Yes, I think that could be the problem, as you're mapping the DN to
griduser in gs4gt2's grid-mapfile, and user globus can't setuid to
griduser.  Running the gridftp service as root may fix it:

http://www.globus.org/toolkit/docs/4.0/admin/docbook/quickstart.html#q-gridftp

Jörg Matthes <[EMAIL PROTECTED]> wrote:
> Hi,
> thanks, but if I remove the gs4gt2 D Entry in the grid-mapfile, I get
> the same message.
> I start the ftp server in daemon mode und with the user "globus" on
> gs4gt2 (shib-sp: user griduser). Could it be, that this is the
> problem.
>
> Joerg
>
>
>
> [EMAIL PROTECTED] schrieb:
> > Hi,
> >
> > I think the problem is that you are mapping two different DNs to the same
> > user and one of which is a host certificate. I think this is not correct.
> > Remove the second mapping with CN=gs4gt2.awi.de and try it again.
> >
> > I hope this may help,
> > Hamza
> >
> >
> >
> >> Hi,
> >> I've installed Globus Toolkit 4.0.5 and we will use globusrun-ws with
> >> the streaming function. But I get the following error message:
> >>
> >> /[EMAIL PROTECTED]:/opt/globus/ws-core-4.0.5/bin$ ./globusrun-ws -submit
> >> -s -F gs4gt2.awi.de:8443 -c /bin/date
> >> Delegating user credentials...Done.
> >> Submitting job...Done.
> >> Job ID: uuid:6412adec-8b7b-11dc-9d9d-000c291fb941
> >> Termination time: 11/06/2007 08:44 GMT
> >> Current job state: Active
> >> globusrun-ws: ignoring error while streaming
> >> gsiftp://gs4gt2.awi.de:2811/home/griduser/6412adec-8b7b-11dc-9d9d-000c291fb941.0.stdout:
> >> globus_ftp_client: the server responded with an error
> >> 530 530-Login incorrect. : globus_gss_assist: Gridmap lookup failure:
> >> Could not map /C=DE/O=GridGermany/OU=Alfred-Wegener-Institut/OU=C3-Grid
> >> Community Portal Proxy Authority/CN=griduser
> >> 530-
> >> 530 End.
> >> /
> >> In /home/griduser on gs4gt2 it is a file
> >> (/6412adec-8b7b-11dc-9d9d-000c291fb941.0.stdout) with the job
> >> result.This is ok.
> >>
> >> I've test globus-url-copy and get the message:
> >> /[EMAIL PROTECTED]:/opt/globus/ws-core-4.0.5/bin$ ./globus-url-copy
> >> file:////opt/globus/ws-core-4.0.5/GLOBUS_LICENSE
> >> gsiftp://gs4gt2.awi.de:2811/GLOBUS_LICENSE
> >>
> >> error: globus_ftp_client: the server responded with an error
> >> 530 530-Login incorrect. : globus_gss_assist: Gridmap lookup failure:
> >> Could not map /C=DE/O=GridGermany/OU=Alfred-Wegener-Institut/OU=C3-Grid
> >> Community Portal Proxy Authority/CN=griduser
> >> 530-
> >> 530 End.
> >> /
> >> the grid-mapfiles
> >> [EMAIL PROTECTED]:/opt/globus/ws-core-4.0.5/bin$ cat
> >> /etc/grid-security/grid-mapfile
> >> "/C=DE/O=GridGermany/OU=Alfred-Wegener-Institut/OU=C3-Grid Community
> >> Portal Proxy Authority/CN=griduser" griduser
> >> "/C=DE/O=GridGermany/OU=Alfred-Wegener-Institut/OU=C3-Grid Community
> >> Portal Proxy Authority/CN=gs4gt2.awi.de" griduser
> >> [EMAIL PROTECTED]:/etc/grid-security$ cat grid-mapfile
> >> "/C=DE/O=GridGermany/OU=Alfred-Wegener-Institut/OU=C3-Grid Community
> >> Portal Proxy Authority/CN=griduser" griduser
> >> "/C=DE/O=GridGermany/OU=Alfred-Wegener-Institut/OU=C3-Grid Community
> >> Portal Proxy Authority/CN=gs4gt2.awi.de" griduser
> >>
> >> I think that the Credentials are ok:
> >> /[EMAIL PROTECTED]:/opt/globus/ws-core-4.0.5/bin$ ./grid-proxy-info
> >> subject  : /C=DE/O=GridGermany/OU=Alfred-Wegener-Institut/OU=C3-Grid
> >> Community Portal Proxy Authority/CN=griduser/CN=1351147958
> >> issuer   : /C=DE/O=GridGermany/OU=Alfred-Wegener-Institut/OU=C3-Grid
> >> Community Portal Proxy Authority/CN=griduser
> >> identity : /C=DE/O=GridGermany/OU=Alfred-Wegener-Institut/OU=C3-Grid
> >> Community Portal Proxy Authority/CN=griduser
> >> type     : Proxy draft (pre-RFC) compliant impersonation proxy
> >> strength : 512 bits
> >> path     : /etc/grid-security/testproxy.pem
> >> timeleft : 11:01:00
> >> /
> >> [EMAIL PROTECTED]:~$ grid-proxy-info
> >> /subject  : /C=DE/O=GridGermany/OU=Alfred-Wegener-Institut/OU=C3-Grid
> >> Community Portal Proxy Authority/CN=gs4gt2.awi.de/CN=66009344
> >> issuer   : /C=DE/O=GridGermany/OU=Alfred-Wegener-Institut/OU=C3-Grid
> >> Community Portal Proxy Authority/CN=gs4gt2.awi.de
> >> identity : /C=DE/O=GridGermany/OU=Alfred-Wegener-Institut/OU=C3-Grid
> >> Community Portal Proxy Authority/CN=gs4gt2.awi.de
> >> type     : Proxy draft (pre-RFC) compliant impersonation proxy
> >> strength : 512 bits
> >> path     : /etc/grid-security/proxy.pem
> >> timeleft : 10:56:40
> >> /
> >> thanks and best regards
> >> Joerg
> >>
> >>
> >>
> >
> >
> >
>
>
> --
> Jörg Matthes
>
> Alfred Wegener Institut
> Am Handelshafen 12
> D-27570 Bremerhaven
>
> Büro: +49(471)4831-1016
> Mobil: 0170/5267196
> H.323: 0049 471 4831 2829
>

Reply via email to