Hello,
I still haven't resolved this issue. However, if I change the name
attribute to
<interceptor
name="gridmapAuthz:org.globus.wsrf.impl.security.GridMapPDP">
I get a classnotfound exception:
2010-04-15T12:03:20.442+02:00 INFO impl.DefaultIndexService
[ServiceThread-58,performDefaultRegistrations:261]
guid=1ec7b6f0-4876-11df-8461-a45e12e68fb8
event=org.globus.mds.index.performDefaultRegistrations.end
status=0
2010-04-15T12:05:20.459+02:00 ERROR providers.AbstractEngine
[ServiceThread-58,initializeInterceptors:245] [JWSSEC-165] Error
loading interceptor: "Interceptor:
gridmapAuthz:org.globus.wsrf.impl.security.GridMapPDP"
java.lang.ClassNotFoundException:
org.globus.wsrf.impl.security.GridMapPDP
at
org.globus.bootstrap.JarClassLoader.findClass(JarClassLoader.java:164)
at java.lang.ClassLoader.loadClass(ClassLoader.java:307)
at java.lang.ClassLoader.loadClass(ClassLoader.java:252)
at
java.lang.ClassLoader.loadClassInternal(ClassLoader.java:320)
at java.lang.Class.forName0(Native Method)
at java.lang.Class.forName(Class.java:247)
at
org.globus.security.authorization.providers.AbstractEngine.loadClass(AbstractEngine.java:307)
at
org.globus.security.authorization.providers.AbstractEngine.initializeInterceptors(AbstractEngine.java:233)
at
org.globus.security.authorization.providers.AbstractEngine.initializeInterceptors(AbstractEngine.java:182)
at
org.globus.security.authorization.providers.AbstractEngine.engineInitialize(AbstractEngine.java:110)
at
org.globus.security.authorization.providers.PermitOverrideAlg.engineInitialize(PermitOverrideAlg.java:56)
at
org.globus.wsrf.impl.security.authorization.AuthorizationEngine.initialize(AuthorizationEngine.java:111)
at
org.globus.wsrf.impl.security.util.AuthzUtil.getAuthzEngine(AuthzUtil.java:146)
at
org.globus.wsrf.impl.security.descriptor.ServiceSecurityDescriptor.initAuthorizationConfig(ServiceSecurityDescriptor.java:778)
at
org.globus.wsrf.impl.security.descriptor.ServiceSecurityDescriptor.initialize(ServiceSecurityDescriptor.java:474)
at
org.globus.wsrf.impl.security.descriptor.ServiceSecurityDescriptor.initialize(ServiceSecurityDescriptor.java:141)
at
org.globus.wsrf.impl.security.descriptor.ServiceSecurityDescriptor.<init>(ServiceSecurityDescriptor.java:115)
at
org.globus.wsrf.impl.security.descriptor.ServiceSecurityHelper.createServiceDescriptor(ServiceSecurityHelper.java:337)
at
org.globus.wsrf.impl.security.descriptor.ServiceSecurityHelper.initialize(ServiceSecurityHelper.java:120)
at
org.globus.wsrf.impl.security.descriptor.ServiceSecurityHelper.initialize(ServiceSecurityHelper.java:90)
at
org.globus.wsrf.impl.security.descriptor.ServiceSecurityHelper.initialize(ServiceSecurityHelper.java:80)
at
org.globus.wsrf.container.ServiceManager.initializeService(ServiceManager.java:262)
at
org.globus.axis.description.ServiceDescUtil.resetOperations(ServiceDescUtil.java:138)
at
org.globus.wsrf.handlers.AddressingHandler.resetOperations(AddressingHandler.java:310)
at
org.globus.axis.message.addressing.handler.AddressingHandler.processServerRequest(AddressingHandler.java:434)
at
org.globus.wsrf.handlers.AddressingHandler.processServerRequest(AddressingHandler.java:115)
at
org.globus.axis.message.addressing.handler.AddressingHandler.invoke(AddressingHandler.java:136)
at
org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32)
at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118)
at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)
at
org.apache.axis.server.AxisServer.invokeService(AxisServer.java:199)
at
org.apache.axis.server.AxisServer.invoke(AxisServer.java:375)
at
org.globus.wsrf.container.ServiceThread.doPost(ServiceThread.java:949)
