Re: [gt-user] Gridmap PDP for service

Fri, 16 Apr 2010 03:36:05 -0700 

Hi,
I tested a few scenarios on this, and couldn't really replicate this issue. The schema is loaded as resources from the classpath - so one thing to see is how that is setup with your container. 


Is GLOBUS_LOCATION set to correct path? How do you start up your  
container?


Rachana

On Apr 15, 2010, at 3:13 AM, Johannes Duschl wrote:


Hello,

I still haven't resolved this issue. However, if I change the name
attribute to

                    <interceptor
       name="gridmapAuthz:org.globus.wsrf.impl.security.GridMapPDP">

I get a classnotfound exception:

       2010-04-15T12:03:20.442+02:00 INFO  impl.DefaultIndexService
       [ServiceThread-58,performDefaultRegistrations:261]
       guid=1ec7b6f0-4876-11df-8461-a45e12e68fb8
       event=org.globus.mds.index.performDefaultRegistrations.end
       status=0
       2010-04-15T12:05:20.459+02:00 ERROR providers.AbstractEngine

       [ServiceThread-58,initializeInterceptors:245] [JWSSEC-165]  
Error

       loading interceptor: "Interceptor:
       gridmapAuthz:org.globus.wsrf.impl.security.GridMapPDP"
       java.lang.ClassNotFoundException:
       org.globus.wsrf.impl.security.GridMapPDP
        at

        
org.globus.bootstrap.JarClassLoader.findClass(JarClassLoader.java:164)

        at java.lang.ClassLoader.loadClass(ClassLoader.java:307)
        at java.lang.ClassLoader.loadClass(ClassLoader.java:252)
        at
       java.lang.ClassLoader.loadClassInternal(ClassLoader.java:320)
        at java.lang.Class.forName0(Native Method)
        at java.lang.Class.forName(Class.java:247)
        at

        
org 
.globus 
.security 
.authorization 
.providers.AbstractEngine.loadClass(AbstractEngine.java:307)

        at

        
org 
.globus 
.security 
.authorization 
.providers.AbstractEngine.initializeInterceptors(AbstractEngine.java: 
233)

        at

        
org 
.globus 
.security 
.authorization 
.providers.AbstractEngine.initializeInterceptors(AbstractEngine.java: 
182)

        at

        
org 
.globus 
.security 
.authorization 
.providers.AbstractEngine.engineInitialize(AbstractEngine.java:110)

        at

        
org 
.globus 
.security 
.authorization 
.providers.PermitOverrideAlg.engineInitialize(PermitOverrideAlg.java: 
56)

        at

        
org 
.globus 
.wsrf 
.impl 
.security 
.authorization 
.AuthorizationEngine.initialize(AuthorizationEngine.java:111)

        at

        
org 
.globus 
.wsrf.impl.security.util.AuthzUtil.getAuthzEngine(AuthzUtil.java:146)

        at

        
org 
.globus 
.wsrf 
.impl 
.security 
.descriptor 
.ServiceSecurityDescriptor 
.initAuthorizationConfig(ServiceSecurityDescriptor.java:778)

        at

        
org 
.globus 
.wsrf 
.impl 
.security 
.descriptor 
.ServiceSecurityDescriptor.initialize(ServiceSecurityDescriptor.java: 
474)

        at

        
org 
.globus 
.wsrf 
.impl 
.security 
.descriptor 
.ServiceSecurityDescriptor.initialize(ServiceSecurityDescriptor.java: 
141)

        at

        
org 
.globus 
.wsrf 
.impl 
.security 
.descriptor 
.ServiceSecurityDescriptor.<init>(ServiceSecurityDescriptor.java:115)

        at

        
org 
.globus 
.wsrf 
.impl 
.security 
.descriptor 
.ServiceSecurityHelper 
.createServiceDescriptor(ServiceSecurityHelper.java:337)

