Hi,
We just installed VDT 1.8. One of the troubles is a plenty records in
container-real.log file with two kinds of errors (see below). First kind
of errors relates to all certificates where in *.signing_policy files
DNs are used without double quotes inside single quotes. I mean if DN
looks like '"/C=US/O=SDSC/*"' then a certificate could be loaded. And I
couldn't find anything strange in files which are appeared as references
in second kind of errors. These errors are logged every minute so
container-real.log became unusable because of plenty of similar error
messages.
Could you please advise how can I suppress those errors?
Thank you.
2008-05-09 15:27:43,798 ERROR gsi.TrustedCertificates
[Timer-8,loadCert:344] Signing policy
/opt/vdt/globus/TRUSTED_CA/3deda549.signing_policy failed to load
org.globus.gsi.SigningPolicyParserException: Line format is incorrect,
unmatched quotes. Invalid line is: "cond_subjects globus
'/C=US/O=SDSC/*'"
at
org.globus.gsi.SigningPolicyParser.getAllowedDNs(SigningPolicyParser.jav
a:371)
at
org.globus.gsi.SigningPolicyParser.getPolicy(SigningPolicyParser.java:27
3)
at
org.globus.gsi.SigningPolicyParser.getPolicy(SigningPolicyParser.java:15
6)
at
org.globus.gsi.TrustedCertificates.getPolicyEntry(TrustedCertificates.ja
va:371)
at
org.globus.gsi.TrustedCertificates.loadCert(TrustedCertificates.java:312
)
at
org.globus.gsi.TrustedCertificates.reload(TrustedCertificates.java:234)
at
org.globus.gsi.TrustedCertificates$DefaultTrustedCertificates.refresh(Tr
ustedCertificates.java:433)
at
org.globus.gsi.TrustedCertificates.getDefault(TrustedCertificates.java:4
25)
at
org.globus.gsi.ptls.PureTLSTrustedCertificates.getDefaultPureTLSTrustedC
ertificates(PureTLSTrustedCertificates.java:91)
at
org.globus.gsi.gssapi.GlobusGSSContextImpl.setTrustedCertificates(Globus
GSSContextImpl.java:739)
at
org.globus.gsi.gssapi.GlobusGSSContextImpl.init(GlobusGSSContextImpl.jav
a:629)
at
org.globus.gsi.gssapi.GlobusGSSContextImpl.initSecContext(GlobusGSSConte
xtImpl.java:463)
at
org.globus.gsi.gssapi.net.GssSocket.authenticateClient(GssSocket.java:10
2)
at
org.globus.gsi.gssapi.net.GssSocket.startHandshake(GssSocket.java:140)
at
org.globus.gsi.gssapi.net.GssSocket.getOutputStream(GssSocket.java:161)
at
org.apache.axis.transport.http.HTTPSender.writeToSocket(HTTPSender.java:
433)
at
org.apache.axis.transport.http.HTTPSender.invoke(HTTPSender.java:135)
at
org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.j
ava:32)
at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118)
at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)
at org.apache.axis.client.AxisClient.invoke(AxisClient.java:165)
at org.apache.axis.client.Call.invokeEngine(Call.java:2741)
at org.apache.axis.client.Call.invoke(Call.java:2724)
at org.apache.axis.client.Call.invoke(Call.java:2400)
at org.apache.axis.client.Call.invoke(Call.java:2323)
at org.apache.axis.client.Call.invoke(Call.java:1770)
at
org.oasis.wsrf.properties.GetResourcePropertySOAPBindingStub.getResource
Property(GetResourcePropertySOAPBindingStub.java:397)
at
org.globus.mds.aggregator.impl.QueryAggregatorSource.pollGet(QueryAggreg
atorSource.java:118)
at
org.globus.mds.aggregator.impl.QueryAggregatorSource.poll(QueryAggregato
rSource.java:89)
at
org.globus.mds.aggregator.impl.PollingAggregatorSource$QueryTimerListene
r.timerExpired(PollingAggregatorSource.java:296)
at
org.globus.wsrf.impl.timer.TimerListenerWrapper.executeTask(TimerListene
rWrapper.java:65)
at
org.globus.wsrf.impl.timer.TimerListenerWrapper.run(TimerListenerWrapper
.java:82)
at java.util.TimerThread.mainLoop(Timer.java:512)
at java.util.TimerThread.run(Timer.java:462)
2008-05-09 15:27:43,799 ERROR gsi.TrustedCertificates
[Timer-8,loadCert:347] Certificate /opt/vdt/globus/TRUSTED_CA/2f3fadf6.0
failed to load.