at
org.globus.wsrf.container.ServiceThread.process(ServiceThread.java:684)
at
org.globus.wsrf.container.ServiceThread.run(ServiceThread.java:471)
2010-04-15T12:05:20.463+02:00 ERROR handler.AddressingHandler
[ServiceThread-58,invoke:142] Exception in AddressingHandler
AxisFault
faultCode:
{http://schemas.xmlsoap.org/soap/envelope/}Server.userException
faultSubcode:
faultString: org.globus.wsrf.config.ConfigException: [Caused
by: [JWSSEC-165] Error loading interceptor: "Interceptor:
gridmapAuthz:org.globus.wsrf.impl.security.GridMapPDP"]
faultActor:
faultNode:
faultDetail:
{http://xml.apache.org/axis/}stackTrace:. Caused by
org.globus.security.authorization.InitializeException:
[JWSSEC-165] Error loading interceptor: "Interceptor:
gridmapAuthz:org.globus.wsrf.impl.security.GridMapPDP"
at
org.globus.security.authorization.providers.AbstractEngine.initializeInterceptors(AbstractEngine.java:246)
at
org.globus.security.authorization.providers.AbstractEngine.initializeInterceptors(AbstractEngine.java:182)
at
org.globus.security.authorization.providers.AbstractEngine.engineInitialize(AbstractEngine.java:110)
at
org.globus.security.authorization.providers.PermitOverrideAlg.engineInitialize(PermitOverrideAlg.java:56)
at
org.globus.wsrf.impl.security.authorization.AuthorizationEngine.initialize(AuthorizationEngine.java:111)
at
org.globus.wsrf.impl.security.util.AuthzUtil.getAuthzEngine(AuthzUtil.java:146)
at
org.globus.wsrf.impl.security.descriptor.ServiceSecurityDescriptor.initAuthorizationConfig(ServiceSecurityDescriptor.java:778)
at
org.globus.wsrf.impl.security.descriptor.ServiceSecurityDescriptor.initialize(ServiceSecurityDescriptor.java:474)
at
org.globus.wsrf.impl.security.descriptor.ServiceSecurityDescriptor.initialize(ServiceSecurityDescriptor.java:141)
at
org.globus.wsrf.impl.security.descriptor.ServiceSecurityDescriptor.<init>(ServiceSecurityDescriptor.java:115)
at
org.globus.wsrf.impl.security.descriptor.ServiceSecurityHelper.createServiceDescriptor(ServiceSecurityHelper.java:337)
at
org.globus.wsrf.impl.security.descriptor.ServiceSecurityHelper.initialize(ServiceSecurityHelper.java:120)
at
org.globus.wsrf.impl.security.descriptor.ServiceSecurityHelper.initialize(ServiceSecurityHelper.java:90)
at
org.globus.wsrf.impl.security.descriptor.ServiceSecurityHelper.initialize(ServiceSecurityHelper.java:80)
at
org.globus.wsrf.container.ServiceManager.initializeService(ServiceManager.java:262)
at
org.globus.axis.description.ServiceDescUtil.resetOperations(ServiceDescUtil.java:138)
at
org.globus.wsrf.handlers.AddressingHandler.resetOperations(AddressingHandler.java:310)
at
org.globus.axis.message.addressing.handler.AddressingHandler.processServerRequest(AddressingHandler.java:434)
at
org.globus.wsrf.handlers.AddressingHandler.processServerRequest(AddressingHandler.java:115)
at
org.globus.axis.message.addressing.handler.AddressingHandler.invoke(AddressingHandler.java:136)
at
org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32)
at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118)
at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)
at
org.apache.axis.server.AxisServer.invokeService(AxisServer.java:199)
at
org.apache.axis.server.AxisServer.invoke(AxisServer.java:375)
at
org.globus.wsrf.container.ServiceThread.doPost(ServiceThread.java:949)
at
org.globus.wsrf.container.ServiceThread.process(ServiceThread.java:684)
at
org.globus.wsrf.container.ServiceThread.run(ServiceThread.java:471)
Caused by: java.lang.ClassNotFoundException:
org.globus.wsrf.impl.security.GridMapPDP
at
org.globus.bootstrap.JarClassLoader.findClass(JarClassLoader.java:164)