        at

        
org 
.globus 
.wsrf 
.impl 
.security 
.descriptor 
.ServiceSecurityHelper.initialize(ServiceSecurityHelper.java:120)

        at

        
org 
.globus 
.wsrf 
.impl 
.security 
.descriptor 
.ServiceSecurityHelper.initialize(ServiceSecurityHelper.java:90)

        at

        
org 
.globus 
.wsrf 
.impl 
.security 
.descriptor 
.ServiceSecurityHelper.initialize(ServiceSecurityHelper.java:80)

        at

        
org 
.globus 
.wsrf.container.ServiceManager.initializeService(ServiceManager.java: 
262)

        at

        
org 
.globus 
.axis 
.description.ServiceDescUtil.resetOperations(ServiceDescUtil.java:138)

        at

        
org 
.globus 
.wsrf 
.handlers.AddressingHandler.resetOperations(AddressingHandler.java: 
310)

        at

        
org 
.globus 
.axis 
.message 
.addressing 
.handler 
.AddressingHandler.processServerRequest(AddressingHandler.java:434)

        at

        
org 
.globus 
.wsrf 
.handlers 
.AddressingHandler.processServerRequest(AddressingHandler.java:115)

        at

        
org 
.globus 
.axis 
.message 
.addressing.handler.AddressingHandler.invoke(AddressingHandler.java: 
136)

        at

        
org 
.apache 
.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32)
       	at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java: 
118)

        at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)
        at

        
org.apache.axis.server.AxisServer.invokeService(AxisServer.java:199)

        at
       org.apache.axis.server.AxisServer.invoke(AxisServer.java:375)
        at

        
org.globus.wsrf.container.ServiceThread.doPost(ServiceThread.java:949)

        at

        
org.globus.wsrf.container.ServiceThread.process(ServiceThread.java: 
684)

        at

        
org.globus.wsrf.container.ServiceThread.run(ServiceThread.java:471)

       2010-04-15T12:05:20.463+02:00 ERROR handler.AddressingHandler
       [ServiceThread-58,invoke:142] Exception in AddressingHandler
       AxisFault
        faultCode:
       {http://schemas.xmlsoap.org/soap/envelope/}Server.userException
        faultSubcode:
        faultString: org.globus.wsrf.config.ConfigException:  [Caused
       by: [JWSSEC-165] Error loading interceptor: &quot;Interceptor:
       gridmapAuthz:org.globus.wsrf.impl.security.GridMapPDP&quot;]
        faultActor:
        faultNode:
        faultDetail:
        {http://xml.apache.org/axis/}stackTrace:. Caused by
       org.globus.security.authorization.InitializeException:
       [JWSSEC-165] Error loading interceptor: &quot;Interceptor:
       gridmapAuthz:org.globus.wsrf.impl.security.GridMapPDP&quot;
        at

        
org 
.globus 
.security 
.authorization 
.providers.AbstractEngine.initializeInterceptors(AbstractEngine.java: 
246)

        at

        
org 
.globus 
.security 
.authorization 
.providers.AbstractEngine.initializeInterceptors(AbstractEngine.java: 
182)

        at

        
org 
.globus 
.security 
.authorization 
.providers.AbstractEngine.engineInitialize(AbstractEngine.java:110)

        at

        
org 
.globus 
.security 
.authorization 
.providers.PermitOverrideAlg.engineInitialize(PermitOverrideAlg.java: 
56)

        at

        
org 
.globus 
.wsrf 
.impl 
.security 
.authorization 
.AuthorizationEngine.initialize(AuthorizationEngine.java:111)

        at

        
org 
.globus 
.wsrf.impl.security.util.AuthzUtil.getAuthzEngine(AuthzUtil.java:146)

        at

        
org 
.globus 
.wsrf 
.impl 
.security 
.descriptor 
.ServiceSecurityDescriptor 
.initAuthorizationConfig(ServiceSecurityDescriptor.java:778)

