Dear Joseph.
On 18/01/2013 12:26, Joseph Bester wrote:
I think there's a bug in the init script for the debian package (it doesn't
export the X509_USER* environment variables). Try adding
export X509_USER_CERT=/etc/grid-security/myproxy/hostcert.pem
export X509_USER_KEY=/etc/grid-security/myproxy/hostkey.pem
to the /etc/default/myproxy-server file. I'll add a bug report for this issue.
That's all right now after your coment. The myproxy server is running
correctly.
The original file /etc/default/myproxy-server contains this 2 lines that
you mention, but comented:
# Override these defaults here.
## MYPROXY_USER=myproxy
## MYPROXY_OPTIONS="-s /var/lib/myproxy"
## X509_USER_CERT=/etc/grid-security/myproxy/hostcert.pem
## X509_USER_KEY=/etc/grid-security/myproxy/hostkey.pem
Thank's a lot, you help me great!
Regards
Joe
On Jan 18, 2013, at 12:35 PM, Jerome<[email protected]> wrote:
Dear Joseph
I do what you wrote me. i'm runnig as root:
root@simpleca:/# /etc/init.d/myproxy-server start
Error starting myproxy-server ... failed!
And in the "deamon.log" file, the error appears:
Jan 18 11:08:40 simpleca myproxy-server[1686]: myproxy-server v5.9 Jul 2012 PAM
OCSP starting at Fri Jan 18 11:08:40 2013
Jan 18 11:08:40 simpleca myproxy-server[1686]: reading configuration file
/etc/myproxy-server.config
Jan 18 11:08:40 simpleca myproxy-server[1686]: usage_stats: initialized
(usage-stats.cilogon.org:4810) (VvtrlLB)
Jan 18 11:08:40 simpleca myproxy-server[1686]: Problem with server credentials.
GSS Major Status: General failure GSS Minor Status Error Chain:
globus_gsi_gssapi: Error with GSI credential globus_gsi_gssapi: Error with gss
credential handle globus_credential: Valid credentials could not be found in
any of the possible locations specified by the credential search order. Valid
credentials could not be found in any of the possible locations specified by
the credential search order. Attempt 1 globus_credential: Error reading host
credential globus_sysconfig: Error with certificate filename globus_sysconfig:
Error with certificate filename globus_sysconfig: File is not owned by current
user: /etc/grid-security/hostcert.pem is not owned by current user Attempt 2
globus_credential: Error reading proxy credential globus_sysconfig: Could not
find a valid proxy certificate file location globus_sysconfig: Error with key
filename globus_sysconfig: File does not exist: /tmp/x509up_u998
is not a
valid file Attempt 3 globus_credential: Error reading user credential
globus_sysconfig: Error with certifi
I verify that i have the hostcert for myproxy correctly installed:
root@simpleca:/# ls -l /etc/grid-security/myproxy/
total 8
-rw-r--r-- 1 myproxy root 2726 Jan 17 18:48 hostcert.pem
-rw------- 1 myproxy root 887 Jan 17 18:48 hostkey.pem
So, do i generate a certificate for mypoxy user?
Regards
On 18/01/2013 10:20, Joseph Bester wrote:
It looks like you're running the init script from /root, which is not readable
by the myproxy user. Try executing
cd /
prior to running the init command.
Joe
On Jan 17, 2013, at 8:07 PM, Jerome<[email protected]> wrote:
Dear all
For a local project, y folowwing the kickstart of globus installation.. I
decide to install my myproxy-server on debian suqeeze, and after configuring
all the stuff, i could not init the server:
root@simpleca:~# invoke-rc.d myproxy-server start
/sbin/start-stop-daemon: unable to chdir() to /root (Permission denied)
Error starting myproxy-server ... failed!
invoke-rc.d: initscript myproxy-server, action "start" failed.
I'm sure that it's a "simple" error in some file i configured, but could not
show where.
Regards
--
-- Jérôme
Il y a des gens qui arrivent à joindre l'inutile au désagréable.
(Philippe Geluck)
--
-- Jérôme
- Et son mari n'a rien dit ?
- Non... tu sais, quand les types de 130K disent certaines choses,
ceux de 60K les écoutent.
(Michel Audiard)
--
-- Jérôme
"Geoffroy, je lui ai dit, les copains, on t'a mis en quarantaine."
"Je croyais qu'on allait plus lui parler" a dit Clotaire.
"Il faut bien que je lui parle pour lui dire qu'on ne lui parle plus",
j'ai dit.
(Histoires inédites du Petit Nicolas, Goscinny & Sempé)
