1. Are there any environment variables (X509_*) configured on this machine? 2. Is there a ~/.globus/certificates directory on either machine for the user running the container? If there is, that location is used as trusted certificate directory before /etc/grid-security/certificates is used. 3. Try: openssl.exe x509 -in <path to host cert configured for container> -issuer_hash -noout The output will be the hash of the CA certificate that issued the certificate and you are looking for output.0 as the CA certificate. Rachana _____
From: [email protected] [mailto:[email protected]] On Behalf Of Jan Muhammad Sent: Wednesday, January 14, 2009 11:48 AM To: Tom Scavo Cc: [email protected] Subject: Re: [gt-user] Globus-Container-Start Error Messages! ________________________ Hi Tom, Yes the certificate I have for user and host are both identical and at the same locations e.g /home/jan/.globus & /etc/grid-security/certificates respectively on my desktop and laptop machines. This error as below I'm getting on my desk. "Failed to obtain a list of services from 'https://130.209.58.58:8443/wsrf/services/ContainerRegistryService' service: ; nested exception is: org.globus.common.ChainedIOException: Authentication failed [Caused by: Failure unspecified at GSS-API level [Caused by: Unknown CA]]" I revoked and then generated proxy-certificates on the desktop machine but still the same above error I'm getting. Any alternative solution to this? Regards Jan Muhammad -----Original Message----- From: Tom Scavo [mailto:[email protected]] Sent: Wed 14/01/2009 17:09 To: Jan Muhammad Cc: [email protected] Subject: Re: [gt-user] Globus-Container-Start Error Messages![MESSAGE NOT SCANNED] On Wed, Jan 14, 2009 at 10:32 AM, Jan Muhammad <[email protected]> wrote: > > One thing more, I use the same user-certificates on another machine, there > is no any problem and containers running fine. Are the trusted certificate stores on the two systems identical? Tom
