It looks to me like your service is using old GSI code that doesn't understand the RFC 3820 proxy certificate extension (1.3.6.1.5.5.7.1.14). I think you can resolve the error by either upgrading your service to a more recent GSI library or creating your proxy credential using 'grid-proxy-init -old'.
shashidhar velagandula wrote: > HI , > > while trying to access one service which is based of GSI authentication > ,,,,,,,,, it is throwing error as defective credential,,,,,, > > - Error processing request: Authentication failed [Root error message: > Defective credential detected [Root error message: Unsuppored critical > exception : 1.3.6.1.5.5.7.1.14]] > org.globus.common.ChainedIOException: Authentication failed [Root error > message: Defective credential detected [Root error message: Unsuppored > critical exception : 1.3.6.1.5.5.7.1.14]]. Root exception is > GSSException: Defective credential detected [Root error message: Unsuppored > critical exception : 1.3.6.1.5.5.7.1.14]. Root exception is > org.globus.gsi.proxy.ProxyPathValidatorException: Unsuppored critical > exception : 1.3.6.1.5.5.7.1.14 > at > org.globus.gsi.proxy.ProxyPathValidator.checkUnsupportedCriticalExtensions(ProxyPathValidator.java:699) > at > org.globus.gsi.proxy.ProxyPathValidator.validate(ProxyPathValidator.java:363) > at > org.globus.gsi.gssapi.GlobusGSSContextImpl$GSSProxyPathValidator.validate(GlobusGSSContextImpl.java:665) > at > org.globus.gsi.gssapi.GlobusGSSContextImpl.verifyChain(GlobusGSSContextImpl.java:701) > at > org.globus.gsi.gssapi.GlobusGSSContextImpl.acceptSecContext(GlobusGSSContextImpl.java:298) > at > org.globus.gsi.gssapi.net.GssSocket.authenticateServer(GssSocket.java:119) > at > org.globus.gsi.gssapi.net.GssSocket.startHandshake(GssSocket.java:137) > at > org.globus.gsi.gssapi.net.GssSocket.getOutputStream(GssSocket.java:155) > at > org.globus.ogsa.server.GSIServiceThread.process(GSIServiceThread.java:101) > at org.globus.ogsa.server.ServiceThread.run(ServiceThread.java:185) > > > [st...@srmhyd ~]$ grid-proxy-info > subject : /O=Grid/OU=GlobusTest/OU= > simpleCA-srmhyd.cdac.in/OU=cdac.in/CN=storm/CN=981264898 > issuer : /O=Grid/OU=GlobusTest/OU= > simpleCA-srmhyd.cdac.in/OU=cdac.in/CN=storm > identity : /O=Grid/OU=GlobusTest/OU= > simpleCA-srmhyd.cdac.in/OU=cdac.in/CN=storm > type : RFC 3820 compliant impersonation proxy > strength : 512 bits > path : /tmp/x509up_u501 > timeleft : 11:59:55 > [st...@srmhyd ~]$ > > I am using simple-CA only , how to resolve this error ,,,? > > > Thanks & Regards , > shashi
smime.p7s
Description: S/MIME Cryptographic Signature
