Hi, thanks for reply. I think my $CLASSPATH is ok.
echo $CLASSPATH /usr/local/globus-4.0.1/lib/addressing-1.0.jar:/usr/local/globus-4.0.1/lib/axis.jar: ... :/usr/local/globus-4.0.1/lib/xml-apis.jar:/usr/local/globus-4.0.1/lib/xmlsec.jar Is there any mistake? I've tried to play with CLASSPATH setting, but nothing changes, everytime the same exception. Michael On Mon, Mar 31, 2008 at 4:40 PM, Rachana Ananthakrishnan <[EMAIL PROTECTED]> wrote: > Ensure that you have configuration files in $GLOBUS_LOCATION and jars in > $G_L/lib in your classpath. Your error message indicates that default > security libraries are used rather than Globus supplied ones, and so your > proxies cannot be processed. > > Rachana > > > > > -----Original Message----- > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf > > Of Michal Ondrovic > > Sent: Sunday, March 30, 2008 12:24 PM > > To: [email protected] > > Subject: [gt-user] Problem with https on MathService example > > > > Hello, > > > > I'm new in Globus Toolkit, so I tried the example from GT4 programming > > book. I'm running GT4.0.6 on Kubuntu 7.10. I've compiled it from > > sources. Every step from quick guide was successful and the tests for > > gridftp, rft and gram finished without problems. My host name is notas > > with address 127.0.1.1. (only for my testing) > > I wish to use only one machine for both client and server. So I follow > > the instructions in quickstart and everithing looks OK: > > > > #globusrun-ws -submit -S -f a.rsl > > Delegating user credentials...Done. > > Submitting job...Done. > > Job ID: uuid:26992440-fe7c-11dc-9429-001636030b1c > > Termination time: 03/31/2008 17:10 GMT > > Current job state: StageIn > > Current job state: Active > > Current job state: CleanUp > > Current job state: Done > > Destroying job...Done. > > Cleaning up any delegated credentials...Done. > > > > But running mathservice client fails with this error: > > > > :~/gt4book-examples$ java -classpath ./build/stubs/classes/:$CLASSPATH > > org.globus.examples.clients.MathService_instance.Client > > https://notas:8443/wsfr/services/examples/core/first/MathService > > > > > > AxisFault > > faultCode: > > {http://schemas.xmlsoap.org/soap/envelope/}Server.userException > > faultSubcode: > > faultString: javax.net.ssl.SSLHandshakeException: > > sun.security.validator.ValidatorException: PKIX path building failed: > > sun.security.provider.certpath.SunCertPathBuilderException: unable to > > find valid certification path to requested target > > faultActor: > > faultNode: > > faultDetail: > > > > {http://xml.apache.org/axis/}stackTrace:javax.net.ssl.SSLHandshakeExceptio > > n: > > sun.security.validator.ValidatorException: PKIX path building failed: > > sun.security.provider.certpath.SunCertPathBuilderException: unable to > > find valid certification path to requested target > > at > > com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:174) > > at > > com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1591) > > at > > com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:187) > > at > > com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:181) > > at > > com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHand > > shaker.java:975) > > at > > com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(ClientHandsha > > ker.java:123) > > at > > com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:516) > > at > > com.sun.net.ssl.internal.ssl.Handshaker.process_record(Handshaker.java:454 > > ) > > at > > com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:8 > > 84) > > at > > com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSock > > etImpl.java:1096) > > at > > com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.ja > > va:1123) > > at > > com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.ja > > va:1107) > > at > > org.apache.axis.components.net.JSSESocketFactory.create(JSSESocketFactory. > > java:186) > > at > > org.apache.axis.transport.http.HTTPSender.getSocket(HTTPSender.java:181) > > at > > org.apache.axis.transport.http.HTTPSender.writeToSocket(HTTPSender.java:39 > > 7) > > at > > org.apache.axis.transport.http.HTTPSender.invoke(HTTPSender.java:135) > > at > > org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.jav > > a:32) > > at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118) > > at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83) > > at org.apache.axis.client.AxisClient.invoke(AxisClient.java:165) > > at org.apache.axis.client.Call.invokeEngine(Call.java:2727) > > at org.apache.axis.client.Call.invoke(Call.java:2710) > > at org.apache.axis.client.Call.invoke(Call.java:2386) > > at org.apache.axis.client.Call.invoke(Call.java:2309) > > at org.apache.axis.client.Call.invoke(Call.java:1766) > > at > > org.globus.examples.stubs.MathService_instance.bindings.MathPortTypeSOAPBi > > ndingStub.add(MathPortTypeSOAPBindingStub.java:188) > > at > > org.globus.examples.clients.MathService_instance.Client.main(Client.java:3 > > 2) > > Caused by: sun.security.validator.ValidatorException: PKIX path > > building failed: > > sun.security.provider.certpath.SunCertPathBuilderException: unable to > > find valid certification path to requested target > > at > > sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:285) > > at > > sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:191 > > ) > > at sun.security.validator.Validator.validate(Validator.java:218) > > at > > com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.validate(X509TrustManage > > rImpl.java:126) > > at > > com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X509T > > rustManagerImpl.java:209) > > at > > com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X509T > > rustManagerImpl.java:249) > > at > > com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHand > > shaker.java:954) > > ... 22 more > > Caused by: sun.security.provider.certpath.SunCertPathBuilderException: > > unable to find valid certification path to requested target > > at > > sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathB > > uilder.java:174) > > at > > java.security.cert.CertPathBuilder.build(CertPathBuilder.java:238) > > at > > sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:280) > > ... 