        at

        
org 
.globus 
.wsrf 
.impl 
.security 
.descriptor 
.ServiceSecurityDescriptor.initialize(ServiceSecurityDescriptor.java: 
474)

        at

        
org 
.globus 
.wsrf 
.impl 
.security 
.descriptor 
.ServiceSecurityDescriptor.initialize(ServiceSecurityDescriptor.java: 
141)

        at

        
org 
.globus 
.wsrf.impl.security.descriptor.ServiceSecurityDescriptor.&lt;init&gt; 
(ServiceSecurityDescriptor.java:115)

        at

        
org 
.globus 
.wsrf 
.impl 
.security 
.descriptor 
.ServiceSecurityHelper 
.createServiceDescriptor(ServiceSecurityHelper.java:337)

        at

        
org 
.globus 
.wsrf 
.impl 
.security 
.descriptor 
.ServiceSecurityHelper.initialize(ServiceSecurityHelper.java:120)

        at

        
org 
.globus 
.wsrf 
.impl 
.security 
.descriptor 
.ServiceSecurityHelper.initialize(ServiceSecurityHelper.java:90)

        at

        
org 
.globus 
.wsrf 
.impl 
.security 
.descriptor 
.ServiceSecurityHelper.initialize(ServiceSecurityHelper.java:80)

        at

        
org 
.globus 
.wsrf.container.ServiceManager.initializeService(ServiceManager.java: 
262)

        at

        
org 
.globus 
.axis 
.description.ServiceDescUtil.resetOperations(ServiceDescUtil.java:138)

        at

        
org 
.globus 
.wsrf 
.handlers.AddressingHandler.resetOperations(AddressingHandler.java: 
310)

        at

        
org 
.globus 
.axis 
.message 
.addressing 
.handler 
.AddressingHandler.processServerRequest(AddressingHandler.java:434)

        at

        
org 
.globus 
.wsrf 
.handlers 
.AddressingHandler.processServerRequest(AddressingHandler.java:115)

        at

        
org 
.globus 
.axis 
.message 
.addressing.handler.AddressingHandler.invoke(AddressingHandler.java: 
136)

        at

        
org 
.apache 
.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32)
       	at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java: 
118)

        at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)
        at

        
org.apache.axis.server.AxisServer.invokeService(AxisServer.java:199)

        at
       org.apache.axis.server.AxisServer.invoke(AxisServer.java:375)
        at

        
org.globus.wsrf.container.ServiceThread.doPost(ServiceThread.java:949)

        at

        
org.globus.wsrf.container.ServiceThread.process(ServiceThread.java: 
684)

        at

        
org.globus.wsrf.container.ServiceThread.run(ServiceThread.java:471)

       Caused by: java.lang.ClassNotFoundException:
       org.globus.wsrf.impl.security.GridMapPDP
        at

        
org.globus.bootstrap.JarClassLoader.findClass(JarClassLoader.java:164)

        at java.lang.ClassLoader.loadClass(ClassLoader.java:307)
        at java.lang.ClassLoader.loadClass(ClassLoader.java:252)
        at
       java.lang.ClassLoader.loadClassInternal(ClassLoader.java:320)
        at java.lang.Class.forName0(Native Method)
        at java.lang.Class.forName(Class.java:247)
        at

        
org 
.globus 
.security 
.authorization 
.providers.AbstractEngine.loadClass(AbstractEngine.java:307)

        at

        
org 
.globus 
.security 
.authorization 
.providers.AbstractEngine.initializeInterceptors(AbstractEngine.java: 
233)

