You create a user certificate for a user and host certificate for a host.
I'm confused by your term "user certs of hostb". It looks like you are
running the GridFTP server as root and it uses the host credential. If
this is the case and if you are not running any clients on hosta or hostb,
you do not need to have any user certs on hosta or hostb. You need the
user cert only on the machine where you run globus-url-copy. All you need
on hosta and hostb is a gridmap file that maps the globus-url-copy user's
DN to a local user id.

> debug: authenticating with gsiftp://hosta/tmp/thirdparty.txt
> debug: response from gsiftp://hosta/tmp/thirdparty.txt:
> 530-Login incorrect. : globus_gss_assist: Gridmap lookup failure: Could
> not map /O=Grid/OU=GlobusTest/OU=simpleCA-ca/OU=localdomain/CN=buser
> 530- 530 End.

This error indicates that the server on hosta could not find a mapping for
"/O=Grid/OU=GlobusTest/OU=simpleCA-ca/OU=localdomain/CN=buser"

Does the DN in the gridmap file on hosta exactly matches the above string?
Could there be any typo?

Raj

On Tue, 19 Aug 2008, balaji prabu wrote:

> What we did was , initially we created a separate user cert for hosta and
> then set up the grid mapfile using it...but after going through the other
> mailing lists we deleted the user certs of hosta and used the user certs of
> hostb itself , after which we changed the gridmap file according to the user
> certs of hostb . so now the grid mapfile of hosta looks like
>
> *"/O=Grid/OU=GlobusTest/OU=**simpleCA-ca/OU=localdomain/CN=**buser" buser*
>
>
>
> On Mon, Aug 18, 2008 at 9:15 PM, Raj Kettimuthu <[EMAIL PROTECTED]>wrote:
>
> > Do you have a grid-mapfile on hosta that contains the following?
> > "/O=Grid/OU=GlobusTest/OU=simpleCA-ca/OU=localdomain/CN=buser" buser
> >
> > On Sat, 16 Aug 2008, balaji prabu wrote:
> >
> > > i am trying to configure the grid ftp and everything went on fine and i
> > was
> > > able to execute the following commands without any problem
> > >
> > > *globus-url-copy gsiftp://hostb/tmp/gridftptest.txt \
> > > file:///tmp/gridftptest_copied.txt*
> > >
> > >  and
> > > *
> > > globus-url-copy file:///tmp/gridftptest_copied.txt \
> > > gsiftp://hostb/tmp/gridftptest_copied2.txt*
> > >
> > > but when i tried to perform the third party transfer through the
> > following
> > > command
> > >
> > > [EMAIL PROTECTED] ~]$ globus-url-copy -dbg 
> > > gsiftp://hostb/tmp/thirdparty.txt
> > > gsiftp://hosta/tmp/thirdparty.txt*
> > >
> > > i get the following error
> > >
> > > *debug: starting to size gsiftp://hostb/tmp/thirdparty.txt
> > > debug: connecting to gsiftp://hostb/tmp/thirdparty.txt
> > > debug: response from gsiftp://hostb/tmp/thirdparty.txt:
> > > 220 hostb GridFTP Server 2.7 (gcc32dbg, 1204845443-63) [Globus Toolkit
> > > 4.0.7] ready.
> > >
> > > debug: authenticating with gsiftp://hostb/tmp/thirdparty.txt
> > > debug: response from gsiftp://hostb/tmp/thirdparty.txt:
> > > 230 User buser logged in.
> > >
> > > debug: sending command:
> > > SITE HELP
> > >
> > > debug: response from gsiftp://hostb/tmp/thirdparty.txt:
> > > 214-The following commands are recognized:
> > >     ALLO    ESTO    RNTO    APPE    DCAU    MODE    SIZE    STRU
> > >     TYPE    DELE    SITE    CWD     ERET    FEAT    LIST    NLST
> > >     MLSD    MLST    PORT    PROT    EPRT    PWD     QUIT    REST
> > >     STAT    SYST    MKD     RMD     CDUP    HELP    NOOP    EPSV
> > >     PASV    TREV    SBUF    MDTM    CKSM    OPTS    PASS    SPAS
> > >     PBSZ    SPOR    RETR    STOR    USER    RNFR    LANG
> > > 214 End
> > >
> > > debug: sending command:
> > > FEAT
> > >
> > > debug: response from gsiftp://hostb/tmp/thirdparty.txt:
> > > 211-Extensions supported
> > >  UTF8
> > >  LANG EN
> > >  DCAU
> > >  PARALLEL
> > >  SIZE
> > >  MLST
> > >
> > Type*;Size*;Modify*;Perm*;Charset;UNIX.mode*;UNIX.owner*;UNIX.group*;Unique*;UNIX.slink*;
> > >  ERET
> > >  ESTO
> > >  SPAS
> > >  SPOR
> > >  REST STREAM
> > >  MDTM
> > > 211 End.
> > >
> > > debug: sending command:
> > > TYPE I
> > > debug: response from gsiftp://hostb/tmp/thirdparty.txt:
> > > 200 Type set to I.
> > >
> > > debug: sending command:
> > > SIZE /tmp/thirdparty.txt
> > >
> > > debug: response from gsiftp://hostb/tmp/thirdparty.txt:
> > > 213 0
> > >
> > > debug: operation complete
> > > debug: starting to transfer gsiftp://hostb/tmp/thirdparty.txt to
> > > gsiftp://hosta/tmp/thirdparty.txt
> > > debug: connecting to gsiftp://hosta/tmp/thirdparty.txt
> > > debug: response from gsiftp://hosta/tmp/thirdparty.txt:
> > > 220 hosta GridFTP Server 2.7 (gcc32dbg, 1204845443-63) [Globus Toolkit
> > > 4.0.7] ready.
> > >
> > > debug: authenticating with gsiftp://hosta/tmp/thirdparty.txt
> > > debug: response from gsiftp://hosta/tmp/thirdparty.txt:
> > > 530-Login incorrect. : globus_gss_assist: Gridmap lookup failure: Could
> > not
> > > map /O=Grid/OU=GlobusTest/OU=simpleCA-ca/OU=localdomain/CN=buser
> > > 530-
> > > 530 End.
> > >
> > > debug: fault on connection to gsiftp://hosta/tmp/thirdparty.txt
> > > debug: operation complete
> > >
> > > error: globus_ftp_client: the server responded with an error
> > > 530 530-Login incorrect. : globus_gss_assist: Gridmap lookup failure:
> > Could
> > > not map /O=Grid/OU=GlobusTest/OU=simpleCA-ca/OU=localdomain/CN=buser
> > > 530-*
> > >
> > >
> > > here the i have copied the usercerts of hostb to hosta.
> > > and i have issued the grid-proxy-init command without any problem
> > >
> > > my grid-mapfile of machine hostb looks like this
> > >
> > > "/O=Grid/OU=GlobusTest/OU=simpleCA-ca/OU=localdomain/CN=buser" buser
> > >
> > >
> > > the platform i am working on is redhat enterprise linux 5
> > > and i have installed globus 4.0.7
> > >
> > > can anyone help??
> > >
> >
>

Reply via email to