Hi!

Just fixed my problem. Had to add the following code in the Client class:

static {
                Util.registerTransport();
        }


Best regards,
Thomas

-----------------------------------------------------------
Thomas Leitner
Research Assistant
Institute for Application-oriented Knowledge Processing
Johannes Kepler University Linz
A-4040 Linz, Altenberger Straße 69





On Aug 6, 2009, at 4:21 PM, Thomas Leitner wrote:

Hi!

Stuff is gettin' better, but now I have a new problem. I want to use a secure container with my Factory Service to create resources and experience the following error (just printed the relevant lines):


client side:
nested exception is:
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
AxisFault
faultCode: {http://schemas.xmlsoap.org/soap/envelope/} Server.userException
 faultSubcode:
faultString: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
 faultActor:
 faultNode:
 faultDetail:
{http://xml.apache.org/axis/} stackTrace:javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
...
Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
...
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target


server side:
ERROR container.GSIServiceThread [ServiceThread-73,process:155] Error processing requestAuthentication failed [Caused by: Failure unspecified at GSS-API level [Caused by: Unknown certificate processing problem]]

I tried several things but they diddn't work; also asked google for some hints but were not successfull.
I have all the GT-libs in my Classpath.

I tried the Security example in the GT developers tutorial by Borja Sotomayor and it works.
So I am stuck and don't know where search for a solution.


Here is my deploy-server.wsdd because I think it is the necessary file according to the error:
<!-- Instance service -->
<service name="examples/core/factory/GsdamService" provider="Handler" use="literal" style="document"> <parameter name="className" value="at.faw.examples.services.core.factory.impl.GsdamService"/> <wsdlFile>share/schema/examples/GsdamService_instance/ Gsdam_service.wsdl</wsdlFile> <parameter name="securityDescriptor" value="etc/ at_faw_examples_services_core_factory/security-config-first.xml"/>
        <parameter name="allowedMethods" value="*"/>
<parameter name="handlerClass" value="org.globus.axis.providers.RPCProvider"/>
        <parameter name="scope" value="Application"/>
<parameter name="providers" value="GetRPProvider DestroyProvider"/>
    </service>

    <!-- Factory service -->
<service name="examples/core/factory/GsdamFactoryService" provider="Handler" use="literal" style="document"> <parameter name="className" value="at.faw.examples.services.core.factory.impl.GsdamFactoryService" /> <wsdlFile>share/schema/examples/FactoryService/ Factory_service.wsdl</wsdlFile> <parameter name="securityDescriptor" value="etc/ at_faw_examples_services_core_factory/security-config-first.xml"/>
        <parameter name="allowedMethods" value="*"/>
<parameter name="handlerClass" value="org.globus.axis.providers.RPCProvider"/>
        <parameter name="scope" value="Application"/>
<parameter name="instance" value="examples/core/factory/ GsdamService"/>
    </service>

I have added the securityDescriptor in both Services but have also tried only to enable it in one service (tried both) - no success.

Hoping someone of you has an idea. Thanks in advance.

Kind regards,
Thomas


-----------------------------------------------------------
Thomas Leitner
Research Assistant
Institute for Application-oriented Knowledge Processing
Johannes Kepler University Linz
A-4040 Linz, Altenberger Straße 69






Reply via email to