java.lang.StringIndexOutOfBoundsException: String index out of range: -1
at java.lang.String.substring(String.java:1768)
at
org.globus.gsi.SigningPolicyParser.isCASignRight(SigningPolicyParser.jav
a:399)
at
org.globus.gsi.SigningPolicyParser.getPolicy(SigningPolicyParser.java:23
9)
at
org.globus.gsi.SigningPolicyParser.getPolicy(SigningPolicyParser.java:15
6)
at
org.globus.gsi.TrustedCertificates.getPolicyEntry(TrustedCertificates.ja
va:371)
at
org.globus.gsi.TrustedCertificates.loadCert(TrustedCertificates.java:312
)
at
org.globus.gsi.TrustedCertificates.reload(TrustedCertificates.java:234)
at
org.globus.gsi.TrustedCertificates$DefaultTrustedCertificates.refresh(Tr
ustedCertificates.java:433)
at
org.globus.gsi.TrustedCertificates.getDefault(TrustedCertificates.java:4
25)
at
org.globus.gsi.ptls.PureTLSTrustedCertificates.getDefaultPureTLSTrustedC
ertificates(PureTLSTrustedCertificates.java:91)
at
org.globus.gsi.gssapi.GlobusGSSContextImpl.setTrustedCertificates(Globus
GSSContextImpl.java:739)
at
org.globus.gsi.gssapi.GlobusGSSContextImpl.init(GlobusGSSContextImpl.jav
a:629)
at
org.globus.gsi.gssapi.GlobusGSSContextImpl.initSecContext(GlobusGSSConte
xtImpl.java:463)
at
org.globus.gsi.gssapi.net.GssSocket.authenticateClient(GssSocket.java:10
2)
at
org.globus.gsi.gssapi.net.GssSocket.startHandshake(GssSocket.java:140)
at
org.globus.gsi.gssapi.net.GssSocket.getOutputStream(GssSocket.java:161)
at
org.apache.axis.transport.http.HTTPSender.writeToSocket(HTTPSender.java:
433)
at
org.apache.axis.transport.http.HTTPSender.invoke(HTTPSender.java:135)
at
org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.j
ava:32)
at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118)
at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)
at org.apache.axis.client.AxisClient.invoke(AxisClient.java:165)
at org.apache.axis.client.Call.invokeEngine(Call.java:2741)
at org.apache.axis.client.Call.invoke(Call.java:2724)
at org.apache.axis.client.Call.invoke(Call.java:2400)
at org.apache.axis.client.Call.invoke(Call.java:2323)
at org.apache.axis.client.Call.invoke(Call.java:1770)
at
org.oasis.wsrf.properties.GetResourcePropertySOAPBindingStub.getResource
Property(GetResourcePropertySOAPBindingStub.java:397)
at
org.globus.mds.aggregator.impl.QueryAggregatorSource.pollGet(QueryAggreg
atorSource.java:118)
at
org.globus.mds.aggregator.impl.QueryAggregatorSource.poll(QueryAggregato
rSource.java:89)
at
org.globus.mds.aggregator.impl.PollingAggregatorSource$QueryTimerListene
r.timerExpired(PollingAggregatorSource.java:296)
at
org.globus.wsrf.impl.timer.TimerListenerWrapper.executeTask(TimerListene
rWrapper.java:65)
at
org.globus.wsrf.impl.timer.TimerListenerWrapper.run(TimerListenerWrapper
.java:82)
at java.util.TimerThread.mainLoop(Timer.java:512)
at java.util.TimerThread.run(Timer.java:462)
Kind regards,
Andrey Kharuk
Advanced eResearch Systems Administrator
Information Technology Services
The University of Auckland