28 more > > > > {http://xml.apache.org/axis/}hostname:notas > > > > javax.net.ssl.SSLHandshakeException: > > sun.security.validator.ValidatorException: PKIX path building failed: > > sun.security.provider.certpath.SunCertPathBuilderException: unable to > > find valid certification path to requested target > > at org.apache.axis.AxisFault.makeFault(AxisFault.java:101) > > at > > org.apache.axis.transport.http.HTTPSender.invoke(HTTPSender.java:144) > > at > > org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.jav > > a:32) > > at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118) > > at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83) > > at org.apache.axis.client.AxisClient.invoke(AxisClient.java:165) > > at org.apache.axis.client.Call.invokeEngine(Call.java:2727) > > at org.apache.axis.client.Call.invoke(Call.java:2710) > > at org.apache.axis.client.Call.invoke(Call.java:2386) > > at org.apache.axis.client.Call.invoke(Call.java:2309) > > at org.apache.axis.client.Call.invoke(Call.java:1766) > > at > > org.globus.examples.stubs.MathService_instance.bindings.MathPortTypeSOAPBi > > ndingStub.add(MathPortTypeSOAPBindingStub.java:188) > > at > > org.globus.examples.clients.MathService_instance.Client.main(Client.java:3 > > 2) > > > Caused by: javax.net.ssl.SSLHandshakeException: > > sun.security.validator.ValidatorException: PKIX path building failed: > > sun.security.provider.certpath.SunCertPathBuilderException: unable to > > find valid certification path to requested target > > at > > com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:174) > > at > > com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1591) > > at > > com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:187) > > at > > com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:181) > > at > > com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHand > > > > shaker.java:975) > > at > > com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(ClientHandsha > > ker.java:123) > > at > > com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:516) > > at > > com.sun.net.ssl.internal.ssl.Handshaker.process_record(Handshaker.java:454 > > ) > > at > > com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:8 > > 84) > > at > > com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSock > > etImpl.java:1096) > > at > > com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.ja > > va:1123) > > at > > com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.ja > > va:1107) > > at > > org.apache.axis.components.net.JSSESocketFactory.create(JSSESocketFactory. > > java:186) > > at > > org.apache.axis.transport.http.HTTPSender.getSocket(HTTPSender.java:181) > > at > > org.apache.axis.transport.http.HTTPSender.writeToSocket(HTTPSender.java:39 > > 7) > > > at > > org.apache.axis.transport.http.HTTPSender.invoke(HTTPSender.java:135) > > ... 11 more > > Caused by: sun.security.validator.ValidatorException: PKIX path > > building failed: > > sun.security.provider.certpath.SunCertPathBuilderException: unable to > > find valid certification path to requested target > > at > > sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:285) > > at > > sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:191 > > ) > > at sun.security.validator.Validator.validate(Validator.java:218) > > at > > com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.validate(X509TrustManage > > > rImpl.java:126) > > at > > com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X509T > > rustManagerImpl.java:209) > > at > > com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X509T > > rustManagerImpl.java:249) > > at > > com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHand > > shaker.java:954) > > ... 22 more > > Caused by: sun.security.provider.certpath.SunCertPathBuilderException: > > unable to find valid certification path to requested target > > at > > sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathB > > > > uilder.java:174) > > at > > java.security.cert.CertPathBuilder.build(CertPathBuilder.java:238) > > at > > sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:280) > > ... 28 more > > > > The server container.log says this : > > > > 2008-03-30 19:08:20,431 ERROR container.GSIServiceThread > > [ServiceThread-13,process:147] Error processing request > > Authentication failed. Caused by Failure unspecified at GSS-API level. > > Caused by COM.claymoresystems.ptls.SSLCaughtAlertException: Unknown > > certificate processing problem > > at > > COM.claymoresystems.ptls.SSLRecordReader.processAlert(SSLRecordReader.java > > :153) > > at > > COM.claymoresystems.ptls.SSLRecordReader.readRecord(SSLRecordReader.java:9 > > 0) > > at > > COM.claymoresystems.ptls.SSLHandshake.recvHandshakeToken(SSLHandshake.java > > :177) > > at > > COM.claymoresystems.ptls.SSLHandshakeServer.processTokens(SSLHandshakeServ > > er.java:179) > > at > > COM.claymoresystems.ptls.SSLHandshake.processHandshake(SSLHandshake.java:1 > > 35) > > at > > org.globus.gsi.gssapi.GlobusGSSContextImpl.acceptSecContext(GlobusGSSConte > > xtImpl.java:284) > > at > > org.globus.gsi.gssapi.net.GssSocket.authenticateServer(GssSocket.java:124) > > at > > org.globus.gsi.gssapi.net.GssSocket.startHandshake(GssSocket.java:142) > > at > > org.globus.gsi.gssapi.net.GssSocket.getOutputStream(GssSocket.java:161) > > at > > org.globus.wsrf.container.GSIServiceThread.process(GSIServiceThread.java:9 > > 9) > > at > > org.globus.wsrf.container.ServiceThread.run(ServiceThread.java:291) > > > > > > So nothig specific... > > > > I search for this exception and found, that I have to set my CLASSPATH > > to $GLOBUS_LOCATION/lib. But nothing changes. > > > > The second fact is, that after executing > > "$GLOBUS_LOCATION/setup/globus/setup-gram-service-common > > --staging-host=notas --staging-protocol=https" > > I can not run container with /etc/init.d/globus-4.0.1 start it fails > > with this error: > > > > Failed to start container: Container failed to initialize [Caused by: > > Failed to read '/usr/local/globus-4.0.1/etc/gram-service/jndi-config.xml' > > JNDI configuration file] > > > > but with globus-start-container runs everything without problems. > > Before executing the line, both methods were functional. > > > > Please where can be my mistake? > > > > Thanks a lot > > > > Michael > >
