Try adding $GLOBUS_LOCATION as the first thing on your classpath. It need to be atleast before axis.jar.
Rachana > -----Original Message----- > From: Michal Ondrovic [mailto:[EMAIL PROTECTED] > Sent: Tuesday, April 01, 2008 2:57 AM > To: Rachana Ananthakrishnan > Cc: [email protected] > Subject: Re: [gt-user] Problem with https on MathService example > > Hi, > > thanks for reply. I think my $CLASSPATH is ok. > > echo $CLASSPATH > /usr/local/globus-4.0.1/lib/addressing-1.0.jar:/usr/local/globus- > 4.0.1/lib/axis.jar: > ... > :/usr/local/globus-4.0.1/lib/xml-apis.jar:/usr/local/globus- > 4.0.1/lib/xmlsec.jar > > Is there any mistake? > > I've tried to play with CLASSPATH setting, but nothing changes, > everytime the same exception. > > Michael > > On Mon, Mar 31, 2008 at 4:40 PM, Rachana Ananthakrishnan > <[EMAIL PROTECTED]> wrote: > > Ensure that you have configuration files in $GLOBUS_LOCATION and jars in > > $G_L/lib in your classpath. Your error message indicates that default > > security libraries are used rather than Globus supplied ones, and so > your > > proxies cannot be processed. > > > > Rachana > > > > > > > > > -----Original Message----- > > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf > > > Of Michal Ondrovic > > > Sent: Sunday, March 30, 2008 12:24 PM > > > To: [email protected] > > > Subject: [gt-user] Problem with https on MathService example > > > > > > Hello, > > > > > > I'm new in Globus Toolkit, so I tried the example from GT4 > programming > > > book. I'm running GT4.0.6 on Kubuntu 7.10. I've compiled it from > > > sources. Every step from quick guide was successful and the tests for > > > gridftp, rft and gram finished without problems. My host name is > notas > > > with address 127.0.1.1. (only for my testing) > > > I wish to use only one machine for both client and server. So I > follow > > > the instructions in quickstart and everithing looks OK: > > > > > > #globusrun-ws -submit -S -f a.rsl > > > Delegating user credentials...Done. > > > Submitting job...Done. > > > Job ID: uuid:26992440-fe7c-11dc-9429-001636030b1c > > > Termination time: 03/31/2008 17:10 GMT > > > Current job state: StageIn > > > Current job state: Active > > > Current job state: CleanUp > > > Current job state: Done > > > Destroying job...Done. > > > Cleaning up any delegated credentials...Done. > > > > > > But running mathservice client fails with this error: > > > > > > :~/gt4book-examples$ java - > classpath ./build/stubs/classes/:$CLASSPATH > > > org.globus.examples.clients.MathService_instance.Client > > > https://notas:8443/wsfr/services/examples/core/first/MathService > > > > > > > > > AxisFault > > > faultCode: > > > {http://schemas.xmlsoap.org/soap/envelope/}Server.userException > > > faultSubcode: > > > faultString: javax.net.ssl.SSLHandshakeException: > > > sun.security.validator.ValidatorException: PKIX path building failed: > > > sun.security.provider.certpath.SunCertPathBuilderException: unable to > > > find valid certification path to requested target > > > faultActor: > > > faultNode: > > > faultDetail: > > > > > > > {http://xml.apache.org/axis/}stackTrace:javax.net.ssl.SSLHandshakeExceptio > > > n: > > > sun.security.validator.ValidatorException: PKIX path building failed: > > > sun.security.provider.certpath.SunCertPathBuilderException: unable to > > > find valid certification path to requested target > > > at > > > com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:174) > > > at > > > > com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1591) > > > at > > > com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:187) > > > at > > > com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:181) > > > at > > > > com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHand > > > shaker.java:975) > > > at > > > > com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(ClientHandsha > > > ker.java:123) > > > at > > > > com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:516) > > > at > > > > com.sun.net.ssl.internal.ssl.Handshaker.process_record(Handshaker.java:454 > > > ) > > > at > > > > com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:8 > > > 84) > > > at > > > > com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSock > > > etImpl.java:1096) > > > at > > > > com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.ja > > > va:1123) > > > at > > > > com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.ja > > > va:1107) > > > at > > > > org.apache.axis.components.net.JSSESocketFactory.create(JSSESocketFactory. > > > java:186) > > > at > > > > org.apache.axis.transport.http.HTTPSender.getSocket(HTTPSender.java:181) > > > at > > > > org.apache.axis.transport.http.HTTPSender.writeToSocket(HTTPSender.java:39 > > > 7) > > > at > > > org.apache.axis.transport.http.HTTPSender.invoke(HTTPSender.java:135) > > > at > > > > org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.jav > > > a:32) > > > at > org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118) > > > at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83) > > > at > org.apache.axis.client.AxisClient.invoke(AxisClient.java:165) > > > at org.apache.axis.client.Call.invokeEngine(Call.java:2727) > > > at org.apache.axis.client.Call.invoke(Call.java:2710) > > > at org.apache.axis.client.Call.invoke(Call.java:2386) > > > at org.apache.axis.client.Call.invoke(Call.java:2309) > > > at org.apache.axis.client.Call.invoke(Call.java:1766) > > > at > > > > org.globus.examples.stubs.MathService_instance.bindings.MathPortTypeSOAPBi > > > ndingStub.add(MathPortTypeSOAPBindingStub.java:188) > > > at > > > > org.globus.examples.clients.MathService_instance.Client.main(Client.java:3 > > > 2) > > > Caused by: sun.security.validator.ValidatorException: PKIX path > > > building failed: > > > sun.security.provider.certpath.SunCertPathBuilderException: unable to > > > find valid certification path to requested target > > > at > > > sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:285) > > > at > > > > sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:191 > > > ) > > > at > sun.security.validator.Validator.validate(Validator.java:218) > > > at > > > > com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.validate(X509TrustManage > > > rImpl.java:126) > > > at > > > > com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X509T > > > rustManagerImpl.java:209) > > > at > > > > com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X509T > > > rustManagerImpl.java:249) > > > at > > > > com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHand > > > shaker.java:954) > > > ... 22 more > > > Caused by: > sun.security.provider.certpath.SunCertPathBuilderException: > > > unable to find valid certification path to requested target > > > at > > > > sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathB > > > uilder.java:174) > > > at > > > java.security.cert.CertPathBuilder.build(CertPathBuilder.java:238) > > > at > > > sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:280) > > > ... 28 more > > > > > > {http://xml.apache.org/axis/}hostname:notas > > > > > > javax.net.ssl.SSLHandshakeException: > > > sun.security.validator.ValidatorException: PKIX path building failed: > > > sun.security.provider.certpath.SunCertPathBuilderException: unable to > > > find valid certification path to requested target > > > at org.apache.axis.AxisFault.makeFault(AxisFault.java:101) > > > at > > > org.apache.axis.transport.http.HTTPSender.invoke(HTTPSender.java:144) > > > at > > > > org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.jav > > > a:32) > > > at > org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118) > > > at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83) > > > at > org.apache.axis.client.AxisClient.invoke(AxisClient.java:165) > > > at org.apache.axis.client.Call.invokeEngine(Call.java:2727) > > > at org.apache.axis.client.Call.invoke(Call.java:2710) > > > at org.apache.axis.client.Call.invoke(Call.java:2386) > > > at org.apache.axis.client.Call.invoke(Call.java:2309) > > > at org.apache.axis.client.Call.invoke(Call.java:1766) > > > at > > > > org.globus.examples.stubs.MathService_instance.bindings.MathPortTypeSOAPBi > > > ndingStub.add(MathPortTypeSOAPBindingStub.java:188) > > > at > > > > org.globus.examples.clients.MathService_instance.Client.main(Client.java:3 > > > 2) > > > > > Caused by: javax.net.ssl.SSLHandshakeException: > > > sun.security.validator.ValidatorException: PKIX path building failed: > > > sun.security.provider.certpath.SunCertPathBuilderException: unable to > > > find valid certification path to requested target > > > at > > > com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:174) > > > at > > > > com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1591) > > > at > > > com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:187) > > > at > > > com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:181) > > > at > > > > com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHand > > > > > > > shaker.java:975) > > > at > > > > com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(ClientHandsha > > > ker.java:123) > > > at > > > > com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:516) > > > at > > > > com.sun.net.ssl.internal.ssl.Handshaker.process_record(Handshaker.java:454 > > > ) > > > at > > > > com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:8 > > > 84) > > > at > > > > com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSock > > > etImpl.java:1096) > > > at > > > > com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.ja > > > va:1123) > > > at > > > > com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.ja > > > va:1107) > > > at > > > > org.apache.axis.components.net.JSSESocketFactory.create(JSSESocketFactory. > > > java:186) > > > at > > > > org.apache.axis.transport.http.HTTPSender.getSocket(HTTPSender.java:181) > > > at > > > > org.apache.axis.transport.http.HTTPSender.writeToSocket(HTTPSender.java:39 > > > 7) > > > > > at > > > org.apache.axis.transport.http.HTTPSender.invoke(HTTPSender.java:135) > > > ... 11 more > > > Caused by: sun.security.validator.ValidatorException: PKIX path > > > building failed: > > > sun.security.provider.certpath.SunCertPathBuilderException: unable to > > > find valid certification path to requested target > > > at > > > sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:285) > > > at > > > > sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:191 > > > ) > > > at > sun.security.validator.Validator.validate(Validator.java:218) > > > at > > > > com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.validate(X509TrustManage > > > > > rImpl.java:126) > > > at > > > > com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X509T > > > rustManagerImpl.java:209) > > > at > > > > com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X509T > > > rustManagerImpl.java:249) > > > at > > > > com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHand > > > shaker.java:954) > > > ... 22 more > > > Caused by: > sun.security.provider.certpath.SunCertPathBuilderException: > > > unable to find valid certification path to requested target > > > at > > > > sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathB > > > > > > > uilder.java:174) > > > at > > > java.security.cert.CertPathBuilder.build(CertPathBuilder.java:238) > > > at > > > sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:280) > > > ... 28 more > > > > > > The server container.log says this : > > > > > > 2008-03-30 19:08:20,431 ERROR container.GSIServiceThread > > > [ServiceThread-13,process:147] Error processing request > > > Authentication failed. Caused by Failure unspecified at GSS-API level. > > > Caused by COM.claymoresystems.ptls.SSLCaughtAlertException: Unknown > > > certificate processing problem > > > at > > > > COM.claymoresystems.ptls.SSLRecordReader.processAlert(SSLRecordReader.java > > > :153) > > > at > > > > COM.claymoresystems.ptls.SSLRecordReader.readRecord(SSLRecordReader.java:9 > > > 0) > > > at > > > > COM.claymoresystems.ptls.SSLHandshake.recvHandshakeToken(SSLHandshake.java > > > :177) > > > at > > > > COM.claymoresystems.ptls.SSLHandshakeServer.processTokens(SSLHandshakeServ > > > er.java:179) > > > at > > > > COM.claymoresystems.ptls.SSLHandshake.processHandshake(SSLHandshake.java:1 > > > 35) > > > at > > > > org.globus.gsi.gssapi.GlobusGSSContextImpl.acceptSecContext(GlobusGSSConte > > > xtImpl.java:284) > > > at > > > > org.globus.gsi.gssapi.net.GssSocket.authenticateServer(GssSocket.java:124) > > > at > > > > org.globus.gsi.gssapi.net.GssSocket.startHandshake(GssSocket.java:142) > > > at > > > > org.globus.gsi.gssapi.net.GssSocket.getOutputStream(GssSocket.java:161) > > > at > > > > org.globus.wsrf.container.GSIServiceThread.process(GSIServiceThread.java:9 > > > 9) > > > at > > > org.globus.wsrf.container.ServiceThread.run(ServiceThread.java:291) > > > > > > > > > So nothig specific... > > > > > > I search for this exception and found, that I have to set my > CLASSPATH > > > to $GLOBUS_LOCATION/lib. But nothing changes. > > > > > > The second fact is, that after executing > > > "$GLOBUS_LOCATION/setup/globus/setup-gram-service-common > > > --staging-host=notas --staging-protocol=https" > > > I can not run container with /etc/init.d/globus-4.0.1 start it fails > > > with this error: > > > > > > Failed to start container: Container failed to initialize [Caused by: > > > Failed to read '/usr/local/globus-4.0.1/etc/gram-service/jndi- > config.xml' > > > JNDI configuration file] > > > > > > but with globus-start-container runs everything without problems. > > > Before executing the line, both methods were functional. > > > > > > Please where can be my mistake? > > > > > > Thanks a lot > > > > > > Michael > > > >
