Ensure that you have configuration files in $GLOBUS_LOCATION and jars in $G_L/lib in your classpath. Your error message indicates that default security libraries are used rather than Globus supplied ones, and so your proxies cannot be processed.
Rachana > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf > Of Michal Ondrovic > Sent: Sunday, March 30, 2008 12:24 PM > To: [email protected] > Subject: [gt-user] Problem with https on MathService example > > Hello, > > I'm new in Globus Toolkit, so I tried the example from GT4 programming > book. I'm running GT4.0.6 on Kubuntu 7.10. I've compiled it from > sources. Every step from quick guide was successful and the tests for > gridftp, rft and gram finished without problems. My host name is notas > with address 127.0.1.1. (only for my testing) > I wish to use only one machine for both client and server. So I follow > the instructions in quickstart and everithing looks OK: > > #globusrun-ws -submit -S -f a.rsl > Delegating user credentials...Done. > Submitting job...Done. > Job ID: uuid:26992440-fe7c-11dc-9429-001636030b1c > Termination time: 03/31/2008 17:10 GMT > Current job state: StageIn > Current job state: Active > Current job state: CleanUp > Current job state: Done > Destroying job...Done. > Cleaning up any delegated credentials...Done. > > But running mathservice client fails with this error: > > :~/gt4book-examples$ java -classpath ./build/stubs/classes/:$CLASSPATH > org.globus.examples.clients.MathService_instance.Client > https://notas:8443/wsfr/services/examples/core/first/MathService > > > AxisFault > faultCode: > {http://schemas.xmlsoap.org/soap/envelope/}Server.userException > faultSubcode: > faultString: javax.net.ssl.SSLHandshakeException: > sun.security.validator.ValidatorException: PKIX path building failed: > sun.security.provider.certpath.SunCertPathBuilderException: unable to > find valid certification path to requested target > faultActor: > faultNode: > faultDetail: > > {http://xml.apache.org/axis/}stackTrace:javax.net.ssl.SSLHandshakeExceptio > n: > sun.security.validator.ValidatorException: PKIX path building failed: > sun.security.provider.certpath.SunCertPathBuilderException: unable to > find valid certification path to requested target > at > com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:174) > at > com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1591) > at > com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:187) > at > com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:181) > at > com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHand > shaker.java:975) > at > com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(ClientHandsha > ker.java:123) > at > com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:516) > at > com.sun.net.ssl.internal.ssl.Handshaker.process_record(Handshaker.java:454 > ) > at > com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:8 > 84) > at > com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSock > etImpl.java:1096) > at > com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.ja > va:1123) > at > com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.ja > va:1107) > at > org.apache.axis.components.net.JSSESocketFactory.create(JSSESocketFactory. > java:186) > at > org.apache.axis.transport.http.HTTPSender.getSocket(HTTPSender.java:181) > at > org.apache.axis.transport.http.HTTPSender.writeToSocket(HTTPSender.java:39 > 7) > at > org.apache.axis.transport.http.HTTPSender.invoke(HTTPSender.java:135) > at > org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.jav > a:32) > at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118) > at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83) > at org.apache.axis.client.AxisClient.invoke(AxisClient.java:165) > at org.apache.axis.client.Call.invokeEngine(Call.java:2727) > at org.apache.axis.client.Call.invoke(Call.java:2710) > at org.apache.axis.client.Call.invoke(Call.java:2386) > at org.apache.axis.client.Call.invoke(Call.java:2309) > at org.apache.axis.client.Call.invoke(Call.java:1766) > at > org.globus.examples.stubs.MathService_instance.bindings.MathPortTypeSOAPBi > ndingStub.add(MathPortTypeSOAPBindingStub.java:188) > at > org.globus.examples.clients.MathService_instance.Client.main(Client.java:3 > 2) > Caused by: sun.security.validator.ValidatorException: PKIX path > building failed: > sun.security.provider.certpath.SunCertPathBuilderException: unable to > find valid certification path to requested target > at > sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:285) > at > sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:191 > ) > at sun.security.validator.Validator.validate(Validator.java:218) > at > com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.validate(X509TrustManage > rImpl.java:126) > at > com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X509T > rustManagerImpl.java:209) > at > com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X509T > rustManagerImpl.java:249) > at > com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHand > shaker.java:954) > ... 22 more > Caused by: sun.security.provider.certpath.SunCertPathBuilderException: > unable to find valid certification path to requested target > at > sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathB > uilder.java:174) > at > java.security.cert.CertPathBuilder.build(CertPathBuilder.java:238) > at > sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:280) > ... 