tom >>> >>> >>>Darin Oman wrote: >>> >>>>Mike, you RULE! I replaced the anonymous certificate with a good, >>>>approved cert and it's back to normal! Is this a bug or something done >>>>on purpose? Either way, people should know about this with DHCP nodes. >>>>Thanks again! And Julie, thanks for verifying the fix. >>>> >>>>Darin >>>> >>>> >>>>On Aug 16, 2005, at 11:52 AM, Michael Miller wrote: >>>> >>>> >>>>>I've had the same trouble when trying to use an anonymous cert. not >>>>>sure how to fix tho'. What does nslookup give for your IP, and >>>>>conversely for your domain name? They should match up of course, but >>>>>I've seen the name resolve to a different IP before... >>>>> >>>>>MYK >>>>> >>>>>Darin Oman wrote: >>>>> >>>>> >>>>>>When I try to "manage my node," I'm told I need to specify the node >>>>>>service URL, then I'm told that the machine "can not open node >>>>>>management at https://..."; I know this is a problem with DHCP >>>>>>machines. I've tried set GLOBUS_HOSTNAME and I've also tried to >>>>>>remove the environment variable. The problem there is that there is >>>>>>no reference anywhere to GLOBUS_HOSTNAME. No environment variable, >>>>>>nothing. I've tried removing and reinstalling the Globus parts as >>>>>>well as the toolkit a number of times. I've also dug through the >>>>>>registry. The result is always the same. Does anybody have any idea >>>>>>what I'm missing? >>>>>> >>>>>>Thanks, >>>>>>Darin >>>>>> >>>>>> >>>>> >>>>>-- >>>>>Thanx, >>>>> >>>>>Michael Miller >>>>>System Engineer >>>>>Video Technology Services >>>>>Persistent Infrastructure Directorate >>>>>National Center for Supercomputing Applications >>>>>University of Illinois - UC >>>>>217-649-0747 >>>>> >>>>>"If you're clear in your vision and trust the people in your team with >>>>>clear objectives, they will invariably do their best to achieve >>>>>everything desired, and usually deliver everything you could have >>>>>hoped for and even more." -Paul Debevec >>>>> >>>> >>>> >>> >> > >
