If it's an SRM-enabled server, you can get a lot of what you may need via 
SRM-ping

Beyond that I may need to think a while



On Dec 5, 2011, at 12:17 PM, "JP Navarro" <[email protected]> wrote:

> XSEDE would like its monitoring system (Inca) to access information about a 
> GridFTP server's X.509 certificate.
> 
> Is there a way to interact with a GridFTP server and retrieve server 
> certificate information?
> 
> Thanks,
> 
> JP
> 
> Begin forwarded message:
> 
>> From: "Smallen, Shava" <[email protected]>
>> Subject: FW: Inca XSEDE Notification: gridftp-nonstriped-auth-dms-4.2.0 on 
>> tacc-ranger FAIL
>> Date: December 5, 2011 11:55:38 AM CST
>> To: David Carver <[email protected]>
>> Cc: JP Navarro <[email protected]>
>> 
>> Hey David,
>> 
>> I'm not sure if there is a way to read the gridftp credentials remotely as
>> you can with GRAM so we can warn ahead of time.  We have some tests that
>> execute:
>> 
>> openssl s_client -connect host:port
>> 
>> But I get a protocol error when I try to do that against gridftp servers.
>> JP, do you know?
>> 
>> Thanks,
>> Shava
>> 
>> On 12/5/11 9:48 AM, "Inca Inca" <[email protected]> wrote:
>> 
>>> The following Inca test has FAILED:
>>> 
>>> RAN AT:  2011-12-05T09:48:07.000-0800
>>> 
>>> RAN ON:  login3.ranger.tacc.utexas.edu
>>> 
>>> TEST:  data.transfer.gridftp.unit.auth-dns
>>> 
>>> INPUT PARAMETERS:  -dest=gridftp.ranger.tacc.teragrid.org:2811 -help=no
>>> -log=0 -timeout=60 -verbose=1 -version=no
>>> 
>>> ERROR MESSAGE: globus-url-copy -len 1280 file:///dev/zero
>>> gsiftp://129.114.50.166:2811//dev/null failed:
>>> error: globus_ftp_client: the server responded with an error
>>> 530 530-globus_xio: Server side credential failure
>>> 530-globus_gsi_gssapi: Error with GSI credential
>>> 530-globus_gsi_gssapi: Error with gss credential handle
>>> 530-globus_credential: Error with credential: The host credential:
>>> /etc/grid-security/hostcert.pem
>>> 530-     with subject:
>>> /C=US/O=UTAustin/OU=TACC/CN=gridftp2.ranger.tacc.utexas.edu
>>> 530-     has expired xx minutes ago.
>>> 530-
>>> 530 End.
>>> 
>>> 
>>> 
>>> gridftp.ranger.tacc.teragrid.org mapped to the following ips:
>>> 129.114.50.166
>>> 
>>> 
>>> 
>>> details at 
>>> http://inca.xsede.org/inca/jsp/instance.jsp?xsl=instance.xsl&nickname=grid
>>> ftp-nonstriped-auth-dms-4.2.0&resource=tacc-ranger&collected=2011-12-05T09
>>> :48:07.000-08:00
>>> 
>> 
> 

Reply via email to