I think there's a bug in the init script for the debian package (it doesn't export the X509_USER* environment variables). Try adding
export X509_USER_CERT=/etc/grid-security/myproxy/hostcert.pem export X509_USER_KEY=/etc/grid-security/myproxy/hostkey.pem to the /etc/default/myproxy-server file. I'll add a bug report for this issue. Joe On Jan 18, 2013, at 12:35 PM, Jerome <[email protected]> wrote: > Dear Joseph > > I do what you wrote me. i'm runnig as root: > > root@simpleca:/# /etc/init.d/myproxy-server start > Error starting myproxy-server ... failed! > > And in the "deamon.log" file, the error appears: > > Jan 18 11:08:40 simpleca myproxy-server[1686]: myproxy-server v5.9 Jul 2012 > PAM OCSP starting at Fri Jan 18 11:08:40 2013 > Jan 18 11:08:40 simpleca myproxy-server[1686]: reading configuration file > /etc/myproxy-server.config > Jan 18 11:08:40 simpleca myproxy-server[1686]: usage_stats: initialized > (usage-stats.cilogon.org:4810) (VvtrlLB) > Jan 18 11:08:40 simpleca myproxy-server[1686]: Problem with server > credentials. GSS Major Status: General failure GSS Minor Status Error Chain: > globus_gsi_gssapi: Error with GSI credential globus_gsi_gssapi: Error with > gss credential handle globus_credential: Valid credentials could not be found > in any of the possible locations specified by the credential search order. > Valid credentials could not be found in any of the possible locations > specified by the credential search order. Attempt 1 globus_credential: Error > reading host credential globus_sysconfig: Error with certificate filename > globus_sysconfig: Error with certificate filename globus_sysconfig: File is > not owned by current user: /etc/grid-security/hostcert.pem is not owned by > current user Attempt 2 globus_credential: Error reading proxy credential > globus_sysconfig: Could not find a valid proxy certificate file location > globus_sysconfig: Error with key filename globus_sysconfig: File does not > exist: /tmp/x509up_u998 is not a valid file Attempt 3 globus_credential: > Error reading user credential globus_sysconfig: Error with certifi > > I verify that i have the hostcert for myproxy correctly installed: > > root@simpleca:/# ls -l /etc/grid-security/myproxy/ > total 8 > -rw-r--r-- 1 myproxy root 2726 Jan 17 18:48 hostcert.pem > -rw------- 1 myproxy root 887 Jan 17 18:48 hostkey.pem > > > So, do i generate a certificate for mypoxy user? > > Regards > > > On 18/01/2013 10:20, Joseph Bester wrote: >> It looks like you're running the init script from /root, which is not >> readable by the myproxy user. Try executing >> cd / >> prior to running the init command. >> >> Joe >> >> On Jan 17, 2013, at 8:07 PM, Jerome<[email protected]> wrote: >> >>> Dear all >>> >>> For a local project, y folowwing the kickstart of globus installation.. I >>> decide to install my myproxy-server on debian suqeeze, and after >>> configuring all the stuff, i could not init the server: >>> >>> root@simpleca:~# invoke-rc.d myproxy-server start >>> /sbin/start-stop-daemon: unable to chdir() to /root (Permission denied) >>> Error starting myproxy-server ... failed! >>> invoke-rc.d: initscript myproxy-server, action "start" failed. >>> >>> >>> I'm sure that it's a "simple" error in some file i configured, but could >>> not show where. >>> >>> Regards >>> >>> >>> -- >>> -- Jérôme >>> Il y a des gens qui arrivent à joindre l'inutile au désagréable. >>> (Philippe Geluck) > > > -- > -- Jérôme > - Et son mari n'a rien dit ? > - Non... tu sais, quand les types de 130K disent certaines choses, > ceux de 60K les écoutent. > (Michel Audiard)
