Re: [gt-user] auth problem in gt421

2011-11-22 Thread Basney, Jim
http://globus.org/toolkit/docs/4.2/4.2.1/security/gsic/admin/#id2533449 On Nov 22, 2011, at 11:44 AM, leo_cu...@lavabit.com wrote: I did a myproxy-init in a non-root session, but whit the myproxy service running in root session:

Re: [gt-user] Old-style proxies support

2011-12-14 Thread Basney, Jim
I don't think this is an OpenSSL 1.0 problem. I see the same error with a fresh GT 5.0.4 install on MacOS 10.6.8 when using a legacy proxy: $ openssl version OpenSSL 0.9.8r 8 Feb 2011 $ grid-proxy-init -q Enter GRID pass phrase: $ globus-url-copy /tmp/one gsiftp://localhost/tmp/two $

Re: [gt-user] sudden client rejection

2013-07-18 Thread Basney, Jim
Hi Karen, My only guess is that your oa4mp server is configured to look in a different store for your clients and clientApprovals than where you wrote the clientApprovals using oa4mp-approver.jar. What are the contents of the OA4MP config file pointed to by the oa4mp:server.config.file property

Re: [gt-user] sudden client rejection

2013-07-19 Thread Basney, Jim
have opened a ticket with globusonline. -k On Fri, Jul 19, 2013 at 05:57:22PM +, Basney, Jim wrote: Karen, I don't know about the Json parse unterminated string message. I suspect that's coming from Globus Online, not oa4mp. Maybe you should submit a request at https

Re: [gt-user] MyProxy CA with LDAP

2014-02-18 Thread Basney, Jim
Hello Fabio, Please try the following command as root on your MyProxy CA server: pamtester myproxy fabio authenticate You may need to first do 'yum install pamtester'. This will determine if the problem is due to myproxy-server or pam_ldap. If you experience slow authentication and timeouts

Re: [gt-user] gsissh error

2014-04-16 Thread Basney, Jim
Steven, When you installed GT 5.2.5, did you see the following in the output? - /var/condor/Globus/globus-5.2.5/sbin/gpt-postinstall running /var/condor/Globus/globus-5.2.5/setup/gsi_openssh_setup/setup-openssh..[ Changing to /var/condor/Globus/globus-5.2.5/setup/gsi_openssh_setup ]

Re: [gt-user] gsissh error

2014-04-16 Thread Basney, Jim
Great! Looks like doing 'export GLOBUS_LOCATION' solved the problem. -Jim On 4/16/14, 3:18 PM, Steven M Clark cla...@purdue.edu wrote: $ echo $GLOBUS_LOCATION /var/condor/Globus/globus-5.2.5 $ $GLOBUS_LOCATION/setup/gsi_openssh_setup/setup-openssh -verbose Set GLOBUS_LOCATION before

Re: [gt-user] myproxy-logon timed out

2014-07-14 Thread Basney, Jim
Do you have a myproxy-server running on tirex? If you run 'telnet tirex 7512' do you see 'Connected to tirex or 'Connection timed out'? What do the myproxy-server logs contain? On 7/13/14, 1:57 PM, ti-...@tiscali.it wrote: Hi, I've encountered the following error while attempting login:

Re: [gt-user] Problems with MyProxy and VOMS support

2015-06-22 Thread Basney, Jim
Hi Matteo, Sorry for the slow response. Unfortunately I don't have easy access to a VOMS environment to try to reproduce the problem you've reported. I think the VOMS AC doesn't verify message is not a symptom of the problem. I think you should also see that message from your working GT 5.2.4

Re: [gt-user] gsisshd and X11 forwarding

2016-01-25 Thread Basney, Jim
Hi Matteo, I suggest: 1. Check the server's debug output for any X11-related messages. (See http://grid.ncsa.illinois.edu/ssh/ts_server.html for instructions.) You may find an error related to xauth indicating that you need to pass a ./configure --with-xauth option when compiling from source.

[gt-user] GridFTP CEDPS Logging format

2016-01-26 Thread Basney, Jim
Hi, I'm looking for a reference on the GridFTP logging format. http://toolkit.globus.org/toolkit/docs/latest-stable/gridftp/admin/ points to http://cedps.net/index.php/LoggingBestPractices for "more details on the CEDPS Logging format" but that site seems to no longer be for the Center for

Re: [gt-user] trust roots in Mac OS

2016-01-26 Thread Basney, Jim
Does one system have OpenSSL version 1.x and the other have OpenSSL version 0.x? The hashes are different for the different OpenSSL versions. Some details at: http://www.cilogon.org/openssl1 On 1/26/16, 6:21 PM, José Luis Gordillo Ruiz wrote: Hi, I’m trying to setup some globus clients on a

Re: [gt-user] trust roots in Mac OS

2016-01-26 Thread Basney, Jim
Luis Gordillo Ruiz Coordinación de Supercómputo - DGTIC On mar, ene 26, 2016 at 6:28 p.m., Basney, Jim <jbas...@illinois.edu<mailto:jbas...@illinois.edu>> wrote: Does one system have OpenSSL version 1.x and the other have OpenSSL version 0.x? The hashes are different for the diffe

Re: [gt-user] Globus ³strict mode² coming March 2016 - Action Required

2016-05-04 Thread Basney, Jim
Hi, Did this change happen as planned? Is the transition going OK for everyone? In my role as CA operator, I know we've been issuing a lot of host certs with multiple subjectAltNames in preparation for this transition, so hopefully everyone has the certs they need. -Jim On 2/4/16, 5:21 PM,