at java.lang.ClassLoader.loadClass(ClassLoader.java:307)
at java.lang.ClassLoader.loadClass(ClassLoader.java:252)
at
java.lang.ClassLoader.loadClassInternal(ClassLoader.java:320)
at java.lang.Class.forName0(Native Method)
at java.lang.Class.forName(Class.java:247)
at
org.globus.security.authorization.providers.AbstractEngine.loadClass(AbstractEngine.java:307)
at
org.globus.security.authorization.providers.AbstractEngine.initializeInterceptors(AbstractEngine.java:233)
... 27 more
org.globus.wsrf.config.ConfigException: [Caused by:
[JWSSEC-165] Error loading interceptor: "Interceptor:
gridmapAuthz:org.globus.wsrf.impl.security.GridMapPDP"]
at org.apache.axis.AxisFault.makeFault(AxisFault.java:104)
at
org.globus.axis.description.ServiceDescUtil.resetOperations(ServiceDescUtil.java:142)
at
org.globus.wsrf.handlers.AddressingHandler.resetOperations(AddressingHandler.java:310)
at
org.globus.axis.message.addressing.handler.AddressingHandler.processServerRequest(AddressingHandler.java:434)
at
org.globus.wsrf.handlers.AddressingHandler.processServerRequest(AddressingHandler.java:115)
at
org.globus.axis.message.addressing.handler.AddressingHandler.invoke(AddressingHandler.java:136)
at
org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32)
at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118)
at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)
at
org.apache.axis.server.AxisServer.invokeService(AxisServer.java:199)
at
org.apache.axis.server.AxisServer.invoke(AxisServer.java:375)
at
org.globus.wsrf.container.ServiceThread.doPost(ServiceThread.java:949)
at
org.globus.wsrf.container.ServiceThread.process(ServiceThread.java:684)
at
org.globus.wsrf.container.ServiceThread.run(ServiceThread.java:471)
Caused by: org.globus.wsrf.config.ConfigException: [Caused by:
[JWSSEC-165] Error loading interceptor: "Interceptor:
gridmapAuthz:org.globus.wsrf.impl.security.GridMapPDP"]
at
org.globus.wsrf.impl.security.util.AuthzUtil.getAuthzEngine(AuthzUtil.java:148)
at
org.globus.wsrf.impl.security.descriptor.ServiceSecurityDescriptor.initAuthorizationConfig(ServiceSecurityDescriptor.java:778)
at
org.globus.wsrf.impl.security.descriptor.ServiceSecurityDescriptor.initialize(ServiceSecurityDescriptor.java:474)
at
org.globus.wsrf.impl.security.descriptor.ServiceSecurityDescriptor.initialize(ServiceSecurityDescriptor.java:141)
at
org.globus.wsrf.impl.security.descriptor.ServiceSecurityDescriptor.<init>(ServiceSecurityDescriptor.java:115)
at
org.globus.wsrf.impl.security.descriptor.ServiceSecurityHelper.createServiceDescriptor(ServiceSecurityHelper.java:337)
at
org.globus.wsrf.impl.security.descriptor.ServiceSecurityHelper.initialize(ServiceSecurityHelper.java:120)
at
org.globus.wsrf.impl.security.descriptor.ServiceSecurityHelper.initialize(ServiceSecurityHelper.java:90)
at
org.globus.wsrf.impl.security.descriptor.ServiceSecurityHelper.initialize(ServiceSecurityHelper.java:80)
at
org.globus.wsrf.container.ServiceManager.initializeService(ServiceManager.java:262)
at
org.globus.axis.description.ServiceDescUtil.resetOperations(ServiceDescUtil.java:138)
... 12 more
Am I missing an import or smthg like that? Beside that, I could not
resolve the errors reported by globus-validate-descriptors.
Any clues what's wrong?
Greetings Johannes
On Fri, 2010-04-09 at 20:58 +0200, Johannes Duschl wrote:
> Hello Rachana,
>
> On Fri, 2010-04-09 at 10:58 -0500, Rachana Ananthakrishnan wrote:
> > Can you try to run,
> $GLOBUS_LOCATION/bin/globus-validate-descriptors,
> > and if it reports any errors on your descriptor?
>
> Ok, seems there is an error in jndi-config.xml.
