I suspect otherwise based on your stack trace - authorization of a call should not happen if there is no security used. Can you paste your service deployment descriptor (.wsdd file)? Can you also paste the resource class signature? Does it implement SecureResource interface? Also, are there any error messages on your server side - can you paste log from your container? Rachana _____
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Belaid MOA Sent: Tuesday, August 12, 2008 10:51 AM To: Rachana Ananthakrishnan Cc: [email protected] Subject: RE: [gt-user] Stateful web services under GT4.0.6. Thank you Rachana for your reply and help. As I mentioned previously, I do not have any security descriptor for my service, my resources, or my client. My code does not have anything related to security at all. With best regards. Belaid Moa. _____ From: [EMAIL PROTECTED] To: [EMAIL PROTECTED]; [email protected] Subject: RE: [gt-user] Stateful web services under GT4.0.6. Date: Tue, 12 Aug 2008 08:39:28 -0500 What does the service security descriptor look like? A change in security credential can happen if your 'Run As' configuration to set to be different, in your case it looks like it might be set to 'caller-identity'. Details are provided here: http://www.globus.org/toolkit/docs/4.0/security/authzframe/security_descript or.html#s-authzframe-secdesc-configRunas Rachana _____ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Belaid MOA Sent: Tuesday, August 12, 2008 12:02 AM To: [email protected] Subject: [gt-user] Stateful web services under GT4.0.6. Dear All, Did any of you come across this bizarre problem under GT4.0.6? Any help about this is very appreciated. I wrote a GT4 stateful service based on Anthoney and Sotomayor examples. Although I do not deal with any security in my code, somehow my container changes its credentials when I use stateful services. The funny thing is that my first call to the service works, but the second call fails with the error pasted below. After calling my stateful services, all my other services generate the error: faultString: org.globus.common.ChainedIOException: Authentication failed [Caused by: Operation unauthorized (Mechanism level: Authorization failed. Expected "/CN=host/mars.csc.uvic.ca" target but received "/C=CA/O=Grid/OU=pfc.forestry.ca/CN=Hao Chen")]. The only way to get my stateless services work again is by restarting the globus container. =========================================================== AxisFault faultCode: {http://schemas.xmlsoap.org/soap/envelope/}Server.userException faultSubcode: faultString: org.globus.common.ChainedIOException: Authentication failed [Caused by: Operation unauthorized (Mechanism level: Authorization failed. Expected "/CN=host/mars.csc.uvic.ca" target but received "/C=CA/O=Grid/OU=pfc.forestry.ca/CN=Hao Chen")] faultActor: faultNode: faultDetail: {http://xml.apache.org/axis/}stackTrace:Authentication failed. Caused by GSSException: Operation unauthorized (Mechanism level: Authorization failed. Expected "/CN=host/mars.csc.uvic.ca" target but received "/C=CA/O=Grid/OU=pfc.forestry.ca/CN=Hao Chen") at org.globus.gsi.gssapi.GlobusGSSContextImpl.initSecContext(GlobusGSSContextIm pl.java:509) at org.globus.gsi.gssapi.net.GssSocket.authenticateClient(GssSocket.java:102) at org.globus.gsi.gssapi.net.GssSocket.startHandshake(GssSocket.java:140) at org.globus.gsi.gssapi.net.GssSocket.getOutputStream(GssSocket.java:161) at org.apache.axis.transport.http.HTTPSender.writeToSocket(HTTPSender.java:433) at org.apache.axis.transport.http.HTTPSender.invoke(HTTPSender.java:135) at org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java: 32) at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118) at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83) at org.apache.axis.client.AxisClient.invoke(AxisClient.java:165) at org.apache.axis.client.Call.invokeEngine(Call.java:2727) at org.apache.axis.client.Call.invoke(Call.java:2710) at org.apache.axis.client.Call.invoke(Call.java:2386) at org.apache.axis.client.Call.invoke(Call.java:2309) at org.apache.axis.client.Call.invoke(Call.java:1766) at uvic.pfc.datahp.stubs.GridWISV1.bindings.GridWISV1PortTypeSOAPBindingStub.ge tState(GridWISV1PortTypeSOAPBindingStub.java:670) at web.uvic.pfc.portals.GridWISClient.getSubmissionState(Unknown Source) at web.uvic.pfc.portals.GridWISClient.processData(Unknown Source) at web.uvic.pfc.portals.GridWISClient.processData(Unknown Source) at web.uvic.pfc.portals.GridWISWorker.run(Unknown Source) at java.lang.Thread.run(Thread.java:619) {http://xml.apache.org/axis/}hostname:mars.csc.uvic.ca ============================================================================ == With many thanks in advance. B. Moa. _____ <http:///> _____
