Re: [gt-user] Configuring globus, multi-ip situation

[Ian Stokes-Rees]

FWIW, I'm having exactly the same problem, but in my case it is a private subnet address and public IP address. Ian Charles Bacon wrote: As an experiment, can you tell me what happens if you run the job in two parts: First, try -submit -batch -o foo.epr Check what hostname/IP shows up in the EPR as the endpoint of the service. Then, try a -monitor -j foo.epr If the fnpc3x1 name is showing up in the EPR, that's what we have to fix.  I assume GLOBUS_HOSTNAME is set in the environment of the container - what is it set to? Charles On Jun 25, 2008, at 11:32 PM, Steven Timm wrote: I have the following A host with two public IP's fnpc3x1.fnal.gov  131.225.167.18 fnpcosg1.fnal.gov 131.225.166.2 "hostname" returns fnpc3x1.fnal.gov I want to offer the globus web services only on the 2nd ip. fnpcosg1.fnal.gov. hostcert.pem/hostkey.pem have host cert with fnpcosg1.fnal.gov in the subject.  so does containercert.pem/containerkey.pem DNS is OK both ways. Globus pre-ws works ok, so does gsiftp. on a globusrun-ws I get the following: globusrun-ws -submit -F fnpcosg1.fnal.gov:9443 -Ft Condor -J -s -c /usr/bin/id Delegating user credentials...Done. Submitting job...Done. Job ID: uuid:a0ee8f04-4338-11dd-8cba-001422086c92 Termination time: 06/27/2008 04:30 GMT globusrun-ws: globus_service_engine.c:globus_l_service_engine_session_started_callback:2744: Session failed to start globus_xio_gsi.c:globus_l_xio_gsi_read_token_cb:1335: The peer authenticated as /DC=org/DC=doegrids/OU=Services/CN=fnpcosg1.fnal.gov.Expected the peer to authenticate as /CN=host/fnpc3x1.fnal.gov ------------- the interesting thing is that the job in question *does* get submitted to condor, and run, but I get no stdout/stderr back. I have grepped every single file in globus and see no reference to the base ip anywhere in any config file.  What if anything did I do wrong? Steve Timm ------------------------------------------------------------------ Steven C. Timm, Ph.D  (630) 840-8525 [EMAIL PROTECTED]  http://home.fnal.gov/~timm/ Fermilab Computing Division, Scientific Computing Facilities, Grid Facilities Department, FermiGrid Services Group, Assistant Group Leader. -- Ian Stokes-Rees W: http://sbgrid.org [EMAIL PROTECTED] T: +1 617 418-4168 SBGrid, Harvard Medical School F: +1 617 432-5600