        ... 27 more


       org.globus.wsrf.config.ConfigException:  [Caused by:
       [JWSSEC-165] Error loading interceptor: "Interceptor:
       gridmapAuthz:org.globus.wsrf.impl.security.GridMapPDP"]
        at org.apache.axis.AxisFault.makeFault(AxisFault.java:104)
        at

        
org 
.globus 
.axis 
.description.ServiceDescUtil.resetOperations(ServiceDescUtil.java:142)

        at

        
org 
.globus 
.wsrf 
.handlers.AddressingHandler.resetOperations(AddressingHandler.java: 
310)

        at

        
org 
.globus 
.axis 
.message 
.addressing 
.handler 
.AddressingHandler.processServerRequest(AddressingHandler.java:434)

        at

        
org 
.globus 
.wsrf 
.handlers 
.AddressingHandler.processServerRequest(AddressingHandler.java:115)

        at

        
org 
.globus 
.axis 
.message 
.addressing.handler.AddressingHandler.invoke(AddressingHandler.java: 
136)

        at

        
org 
.apache 
.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32)
       	at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java: 
118)

        at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)
        at

        
org.apache.axis.server.AxisServer.invokeService(AxisServer.java:199)

        at
       org.apache.axis.server.AxisServer.invoke(AxisServer.java:375)
        at

        
org.globus.wsrf.container.ServiceThread.doPost(ServiceThread.java:949)

        at

        
org.globus.wsrf.container.ServiceThread.process(ServiceThread.java: 
684)

        at

        
org.globus.wsrf.container.ServiceThread.run(ServiceThread.java:471)

       Caused by: org.globus.wsrf.config.ConfigException:  [Caused by:
       [JWSSEC-165] Error loading interceptor: "Interceptor:
       gridmapAuthz:org.globus.wsrf.impl.security.GridMapPDP"]
        at

        
org 
.globus 
.wsrf.impl.security.util.AuthzUtil.getAuthzEngine(AuthzUtil.java:148)

        at

        
org 
.globus 
.wsrf 
.impl 
.security 
.descriptor 
.ServiceSecurityDescriptor 
.initAuthorizationConfig(ServiceSecurityDescriptor.java:778)

        at

        
org 
.globus 
.wsrf 
.impl 
.security 
.descriptor 
.ServiceSecurityDescriptor.initialize(ServiceSecurityDescriptor.java: 
474)

        at

        
org 
.globus 
.wsrf 
.impl 
.security 
.descriptor 
.ServiceSecurityDescriptor.initialize(ServiceSecurityDescriptor.java: 
141)

        at

        
org 
.globus 
.wsrf 
.impl 
.security 
.descriptor 
.ServiceSecurityDescriptor.<init>(ServiceSecurityDescriptor.java:115)

        at

        
org 
.globus 
.wsrf 
.impl 
.security 
.descriptor 
.ServiceSecurityHelper 
.createServiceDescriptor(ServiceSecurityHelper.java:337)

        at

        
org 
.globus 
.wsrf 
.impl 
.security 
.descriptor 
.ServiceSecurityHelper.initialize(ServiceSecurityHelper.java:120)

        at

        
org 
.globus 
.wsrf 
.impl 
.security 
.descriptor 
.ServiceSecurityHelper.initialize(ServiceSecurityHelper.java:90)

        at

        
org 
.globus 
.wsrf 
.impl 
.security 
.descriptor 
.ServiceSecurityHelper.initialize(ServiceSecurityHelper.java:80)

        at

        
org 
.globus 
.wsrf.container.ServiceManager.initializeService(ServiceManager.java: 
262)

        at

        
org 
.globus 
.axis 
.description.ServiceDescUtil.resetOperations(ServiceDescUtil.java:138)

        ... 12 more


Am I missing an import or smthg like that? Beside that, I could not
resolve the errors reported by globus-validate-descriptors.

Any clues what's wrong?

Greetings Johannes



On Fri, 2010-04-09 at 20:58 +0200, Johannes Duschl wrote:

Hello Rachana,

On Fri, 2010-04-09 at 10:58 -0500, Rachana Ananthakrishnan wrote:

Can you try to run,

$GLOBUS_LOCATION/bin/globus-validate-descriptors,

and if it reports any errors on your descriptor?


Ok, seems there is an error in jndi-config.xml.

Here is the result of globus-validate-descriptors:

       Validating...

