Re: [gt-user] GridFTP Troubleshooting
Dear Ian, No worries I got past the certificate issue had to get it reissued. I am at different error past mapping the user as below. Userid gets mapped according to grid-mapfile but still get this error. debug: response from gsiftp://gftp.host.xxx.edu/tmp/zero.source: 530-Login incorrect. : globus_gss_assist: Error invoking callout 530-globus_callout_module: The callout returned an error 530-an unknown error occurred 530 End. debug: fault on connection to gsiftp://gftp.host.xxx.edu/tmp/zero.source debug: data callback, error globus_ftp_client: the server responded with an error, buffer 0x2aaab0ff3010, length 0, offset=0, eof=true debug: operation complete error: globus_ftp_client: the server responded with an error 530 530-Login incorrect. : globus_gss_assist: Error invoking callout 530-globus_callout_module: The callout returned an error 530-an unknown error occurred 530 End. thank you, Amit On Tue, Aug 28, 2018 at 2:47 PM Ian Foster wrote: > Dear Amit: > > Unfortunately I am not up to speed on the certificate issues. Things would > be simpler if ATLAS used Globus -) > > Regards — Ian > > On Aug 28, 2018, at 11:25 AM, Amit Kumar > wrote: > > Hi Ian, > > Thank you for quick response. Yes we have Globus connect server setup > along with an endpoint for our institution, and that works fine for us. > This is a new setup that I am working on so that I can get out LHC > collaborators to use GridFTP along for their ATLAS computing needs. > This (Globus connect) installation of GridFTP is a slightly different and > older works nicely for our DTN, but I need this new setup to use different > authentication (LCMAPS VOMS) hence working on another instance. > > I think I pretty close to getting this setup if I can figure out > certificate issues, seems basic to me but I lack a bit of understanding on > this. Any insight here will be a great help. > > Thank you, > Amit > > On Tue, Aug 28, 2018 at 11:18 AM Foster, Ian T. wrote: > >> Dear Amit: >> >> Have you tried installing Globus Connect and using the Globus transfer >> service? Easier, faster, more reliable, … >> >> See https://www.globus.org/data-transfer >> >> Regards — Ian >> >> On Aug 28, 2018, at 11:07 AM, Amit Kumar >> wrote: >> >> Dear GT, >> >> I have setup GridFTP and trying to use globus-url-copy to test it and >> running it following errors, and wondering if you can help me here. >> >> I have a InCommon cert for the gridftp host, I also have >> InCommonRSAServerCA cert in the path but I am not able to find what issue >> certificate is it complaining about? >> >> Any help here is greatly appreciated. >> >> Thank you, >> Amit >> >> >> $ globus-url-copy -vb -dbg gsiftp://gftp.host.xxx.edu/tmp/zero.source >> file:///tmp/zero.dest >> Source: gsiftp://gftp.host.xxx.edu/tmp/ >> Dest: file:///tmp/ >> zero.source -> zero.dest >> debug: starting to get gsiftp://gftp.host.xxx.edu/tmp/zero.source >> debug: connecting to gsiftp://gftp.host.xxx.edu/tmp/zero.source >> >> debug: response from gsiftp://gftp.host.xxx.edu/tmp/zero.source: >> 220 10.10.29.20 GridFTP Server 12.8 (gcc64, 1531931206-85) [Globus >> Toolkit 6.0] ready. >> >> debug: authenticating with gsiftp://gftp.host.xxx.edu/tmp/zero.source >> debug: fault on connection to gsiftp://gftp.host.xxx.edu/tmp/zero.source: >> globus_ftp_control: gss_init_sec_context failed >> debug: data callback, error globus_ftp_control: gss_init_sec_context >> failed, buffer 0x2aaab0ff3010, length 0, offset=0, eof=true >> debug: operation complete >> >> error: globus_ftp_control: gss_init_sec_context failed >> OpenSSL Error: s3_clnt.c:1264: in library: SSL routines, function >> ssl3_get_server_certificate: certificate verify failed >> globus_gsi_callback_module: Could not verify credential >> globus_gsi_callback_module: Could not verify credential: unable to get >> issuer certificate >> >> >> _ >> Ian Foster >> Director, Data Science and Learning Division; Senior Scientist; >> Distinguished Fellow, Argonne National Laboratory >> Arthur Holly Compton Distinguished Service Professor of Computer Science, >> University of Chicago >> Fellow, Institute for Molecular Engineering >> Chief Troublemaker, Globus, www.globus.org >> Check out our new book: *Cloud Computing for Science and Engineering* >> Online at https://cloud4scieng.org >> Tel: +1 630 252 4619 >> >> >> >> >> >
Re: [gt-user] GridFTP Troubleshooting