>
> Here is the result of globus-validate-descriptors:
>
> Validating...
>
> Validating jndi-config.xml files...
>
>
> Validating /usr/local/globus-4.2.1.1/etc/service_core/jndi-config.xml...
>
>
> Validating
> /usr/local/globus-4.2.1.1/etc/globus_cas_service/jndi-config.xml...
>
>
> Validating
> /usr/local/globus-4.2.1.1/etc/globus_cas_unit_test/jndi-config.xml...
>
>
> Validating
> /usr/local/globus-4.2.1.1/etc/globus_delegation_service/jndi-config.xml...
>
>
> Validating
> /usr/local/globus-4.2.1.1/etc/globus_delegation_test/jndi-config.xml...
>
>
> Validating
> /usr/local/globus-4.2.1.1/etc/globus_java_authz_base_test/jndi-config.xml...
>
>
> Validating
> /usr/local/globus-4.2.1.1/etc/globus_java_saml_authzService/jndi-config.xml...
>
>
> Validating
> /usr/local/globus-4.2.1.1/etc/globus_saml_authz_test/jndi-config.xml...
>
>
> Validating
> /usr/local/globus-4.2.1.1/etc/globus_wsrf_core/client-jndi-config.xml...
>
>
> Validating /usr/local/globus-4.2.1.1/etc/globus_wsrf_core/jndi-config.xml...
>
> schema_reference.4: Failed to read schema document
> 'resource.xsd', because 1) could not find the document; 2) the
> document could not be read; 3) the root element of the document
> is not <xsd:schema>.
>
> cvc-complex-type.2.4.c: The matching wildcard is strict, but no
> declaration can be found for element 'wsrf:resourceStore'.
>
> schema_reference.4: Failed to read schema document
> 'resource.xsd', because 1) could not find the document; 2) the
> document could not be read; 3) the root element of the document
> is not <xsd:schema>.
>
> schema_reference.4: Failed to read schema document
> 'resource.xsd', because 1) could not find the document; 2) the
> document could not be read; 3) the root element of the document
> is not <xsd:schema>.
>
> schema_reference.4: Failed to read schema document
> 'resource.xsd', because 1) could not find the document; 2) the
> document could not be read; 3) the root element of the document
> is not <xsd:schema>.
>
> schema_reference.4: Failed to read schema document
> 'resource.xsd', because 1) could not find the document; 2) the
> document could not be read; 3) the root element of the document
> is not <xsd:schema>.
>
> cvc-complex-type.2.4.c: The matching wildcard is strict, but no
> declaration can be found for element 'wsrf:resourceStore'.
>
> schema_reference.4: Failed to read schema document
> 'resource.xsd', because 1) could not find the document; 2) the
> document could not be read; 3) the root element of the document
> is not <xsd:schema>.
>
> schema_reference.4: Failed to read schema document
> 'resource.xsd', because 1) could not find the document; 2) the
> document could not be read; 3) the root element of the document
> is not <xsd:schema>.
>
> schema_reference.4: Failed to read schema document
> 'resource.xsd', because 1) could not find the document; 2) the
> document could not be read; 3) the root element of the document
> is not <xsd:schema>.
>
> schema_reference.4: Failed to read schema document
> 'commonj.xsd', because 1) could not find the document; 2) the
> document could not be read; 3) the root element of the document
> is not <xsd:schema>.
>
> cvc-complex-type.2.4.c: The matching wildcard is strict, but no
> declaration can be found for element 'commonj:workmanager'.
>
> schema_reference.4: Failed to read schema document
> 'commonj.xsd', because 1) could not find the document; 2) the
> document could not be read; 3) the root element of the document
> is not <xsd:schema>.
>
> cvc-complex-type.2.4.c: The matching wildcard is strict, but no
> declaration can be found for element 'commonj:timermanager'.
>
> schema_reference.4: Failed to read schema document
> 'resource.xsd', because 1) could not find the document; 2) the
> document could not be read; 3) the root element of the document
> is not <xsd:schema>.
>
> cvc-complex-type.2.4.c: The matching wildcard is strict, but no
> declaration can be found for element 'wsrf:resourceStore'.
>
> schema_reference.4: Failed to read schema document
> 'resource.xsd', because 1) could not find the document; 2) the
> document could not be read; 3) the root element of the document
> is not <xsd:schema>.