       Validating jndi-config.xml files...



Validating /usr/local/globus-4.2.1.1/etc/service_core/jndi- 
config.xml...




Validating /usr/local/globus-4.2.1.1/etc/globus_cas_service/jndi- 
config.xml...




Validating /usr/local/globus-4.2.1.1/etc/globus_cas_unit_test/jndi- 
config.xml...




Validating /usr/local/globus-4.2.1.1/etc/globus_delegation_service/ 
jndi-config.xml...




Validating /usr/local/globus-4.2.1.1/etc/globus_delegation_test/ 
jndi-config.xml...




Validating /usr/local/globus-4.2.1.1/etc/ 
globus_java_authz_base_test/jndi-config.xml...




Validating /usr/local/globus-4.2.1.1/etc/ 
globus_java_saml_authzService/jndi-config.xml...




Validating /usr/local/globus-4.2.1.1/etc/globus_saml_authz_test/ 
jndi-config.xml...




Validating /usr/local/globus-4.2.1.1/etc/globus_wsrf_core/client- 
jndi-config.xml...




Validating /usr/local/globus-4.2.1.1/etc/globus_wsrf_core/jndi- 
config.xml...


       schema_reference.4: Failed to read schema document
       'resource.xsd', because 1) could not find the document; 2) the

       document could not be read; 3) the root element of the  
document

       is not <xsd:schema>.


       cvc-complex-type.2.4.c: The matching wildcard is strict, but  
no

       declaration can be found for element 'wsrf:resourceStore'.

       schema_reference.4: Failed to read schema document
       'resource.xsd', because 1) could not find the document; 2) the

       document could not be read; 3) the root element of the  
document

       is not <xsd:schema>.

       schema_reference.4: Failed to read schema document
       'resource.xsd', because 1) could not find the document; 2) the

       document could not be read; 3) the root element of the  
document

       is not <xsd:schema>.

       schema_reference.4: Failed to read schema document
       'resource.xsd', because 1) could not find the document; 2) the

       document could not be read; 3) the root element of the  
document

       is not <xsd:schema>.

       schema_reference.4: Failed to read schema document
       'resource.xsd', because 1) could not find the document; 2) the

       document could not be read; 3) the root element of the  
document

       is not <xsd:schema>.


       cvc-complex-type.2.4.c: The matching wildcard is strict, but  
no

       declaration can be found for element 'wsrf:resourceStore'.

       schema_reference.4: Failed to read schema document
       'resource.xsd', because 1) could not find the document; 2) the

       document could not be read; 3) the root element of the  
document

       is not <xsd:schema>.

       schema_reference.4: Failed to read schema document
       'resource.xsd', because 1) could not find the document; 2) the

       document could not be read; 3) the root element of the  
document

       is not <xsd:schema>.

       schema_reference.4: Failed to read schema document
       'resource.xsd', because 1) could not find the document; 2) the

       document could not be read; 3) the root element of the  
document

       is not <xsd:schema>.

       schema_reference.4: Failed to read schema document
       'commonj.xsd', because 1) could not find the document; 2) the

       document could not be read; 3) the root element of the  
document

       is not <xsd:schema>.


       cvc-complex-type.2.4.c: The matching wildcard is strict, but  
no

       declaration can be found for element 'commonj:workmanager'.

       schema_reference.4: Failed to read schema document
       'commonj.xsd', because 1) could not find the document; 2) the

       document could not be read; 3) the root element of the  
document

       is not <xsd:schema>.


       cvc-complex-type.2.4.c: The matching wildcard is strict, but  
no

       declaration can be found for element 'commonj:timermanager'.

       schema_reference.4: Failed to read schema document
       'resource.xsd', because 1) could not find the document; 2) the

       document could not be read; 3) the root element of the  
document

       is not <xsd:schema>.


       cvc-complex-type.2.4.c: The matching wildcard is strict, but  
no

       declaration can be found for element 'wsrf:resourceStore'.