Hi Ian, Thank you for quick response. Yes we have Globus connect server setup along with an endpoint for our institution, and that works fine for us. This is a new setup that I am working on so that I can get out LHC collaborators to use GridFTP along for their ATLAS computing needs. This (Globus connect) installation of GridFTP is a slightly different and older works nicely for our DTN, but I need this new setup to use different authentication (LCMAPS VOMS) hence working on another instance. I think I pretty close to getting this setup if I can figure out certificate issues, seems basic to me but I lack a bit of understanding on this. Any insight here will be a great help. Thank you, Amit On Tue, Aug 28, 2018 at 11:18 AM Foster, Ian T. wrote: > Dear Amit: > > Have you tried installing Globus Connect and using the Globus transfer > service? Easier, faster, more reliable, … > > See https://www.globus.org/data-transfer > > Regards — Ian > > On Aug 28, 2018, at 11:07 AM, Amit Kumar > wrote: > > Dear GT, > > I have setup GridFTP and trying to use globus-url-copy to test it and > running it following errors, and wondering if you can help me here. > > I have a InCommon cert for the gridftp host, I also have > InCommonRSAServerCA cert in the path but I am not able to find what issue > certificate is it complaining about? > > Any help here is greatly appreciated. > > Thank you, > Amit > > > $ globus-url-copy -vb -dbg gsiftp://gftp.host.xxx.edu/tmp/zero.source > file:///tmp/zero.dest > Source: gsiftp://gftp.host.xxx.edu/tmp/ > Dest: file:///tmp/ > zero.source -> zero.dest > debug: starting to get gsiftp://gftp.host.xxx.edu/tmp/zero.source > debug: connecting to gsiftp://gftp.host.xxx.edu/tmp/zero.source > > debug: response from gsiftp://gftp.host.xxx.edu/tmp/zero.source: > 220 10.10.29.20 GridFTP Server 12.8 (gcc64, 1531931206-85) [Globus Toolkit > 6.0] ready. > > debug: authenticating with gsiftp://gftp.host.xxx.edu/tmp/zero.source > debug: fault on connection to gsiftp://gftp.host.xxx.edu/tmp/zero.source: > globus_ftp_control: gss_init_sec_context failed > debug: data callback, error globus_ftp_control: gss_init_sec_context > failed, buffer 0x2aaab0ff3010, length 0, offset=0, eof=true > debug: operation complete > > error: globus_ftp_control: gss_init_sec_context failed > OpenSSL Error: s3_clnt.c:1264: in library: SSL routines, function > ssl3_get_server_certificate: certificate verify failed > globus_gsi_callback_module: Could not verify credential > globus_gsi_callback_module: Could not verify credential: unable to get > issuer certificate > > > _ > Ian Foster > Director, Data Science and Learning Division; Senior Scientist; > Distinguished Fellow, Argonne National Laboratory > Arthur Holly Compton Distinguished Service Professor of Computer Science, > University of Chicago > Fellow, Institute for Molecular Engineering > Chief Troublemaker, Globus, www.globus.org > Check out our new book: *Cloud Computing for Science and Engineering* > Online at https://cloud4scieng.org > Tel: +1 630 252 4619 > > > > >
[gt-user] GridFTP Troubleshooting
Dear GT, I have setup GridFTP and trying to use globus-url-copy to test it and running it following errors, and wondering if you can help me here. I have a InCommon cert for the gridftp host, I also have InCommonRSAServerCA cert in the path but I am not able to find what issue certificate is it complaining about? Any help here is greatly appreciated. Thank you, Amit $ globus-url-copy -vb -dbg gsiftp://gftp.host.xxx.edu/tmp/zero.source file:///tmp/zero.dest Source: gsiftp://gftp.host.xxx.edu/tmp/ Dest: file:///tmp/ zero.source -> zero.dest debug: starting to get gsiftp://gftp.host.xxx.edu/tmp/zero.source debug: connecting to gsiftp://gftp.host.xxx.edu/tmp/zero.source debug: response from gsiftp://gftp.host.xxx.edu/tmp/zero.source: 220 10.10.29.20 GridFTP Server 12.8 (gcc64, 1531931206-85) [Globus Toolkit 6.0] ready. debug: authenticating with gsiftp://gftp.host.xxx.edu/tmp/zero.source debug: fault on connection to gsiftp://gftp.host.xxx.edu/tmp/zero.source: globus_ftp_control: gss_init_sec_context failed debug: data callback, error globus_ftp_control: gss_init_sec_context failed, buffer 0x2aaab0ff3010, length 0, offset=0, eof=true debug: operation complete error: globus_ftp_control: gss_init_sec_context failed OpenSSL Error: s3_clnt.c:1264: in library: SSL routines, function ssl3_get_server_certificate: certificate verify failed globus_gsi_callback_module: Could not verify credential globus_gsi_callback_module: Could not verify credential: unable to get issuer certificate