On Jun 13, 2007, at 7:43 AM, jochen Mueller wrote:
Hi,
After setting the location of the host certificate in the global
variable X509.USER_CERT and X509.USER_KEY as suggested in
http://www.globus.org/toolkit/docs/4.0/security/prewsaa/
Pre_WS_AA_Public_Interfaces.html#prewsaa-env-credentials
I get the an error (see further below) when I submit a job.
Setting the host key/cert using $GLOBUS_LOCATION/setup/globus/setup-
globus-gram-job-manager.pl didn't help either.
Whenever the host.cert/key pair is in /etc/grid-security directory
it works fine. Using $GLOBUS_LOCATION/etc/grid-security as a
directory for the host cert was also not successful. Restarting the
container and making post-install was not helpful.
Is that a bug in Globus?
No. :-)
Submitting a GRAM job involves a number of different services. The
error you quote below is from the gridftp server being used to
transfer your files. If you set X509_USER_CERT and X509_USER_KEY in
the xinetd.d entry for the GridFTP server, it will use the hostcert
from wherever you want to keep it.
Charles
####
globusrun-ws -submit -s -F XXX -c /bin/hostname
Delegating user credentials...Done.
Submitting job...Done.
Job ID: uuid:04d5e46a-19a3-11dc-bbf2-00163e1ebdea
Termination time: 06/14/2007 11:41 GMT
Current job state: Active
Current job state: CleanUp-Hold
globusrun-ws: ignoring error while streaming gsiftp://lxxxx:2810/
xxx/yyyy.0.stdout:
globus_ftp_client: the server responded with an error
530 530-globus_xio: Server side credential failure
530-globus_gsi_gssapi: Error with gss credential handle
530-globus_credential: Valid credentials could not be found in any
of the possible locations specified by the credential search order.
530-Valid credentials could not be found in any of the possible
locations specified by the credential search order.
530-
530-Attempt 1
530-
530-globus_credential: Error reading host credential
530-globus_sysconfig: Could not find a valid certificate file: The
host cert could not be found in:
530-1) env. var. X509_USER_CERT
530-2) /etc/grid-security/hostcert.pem
530-3) $GLOBUS_LOCATION/etc/hostcert.pem
530-4) $HOME/.globus/hostcert.pem
530-
530-The host key could not be found in:
530-1) env. var. X509_USER_KEY
530-2) /etc/grid-security/hostkey.pem
530-3) $GLOBUS_LOCATION/etc/hostkey.pem
530-4) $HOME/.globus/hostkey.pem
530-
530-
530-
530-Attempt 2
530-
530-globus_credential: Error reading proxy credential
530-globus_sysconfig: Could not find a valid proxy certificate file
location
530-globus_sysconfig: Error with key filename
530-globus_sysconfig: File does not exist: /tmp/x509up_u0 is not a
valid file
530-
530-Attempt 3
530-
530-globus_credential: Error reading user credential
530-globus_sysconfig: Error with certificate filename: The user
cert could not be found in:
530-1) env. var. X509_USER_CERT
530-2) $HOME/.globus/usercert.pem
530-3) $HOME/.globus/usercred.p12
530-
530-
530-
530 End.
globusrun-ws: ignoring error while streaming gsiftp://xxxx.2810/xxx/
04d5e46a-19a3-11dc-bbf2-00163e1ebdea.0.stderr:
globus_ftp_client: the server responded with an error
530 Must perform GSSAPI authentication.
Current job state: CleanUp
Current job state: Failed
Destroying job...Done.
Cleaning up any delegated credentials...Done.
globusrun-ws: Job failed: Staging error for RSL element fileCleanUp.
Cheers,
jochen
_____________________________________________________________________
Der WEB.DE SmartSurfer hilft bis zu 70% Ihrer Onlinekosten zu sparen!
http://smartsurfer.web.de/?mc=100071&distributionid=000000000066
