> -----Original Message-----
> From: Neha Sharma [mailto:[EMAIL PROTECTED]
> Sent: Friday, August 15, 2008 2:56 PM
> To: Joseph Bester
> Cc: Neha Sharma; Rachana Ananthakrishnan; GlobusUserList User
> Subject: Re: [gt-user] Any known limitation
> in"globus_gss_assist_init_sec_context" ??
>
> Hi Joseph
>
> I activated the module and looking at the debug output, it seems its
> hanging on get
>
> GSS Major Status: GSS COMPLETE
> GSS Minor Status Error Chain:
> (null)globus_gss_assist_display_status exiting
> globus_gss_assist_acquire_cred_ext exiting
> SAZProtocol: Going to establish security context
> globus_gss_assist_init_sec_context entering
> req_flags: 00000002 input_token length: 0
> major:00000001 minor:00000000 ret_flags: 00000000
> output_token length: 104 context_handle: 0x937e540
> globus_gss_assist_token_send_fd entering
> globus_gss_assist_token_send_fd_ex entering
> send_token: flags: 0 length: 104
>
> globus_gss_assist_token_send_fd_ex exiting
> globus_gss_assist_token_send_fd exiting
> globus_gss_assist_token_get_fd entering
> token read:000021a6
> globus_gss_assist_token_get_fd exiting
> req_flags: 00000002 input_token length: 8614
> major:00000001 minor:00000000 ret_flags: 00000000
> output_token length: 17258 context_handle: 0x937e540
> globus_gss_assist_token_send_fd entering
> globus_gss_assist_token_send_fd_ex entering
> send_token: flags: 0 length: 17258
>
> globus_gss_assist_token_send_fd_ex exiting
> globus_gss_assist_token_send_fd exiting
> globus_gss_assist_token_get_fd entering
>
>
> perhaps waiting on something from server end?
>
> What can I do on server end to print such debug message related to
> Globus...
I only know of direct SSL logging that can be enabled:
log4j.category.COM.claymoresystems.ptls.SSLDebug=OFF
The above dumps loads of logs. I'll try to see if I can send a modified CoG
jar with some debug enabled.
We use Apache Http client on our server side and use this to see on the wire
messages:
# Enable to see raw wire messages as written or read by the client
# log4j.logger.httpclient.wire.content=DEBUG
Can you enable some simialr server side wire message logging in your
application framework?
GssOutputStream has a boolean property that sets up the stream to flush
output automatically. Does you code use that? If not, can you review to
ensure that the output stream is flushed on writes?
Rachana
>
> -Neha
> On Aug 15, 2008, at 2:14 PM, Joseph Bester wrote:
>
> >
> > On Aug 15, 2008, at 2:43 PM, Neha Sharma wrote:
> >
> >> I see the following function defined:
> >>
> >> int activate(){
> >> if(globus_module_activate(GLOBUS_GSI_GSS_ASSIST_MODULE) !=
> >> GLOBUS_SUCCESS){
> >> logerr("Cannot activate globus");
> >> return(GSS_FAILED);
> >> }
> >> return(GSS_SUCCESS);
> >> }
> >>
> >> There are 2 ways in which the client can contact the
> authorization
> >> server - one is directly and one is through the gatekeeper
> >>
> >> In the code that deals with sending request through gatekeeper ,
> >> activate() method is being invoked
> >>
> >> However, the code which contacts the saz server directly is not
> >> calling this method...
> >>
> >> This code has been developed/managed by couple of people
> before me,
> >> so I am not sure why call to activate() has not been put in for
> >> this use case...is it mandatory?
> >>
> >> -Neha
> >
> > In general, if your code uses functions in a module, it
> must enable
> > that module. It will help with the debugging output at least.
> >
> > Joe
> >
>
