On 07/07/2011 02:23 AM, Jim Basney wrote:
Globus Toolkit security depends on servers having valid hostnames. It
looks like maverick needs an entry in /etc/hosts for fool, so you can do
'myproxy-retrieve -v -s fool ...' rather than giving fool's IP address
on the command-line. Currently the hostname lookup for 192.168.1.2 is
failing on maverick.
On 7/6/11 3:39 PM, Amitav Mohanty wrote:
Hello
I created a certificate for my second machine on my first machine using
myproxy-admin-addservice. However, when I try to retrieve it on my
second machine, I get the following error message.
[titu@maverick]>myproxy-retrieve -v -s 192.168.1.2 -k Maverick -l titu
MyProxy v5.4 22 Apr 2011 PAM OCSP
Attempting to connect to 192.168.1.2:7512
Successfully connected to 192.168.1.2:7512
Error getting name of remote party: Could not get peer hostname
Connection refused
I checked /var/log/errors.log on the first machine and found the
following lines.
Jul 7 01:56:32 fool myproxy-server[11920]: Connection from 192.168.1.3
Jul 7 01:56:32 fool myproxy-server[11920]: using trusted certificates
directory /etc/grid-security/certificates
Jul 7 01:56:33 fool myproxy-server[11920]: Exiting: authentication failed
I also check if there were services listening on the ports and it seems
fine.
[root@fool dknight]# netstat -an | grep 7512
tcp 0 0 0.0.0.0:7512 0.0.0.0:* LISTEN
[root@fool dknight]# netstat -an | grep 2811
tcp 0 0 0.0.0.0:2811 0.0.0.0:* LISTEN
Do I need to add some edits in the grid-mapfile after running
myproxy-admin-addservice?
Regards
Amitav
Hello
I also found the following in logs files. I am not sure whether these lines are
relevant.
Jul 7 03:21:26 fool myproxy-server[1422]: myproxy-server v5.4 22 Apr 2011 PAM
OCSP starting at Thu Jul 7 03:21:26 2011
Jul 7 03:21:26 fool myproxy-server[1422]: reading configuration file
/etc/myproxy-server.config
Jul 7 03:21:26 fool myproxy-server[1422]: WARNING: cert_dir not specified in
config file. No trustroots can be returned to clients!
Jul 7 03:21:26 fool myproxy-server[1422]: Processing usage_stats_target
(usage-stats.cilogon.org:4810)
Jul 7 03:21:26 fool myproxy-server[1422]: USAGE-STATS: Error initializing
(usage-stats.cilogon.org:4810) (VvtrlLB)
Jul 7 03:21:26 fool myproxy-server[1422]: Error initializing one or more Usage
Stat target(s)! But continuing ...
Jul 7 03:21:26 fool myproxy-server[1422]: using storage directory /var/myproxy
Jul 7 03:21:26 fool myproxy-server[1422]: Starting myproxy-server on
localhost:7512...
These lines were written to the log when I restarted the myproxy-server daemon.
Let me know if I should start a new thread about these warnings.
Regards
Amitav