       schema_reference.4: Failed to read schema document
       'resource.xsd', because 1) could not find the document; 2) the

       document could not be read; 3) the root element of the  
document

       is not <xsd:schema>.

       schema_reference.4: Failed to read schema document
       'resource.xsd', because 1) could not find the document; 2) the

       document could not be read; 3) the root element of the  
document

       is not <xsd:schema>.

       schema_reference.4: Failed to read schema document
       'resource.xsd', because 1) could not find the document; 2) the

       document could not be read; 3) the root element of the  
document

       is not <xsd:schema>.

       schema_reference.4: Failed to read schema document
       'resource.xsd', because 1) could not find the document; 2) the

       document could not be read; 3) the root element of the  
document

       is not <xsd:schema>.


       cvc-complex-type.2.4.c: The matching wildcard is strict, but  
no

       declaration can be found for element 'wsrf:cache'.

       schema_reference.4: Failed to read schema document
       'resource.xsd', because 1) could not find the document; 2) the

       document could not be read; 3) the root element of the  
document

       is not <xsd:schema>.


       cvc-complex-type.2.4.c: The matching wildcard is strict, but  
no

       declaration can be found for element 'wsrf:resourceStore'.

       schema_reference.4: Failed to read schema document
       'resource.xsd', because 1) could not find the document; 2) the

       document could not be read; 3) the root element of the  
document

       is not <xsd:schema>.

       schema_reference.4: Failed to read schema document
       'resource.xsd', because 1) could not find the document; 2) the

       document could not be read; 3) the root element of the  
document

       is not <xsd:schema>.

       schema_reference.4: Failed to read schema document
       'resource.xsd', because 1) could not find the document; 2) the

       document could not be read; 3) the root element of the  
document

       is not <xsd:schema>.

       Validateion


failed.: /usr/local/globus-4.2.1.1/etc/globus_wsrf_core/jndi- 
config.xml

is not a valid XML document.



Was there more stack trace you can send ?


You can find the complete trace here: http://pastebin.com/Vn4KRt6t

But it is possible at all to use a separate grid map for a service?

Greetings,
Johannes


Rachana
On Apr 9, 2010, at 8:38 AM, Johannes Duschl wrote:


Hello,

I'm running gt-4.2.1.1 on Debian Lenny and want to use a separate

gridmap-file for a service. The security descriptor looks like  
this:


      <serviceSecurityConfig
      xmlns="http://www.globus.org/security/descriptor/service";
      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
      xsi:schemaLocation="http://www.globus.org/security/descriptor
      name_value_type.xsd"
      xmlns:param="http://www.globus.org/security/descriptor";>

           <auth-method>
                   <GSISecureConversation/>
           </auth-method>

           <authzChain>
                   <pdps>
                           <interceptor name="gridmap">
                       <parameter>
                           <param:nameValueParam>
                                      <param:parameter
      name="gridmap-file"

      value="/home/globus/grid-mapfile"/>
                           </param:nameValueParam>
                        </parameter>
                           </interceptor>
                   </pdps>
           </authzChain>

      </serviceSecurityConfig>

However, when I connect to the service I get the following error:

      org.globus.wsrf.ResourceContextException: ; nested exception
      is:
           javax.naming.NamingException: [JWSCORE-203] Bean

security

      initialization failed [Root exception is
      org.globus.wsrf.config.ConfigException: [JWSSEC-245] Error
      parsing file:
      "etc/at_jku_tk_service_core/service-instance-
security.xml" [Caused by: cvc-complex-type.2.4.c: The matching
wildcard is strict, but no declaration can be found for element
'param:nameValueParam'.]]
      Exception in thread "main" java.lang.NullPointerException

I assume there is something wrong with this schema

      xsi:schemaLocation="http://www.globus.org/security/descriptor
      name_value_type.xsd

but I have no idea what's causing the error. Anybody got a clue?

Greetings,
Johannes

































					Reply via email to