What does the service security descriptor look like? A change in security credential can happen if your "Run As" configuration to set to be different, in your case it looks like it might be set to "caller-identity". Details are provided here: http://www.globus.org/toolkit/docs/4.0/security/authzframe/security_descript or.html#s-authzframe-secdesc-configRunas Rachana
_____ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Belaid MOA Sent: Tuesday, August 12, 2008 12:02 AM To: [email protected] Subject: [gt-user] Stateful web services under GT4.0.6. Dear All, Did any of you come across this bizarre problem under GT4.0.6? Any help about this is very appreciated. I wrote a GT4 stateful service based on Anthoney and Sotomayor examples. Although I do not deal with any security in my code, somehow my container changes its credentials when I use stateful services. The funny thing is that my first call to the service works, but the second call fails with the error pasted below. After calling my stateful services, all my other services generate the error: faultString: org.globus.common.ChainedIOException: Authentication failed [Caused by: Operation unauthorized (Mechanism level: Authorization failed. Expected "/CN=host/mars.csc.uvic.ca" target but received "/C=CA/O=Grid/OU=pfc.forestry.ca/CN=Hao Chen")]. The only way to get my stateless services work again is by restarting the globus container. =========================================================== AxisFault faultCode: {http://schemas.xmlsoap.org/soap/envelope/}Server.userException faultSubcode: faultString: org.globus.common.ChainedIOException: Authentication failed [Caused by: Operation unauthorized (Mechanism level: Authorization failed. Expected "/CN=host/mars.csc.uvic.ca" target but received "/C=CA/O=Grid/OU=pfc.forestry.ca/CN=Hao Chen")] faultActor: faultNode: faultDetail: {http://xml.apache.org/axis/}stackTrace:Authentication failed. Caused by GSSException: Operation unauthorized (Mechanism level: Authorization failed. Expected "/CN=host/mars.csc.uvic.ca" target but received "/C=CA/O=Grid/OU=pfc.forestry.ca/CN=Hao Chen") at org.globus.gsi.gssapi.GlobusGSSContextImpl.initSecContext(GlobusGSSContextIm pl.java:509) at org.globus.gsi.gssapi.net.GssSocket.authenticateClient(GssSocket.java:102) at org.globus.gsi.gssapi.net.GssSocket.startHandshake(GssSocket.java:140) at org.globus.gsi.gssapi.net.GssSocket.getOutputStream(GssSocket.java:161) at org.apache.axis.transport.http.HTTPSender.writeToSocket(HTTPSender.java:433) at org.apache.axis.transport.http.HTTPSender.invoke(HTTPSender.java:135) at org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java: 32) at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118) at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83) at org.apache.axis.client.AxisClient.invoke(AxisClient.java:165) at org.apache.axis.client.Call.invokeEngine(Call.java:2727) at org.apache.axis.client.Call.invoke(Call.java:2710) at org.apache.axis.client.Call.invoke(Call.java:2386) at org.apache.axis.client.Call.invoke(Call.java:2309) at org.apache.axis.client.Call.invoke(Call.java:1766) at uvic.pfc.datahp.stubs.GridWISV1.bindings.GridWISV1PortTypeSOAPBindingStub.ge tState(GridWISV1PortTypeSOAPBindingStub.java:670) at web.uvic.pfc.portals.GridWISClient.getSubmissionState(Unknown Source) at web.uvic.pfc.portals.GridWISClient.processData(Unknown Source) at web.uvic.pfc.portals.GridWISClient.processData(Unknown Source) at web.uvic.pfc.portals.GridWISWorker.run(Unknown Source) at java.lang.Thread.run(Thread.java:619) {http://xml.apache.org/axis/}hostname:mars.csc.uvic.ca ============================================================================ == With many thanks in advance. B. Moa. _____
