On Aug 15, 2008, at 4:31 PM, Rachana Ananthakrishnan wrote:
-----Original Message-----
From: Neha Sharma [mailto:[EMAIL PROTECTED]
Sent: Friday, August 15, 2008 2:56 PM
To: Joseph Bester
Cc: Neha Sharma; Rachana Ananthakrishnan; GlobusUserList User
Subject: Re: [gt-user] Any known limitation
in"globus_gss_assist_init_sec_context" ??
Hi Joseph
I activated the module and looking at the debug output, it seems its
hanging on get
GSS Major Status: GSS COMPLETE
GSS Minor Status Error Chain:
(null)globus_gss_assist_display_status exiting
globus_gss_assist_acquire_cred_ext exiting
SAZProtocol: Going to establish security context
globus_gss_assist_init_sec_context entering
req_flags: 00000002 input_token length: 0
major:00000001 minor:00000000 ret_flags: 00000000
output_token length: 104 context_handle: 0x937e540
globus_gss_assist_token_send_fd entering
globus_gss_assist_token_send_fd_ex entering
send_token: flags: 0 length: 104
globus_gss_assist_token_send_fd_ex exiting
globus_gss_assist_token_send_fd exiting
globus_gss_assist_token_get_fd entering
token read:000021a6
globus_gss_assist_token_get_fd exiting
req_flags: 00000002 input_token length: 8614
major:00000001 minor:00000000 ret_flags: 00000000
output_token length: 17258 context_handle: 0x937e540
globus_gss_assist_token_send_fd entering
globus_gss_assist_token_send_fd_ex entering
send_token: flags: 0 length: 17258
globus_gss_assist_token_send_fd_ex exiting
globus_gss_assist_token_send_fd exiting
globus_gss_assist_token_get_fd entering
perhaps waiting on something from server end?
What can I do on server end to print such debug message related to
Globus...
I only know of direct SSL logging that can be enabled:
log4j.category.COM.claymoresystems.ptls.SSLDebug=OFF
The above dumps loads of logs. I'll try to see if I can send a
modified CoG
jar with some debug enabled.
That may help. Thanks!
We use Apache Http client on our server side and use this to see on
the wire
messages:
# Enable to see raw wire messages as written or read by the client
# log4j.logger.httpclient.wire.content=DEBUG
Can you enable some simialr server side wire message logging in your
application framework?
Not that I can think of. I already have the server running in its full
debug mode and don't see anything that can identify cause of the
problem..
GssOutputStream has a boolean property that sets up the stream to
flush
output automatically. Does you code use that?
No. It uses the standard java.io.OutputStream. Also, its not my code,
it has been written by a previous SAZ developer.
If not, can you review to
ensure that the output stream is flushed on writes?
Does this mean invoking the flush() explicitly in the code? If yes,
its not being done at the moment and since this code is an external
class , I would take some time for me to edit the original source code
and change its packaging etc
-Neha
Rachana
-Neha
On Aug 15, 2008, at 2:14 PM, Joseph Bester wrote:
On Aug 15, 2008, at 2:43 PM, Neha Sharma wrote:
I see the following function defined:
int activate(){
if(globus_module_activate(GLOBUS_GSI_GSS_ASSIST_MODULE) !=
GLOBUS_SUCCESS){
logerr("Cannot activate globus");
return(GSS_FAILED);
}
return(GSS_SUCCESS);
}
There are 2 ways in which the client can contact the
authorization
server - one is directly and one is through the gatekeeper
In the code that deals with sending request through gatekeeper ,
activate() method is being invoked
However, the code which contacts the saz server directly is not
calling this method...
This code has been developed/managed by couple of people
before me,
so I am not sure why call to activate() has not been put in for
this use case...is it mandatory?
-Neha
In general, if your code uses functions in a module, it
must enable
that module. It will help with the debugging output at least.
Joe