>
> schema_reference.4: Failed to read schema document
> 'resource.xsd', because 1) could not find the document; 2) the
> document could not be read; 3) the root element of the document
> is not <xsd:schema>.
>
> schema_reference.4: Failed to read schema document
> 'resource.xsd', because 1) could not find the document; 2) the
> document could not be read; 3) the root element of the document
> is not <xsd:schema>.
>
> schema_reference.4: Failed to read schema document
> 'resource.xsd', because 1) could not find the document; 2) the
> document could not be read; 3) the root element of the document
> is not <xsd:schema>.
>
> cvc-complex-type.2.4.c: The matching wildcard is strict, but no
> declaration can be found for element 'wsrf:cache'.
>
> schema_reference.4: Failed to read schema document
> 'resource.xsd', because 1) could not find the document; 2) the
> document could not be read; 3) the root element of the document
> is not <xsd:schema>.
>
> cvc-complex-type.2.4.c: The matching wildcard is strict, but no
> declaration can be found for element 'wsrf:resourceStore'.
>
> schema_reference.4: Failed to read schema document
> 'resource.xsd', because 1) could not find the document; 2) the
> document could not be read; 3) the root element of the document
> is not <xsd:schema>.
>
> schema_reference.4: Failed to read schema document
> 'resource.xsd', because 1) could not find the document; 2) the
> document could not be read; 3) the root element of the document
> is not <xsd:schema>.
>
> schema_reference.4: Failed to read schema document
> 'resource.xsd', because 1) could not find the document; 2) the
> document could not be read; 3) the root element of the document
> is not <xsd:schema>.
>
> Validateion
>
> failed.: /usr/local/globus-4.2.1.1/etc/globus_wsrf_core/jndi-config.xml
> is not a valid XML document.
>
> >
> > Was there more stack trace you can send ?
>
> You can find the complete trace here: http://pastebin.com/Vn4KRt6t
>
> But it is possible at all to use a separate grid map for a service?
>
> Greetings,
> Johannes
>
> > Rachana
> > On Apr 9, 2010, at 8:38 AM, Johannes Duschl wrote:
> >
> > > Hello,
> > >
> > > I'm running gt-4.2.1.1 on Debian Lenny and want to use a separate
> > > gridmap-file for a service. The security descriptor looks like this:
> > >
> > > <serviceSecurityConfig
> > > xmlns="http://www.globus.org/security/descriptor/service";
> > > xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
> > > xsi:schemaLocation="http://www.globus.org/security/descriptor
> > > name_value_type.xsd"
> > > xmlns:param="http://www.globus.org/security/descriptor";>
> > >
> > > <auth-method>
> > > <GSISecureConversation/>
> > > </auth-method>
> > >
> > > <authzChain>
> > > <pdps>
> > > <interceptor name="gridmap">
> > > <parameter>
> > > <param:nameValueParam>
> > > <param:parameter
> > > name="gridmap-file"
> > >
> > > value="/home/globus/grid-mapfile"/>
> > > </param:nameValueParam>
> > > </parameter>
> > > </interceptor>
> > > </pdps>
> > > </authzChain>
> > >
> > > </serviceSecurityConfig>
> > >
> > > However, when I connect to the service I get the following error:
> > >
> > > org.globus.wsrf.ResourceContextException: ; nested exception
> > > is:
> > > javax.naming.NamingException: [JWSCORE-203] Bean
> security
> > > initialization failed [Root exception is
> > > org.globus.wsrf.config.ConfigException: [JWSSEC-245] Error
> > > parsing file:
> > > "etc/at_jku_tk_service_core/service-instance-
> > > security.xml" [Caused by: cvc-complex-type.2.4.c: The matching
> > > wildcard is strict, but no declaration can be found for element
> > > 'param:nameValueParam'.]]
> > > Exception in thread "main" java.lang.NullPointerException
> > >
> > > I assume there is something wrong with this schema
> > >
> > > xsi:schemaLocation="http://www.globus.org/security/descriptor
> > > name_value_type.xsd
> > >
> > > but I have no idea what's causing the error. Anybody got a clue?
> > >
> > > Greetings,
> > > Johannes
> > >
> >
>
>