28 more > > {http://xml.apache.org/axis/}hostname:notas > > javax.net.ssl.SSLHandshakeException: > sun.security.validator.ValidatorException: PKIX path building failed: > sun.security.provider.certpath.SunCertPathBuilderException: unable to > find valid certification path to requested target > at org.apache.axis.AxisFault.makeFault(AxisFault.java:101) > at > org.apache.axis.transport.http.HTTPSender.invoke(HTTPSender.java:144) > at > org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.jav > a:32) > at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118) > at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83) > at org.apache.axis.client.AxisClient.invoke(AxisClient.java:165) > at org.apache.axis.client.Call.invokeEngine(Call.java:2727) > at org.apache.axis.client.Call.invoke(Call.java:2710) > at org.apache.axis.client.Call.invoke(Call.java:2386) > at org.apache.axis.client.Call.invoke(Call.java:2309) > at org.apache.axis.client.Call.invoke(Call.java:1766) > at > org.globus.examples.stubs.MathService_instance.bindings.MathPortTypeSOAPBi > ndingStub.add(MathPortTypeSOAPBindingStub.java:188) > at > org.globus.examples.clients.MathService_instance.Client.main(Client.java:3 > 2) > Caused by: javax.net.ssl.SSLHandshakeException: > sun.security.validator.ValidatorException: PKIX path building failed: > sun.security.provider.certpath.SunCertPathBuilderException: unable to > find valid certification path to requested target > at > com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:174) > at > com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1591) > at > com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:187) > at > com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:181) > at > com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHand > shaker.java:975) > at > com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(ClientHandsha > ker.java:123) > at > com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:516) > at > com.sun.net.ssl.internal.ssl.Handshaker.process_record(Handshaker.java:454 > ) > at > com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:8 > 84) > at > com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSock > etImpl.java:1096) > at > com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.ja > va:1123) > at > com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.ja > va:1107) > at > org.apache.axis.components.net.JSSESocketFactory.create(JSSESocketFactory. > java:186) > at > org.apache.axis.transport.http.HTTPSender.getSocket(HTTPSender.java:181) > at > org.apache.axis.transport.http.HTTPSender.writeToSocket(HTTPSender.java:39 > 7) > at > org.apache.axis.transport.http.HTTPSender.invoke(HTTPSender.java:135) > ... 11 more > Caused by: sun.security.validator.ValidatorException: PKIX path > building failed: > sun.security.provider.certpath.SunCertPathBuilderException: unable to > find valid certification path to requested target > at > sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:285) > at > sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:191 > ) > at sun.security.validator.Validator.validate(Validator.java:218) > at > com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.validate(X509TrustManage > rImpl.java:126) > at > com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X509T > rustManagerImpl.java:209) > at > com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X509T > rustManagerImpl.java:249) > at > com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHand > shaker.java:954) > ... 22 more > Caused by: sun.security.provider.certpath.SunCertPathBuilderException: > unable to find valid certification path to requested target > at > sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathB > uilder.java:174) > at > java.security.cert.CertPathBuilder.build(CertPathBuilder.java:238) > at > sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:280) > ... 28 more > > The server container.log says this : > > 2008-03-30 19:08:20,431 ERROR container.GSIServiceThread > [ServiceThread-13,process:147] Error processing request > Authentication failed. Caused by Failure unspecified at GSS-API level. > Caused by COM.claymoresystems.ptls.SSLCaughtAlertException: Unknown > certificate processing problem > at > COM.claymoresystems.ptls.SSLRecordReader.processAlert(SSLRecordReader.java > :153) > at > COM.claymoresystems.ptls.SSLRecordReader.readRecord(SSLRecordReader.java:9 > 0) > at > COM.claymoresystems.ptls.SSLHandshake.recvHandshakeToken(SSLHandshake.java > :177) > at > COM.claymoresystems.ptls.SSLHandshakeServer.processTokens(SSLHandshakeServ > er.java:179) > at > COM.claymoresystems.ptls.SSLHandshake.processHandshake(SSLHandshake.java:1 > 35) > at > org.globus.gsi.gssapi.GlobusGSSContextImpl.acceptSecContext(GlobusGSSConte > xtImpl.java:284) > at > org.globus.gsi.gssapi.net.GssSocket.authenticateServer(GssSocket.java:124) > at > org.globus.gsi.gssapi.net.GssSocket.startHandshake(GssSocket.java:142) > at > org.globus.gsi.gssapi.net.GssSocket.getOutputStream(GssSocket.java:161) > at > org.globus.wsrf.container.GSIServiceThread.process(GSIServiceThread.java:9 > 9) > at > org.globus.wsrf.container.ServiceThread.run(ServiceThread.java:291) > > > So nothig specific... > > I search for this exception and found, that I have to set my CLASSPATH > to $GLOBUS_LOCATION/lib. But nothing changes. > > The second fact is, that after executing > "$GLOBUS_LOCATION/setup/globus/setup-gram-service-common > --staging-host=notas --staging-protocol=https" > I can not run container with /etc/init.d/globus-4.0.1 start it fails > with this error: > > Failed to start container: Container failed to initialize [Caused by: > Failed to read '/usr/local/globus-4.0.1/etc/gram-service/jndi-config.xml' > JNDI configuration file] > > but with globus-start-container runs everything without problems. > Before executing the line, both methods were functional. > > Please where can be my mistake? > > Thanks a lot > > Michael
