Hi there! Now, the problem is half-solved. Now globus-url-copy works fine between GTMaster and CFrontend. The point is that I have another node that also has GTMaster as upstream. Clock and timezone are set up correctly, but still have clock skew problem.
Any ideas please? 2009/12/7 Michael Link <ml...@mcs.anl.gov> > Both errors show clock skew problems. Fix that and see if you still have > issues. > > Mike > > cmasmas cmasmas wrote: > >> Hello everybody: >> >> I'm trying to make gridftp work on two nodes, called GTMaster and >> CFrontend (GTMaster is the upstream for CFrontend). Could anyone help me >> with this, please? Thanks!! >> >> *FIRST CASE* >> >> ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- >> >> If I try to copy a file in the same machine, I get this: (with -dbg >> option) >> >> /*globus-url-copy -dbg -vb gsiftp://cfrontend.xxx.es/etc/group < >> http://cfrontend.xxx.es/etc/group> file:///tmp/a*/ >> >> /Source: gsiftp://cfrontend.xxx.es/etc/ <http://cfrontend.xxx.es/etc/> >> >> Dest: file:///tmp/ >> group -> a >> debug: starting to get gsiftp://cfrontend.xxx.es/etc/group < >> http://cfrontend.xxx.es/etc/group> >> debug: connecting to gsiftp://cfrontend.xxx.es/etc/group < >> http://cfrontend.xxx.es/etc/group> >> >> debug: response from gsiftp://cfrontend.xxx.es/etc/group < >> http://cfrontend.xxx.es/etc/group>: >> 220 cfrontend.xxx.es <http://cfrontend.xxx.es> GridFTP Server 3.15 >> (gcc32, 1222656151-78) [Globus Toolkit 4.2.1] ready. >> >> debug: authenticating with gsiftp://cfrontend.xxx.es/etc/group < >> http://cfrontend.xxx.es/etc/group> >> debug: response from gsiftp://cfrontend.xxx.es/etc/group < >> http://cfrontend.xxx.es/etc/group>: >> >> 530-globus_xio: Authentication Error >> 530-OpenSSL Error: s3_srvr.c:2533: in library: SSL routines, function >> SSL3_GET_CLIENT_CERTIFICATE: no certificate returned >> 530-globus_gsi_callback_module: Could not verify credential >> 530-globus_gsi_callback_module: The certificate is not yet valid: Cert >> with subject: /O=Grid/OU=GlobusTest/OU= >> simpleCA-gtmaster.xxx.es/OU=xxx.es/CN=Charles < >> http://simpleCA-gtmaster.xxx.es/OU=xxx.es/CN=Charles> Bacon/CN=422956853 >> is not yet valid- check clock skew between hosts. >> 530 End. >> >> debug: fault on connection to gsiftp://cfrontend.xxx.es/etc/group < >> http://cfrontend.xxx.es/etc/group> >> >> debug: data callback, error globus_ftp_client: the server responded with >> an error, buffer 0xb79de008, length 0, offset=0, eof=true >> debug: operation complete >> >> error: globus_ftp_client: the server responded with an error >> 530 530-globus_xio: Authentication Error >> 530-OpenSSL Error: s3_srvr.c:2533: in library: SSL routines, function >> SSL3_GET_CLIENT_CERTIFICATE: no certificate returned >> 530-globus_gsi_callback_module: Could not verify credential >> 530-globus_gsi_callback_module: The certificate is not yet valid: Cert >> with subject: /O=Grid/OU=GlobusTest/OU= >> simpleCA-gtmaster.xxx.es/OU=xxx.es/CN=Charles < >> http://simpleCA-gtmaster.xxx.es/OU=xxx.es/CN=Charles> Bacon/CN=422956853 >> is not yet valid- check clock skew between hosts. >> >> 530 End./ >> >> The problem seems to be that both nodes are not synchronized. It's true. >> But I'm using Xen VMs and had not managed to synz them. >> >> *SECOND CASE* >> >> --------------------------------------------------------------------------------------------------------------------------------------------------------------- >> Trying to copy a file from CFrontend to GTMaster. See that the output says >> nothing about clock skew. >> >> /*globus-url-copy -dbg -vb gsiftp://cfrontend.XXX.es/etc/group < >> http://cfrontend.XXX.es/etc/group> gsiftp://gtmaster.xxx.es/tmp/a < >> http://gtmaster.xxx.es/tmp/a>* >> / >> /Source: gsiftp://cfrontend.xxx.es/etc/ <http://cfrontend.xxx.es/etc/> >> Dest: gsiftp://gtmaster.xxx.es/tmp/ <http://gtmaster.xxx.es/tmp/> >> group -> a >> debug: starting to size gsiftp://cfrontend.xxx.es/etc/group < >> http://cfrontend.xxx.es/etc/group> >> debug: connecting to gsiftp://cfrontend.xxx.es/etc/group < >> http://cfrontend.xxx.es/etc/group> >> debug: response from gsiftp://cfrontend.xxx.es/etc/group < >> http://cfrontend.xxx.es/etc/group>: >> 220 cfrontend.xxx.es <http://cfrontend.xxx.es> GridFTP Server 3.15 >> (gcc32, 1222656151-78) [Globus Toolkit 4.2.1] ready. >> >> debug: authenticating with gsiftp://cfrontend.xxx.es/etc/group < >> http://cfrontend.xxx.es/etc/group> >> debug: response from gsiftp://cfrontend.xxx.es/etc/group < >> http://cfrontend.xxx.es/etc/group>: >> >> 530-globus_xio: Authentication Error >> 530-OpenSSL Error: s3_srvr.c:2533: in library: SSL routines, function >> SSL3_GET_CLIENT_CERTIFICATE: no certificate returned >> 530-globus_gsi_callback_module: Could not verify credential >> 530-globus_gsi_callback_module: The certificate is not yet valid: Cert >> with subject: /O=Grid/OU=GlobusTest/OU= >> simpleCA-gtmaster.xxx.es/OU=xxx.es/CN=Charles < >> http://simpleCA-gtmaster.xxx.es/OU=xxx.es/CN=Charles> Bacon/CN=422956853 >> is not yet valid- check clock skew between hosts. >> 530 End. >> >> debug: fault on connection to gsiftp://cfrontend.xxx.es/etc/group < >> http://cfrontend.xxx.es/etc/group> >> debug: operation complete >> debug: starting to transfer gsiftp://cfrontend.xxx.es/etc/group < >> http://cfrontend.xxx.es/etc/group> to gsiftp://gtmaster.xxx.es/tmp/a < >> http://gtmaster.xxx.es/tmp/a> >> debug: connecting to gsiftp://gtmaster.xxx.es/tmp/a < >> http://gtmaster.xxx.es/tmp/a> >> >> debug: response from gsiftp://gtmaster.xxx.es/tmp/a < >> http://gtmaster.xxx.es/tmp/a>: >> 220 gtmaster.xxx.es <http://gtmaster.xxx.es> GridFTP Server 3.15 (gcc32, >> 1222656151-78) [Globus Toolkit 4.2.1] ready. >> >> debug: authenticating with gsiftp://gtmaster.xxx.es/tmp/a < >> http://gtmaster.xxx.es/tmp/a> >> debug: response from gsiftp://gtmaster.xxx.es/tmp/a < >> http://gtmaster.xxx.es/tmp/a>: >> >> 230 User bacon logged in. >> >> debug: sending command to gsiftp://gtmaster.xxx.es/tmp/a < >> http://gtmaster.xxx.es/tmp/a>: >> SITE HELP >> >> debug: response from gsiftp://gtmaster.xxx.es/tmp/a < >> http://gtmaster.xxx.es/tmp/a>: >> >> 214-The following commands are recognized: >> ALLO APPE REST CWD CDUP DCAU EPSV FEAT >> ERET MDTM STAT ESTO HELP LIST MODE NLST >> MLSD PASV RNFR MLST NOOP OPTS STOR PASS >> PBSZ PORT PROT SITE EPRT RETR SPOR SCKS >> TREV PWD QUIT SBUF SIZE SPAS STRU SYST >> RNTO TYPE USER LANG MKD RMD DELE CKSM >> 214 End >> >> debug: sending command to gsiftp://gtmaster.xxx.es/tmp/a < >> http://gtmaster.xxx.es/tmp/a>: >> FEAT >> >> debug: response from gsiftp://gtmaster.xxx.es/tmp/a < >> http://gtmaster.xxx.es/tmp/a>: >> >> 211-Extensions supported >> AUTHZ_ASSERT >> UTF8 >> LANG EN >> DCAU >> PARALLEL >> SIZE >> MLST >> Type*;Size*;Modify*;Perm*;Charset;UNIX.mode*;UNIX.owner*;UNIX.group*;Unique*;UNIX.slink*; >> ERET >> ESTO >> SPAS >> SPOR >> REST STREAM >> MDTM >> PASV AllowDelayed; >> 211 End. >> >> debug: sending command to gsiftp://gtmaster.xxx.es/tmp/a < >> http://gtmaster.xxx.es/tmp/a>: >> TYPE I >> debug: response from gsiftp://gtmaster.xxx.es/tmp/a < >> http://gtmaster.xxx.es/tmp/a>: >> >> 200 Type set to I. >> >> debug: sending command to gsiftp://gtmaster.xxx.es/tmp/a < >> http://gtmaster.xxx.es/tmp/a>: >> MODE E >> >> debug: response from gsiftp://gtmaster.xxx.es/tmp/a < >> http://gtmaster.xxx.es/tmp/a>: >> >> 200 Mode set to E. >> >> debug: sending command to gsiftp://gtmaster.xxx.es/tmp/a < >> http://gtmaster.xxx.es/tmp/a>: >> PBSZ 1048576 >> >> debug: response from gsiftp://gtmaster.xxx.es/tmp/a < >> http://gtmaster.xxx.es/tmp/a>: >> 200 PBSZ=1048576 >> >> debug: sending command to gsiftp://gtmaster.xxx.es/tmp/a < >> http://gtmaster.xxx.es/tmp/a>: >> PASV >> >> debug: response from gsiftp://gtmaster.xxx.es/tmp/a < >> http://gtmaster.xxx.es/tmp/a>: >> >> 227 Entering Passive Mode (192,168,51,74,205,97) >> >> debug: sending command to gsiftp://gtmaster.xxx.es/tmp/a < >> http://gtmaster.xxx.es/tmp/a>: >> STOR /tmp/a >> >> debug: sending command to gsiftp://cfrontend.xxx.es/etc/group < >> http://cfrontend.xxx.es/etc/group>: >> TYPE I >> debug: response from gsiftp://cfrontend.xxx.es/etc/group < >> http://cfrontend.xxx.es/etc/group>: >> >> 530 Must perform GSSAPI authentication. >> >> debug: fault on connection to gsiftp://cfrontend.xxx.es/etc/group < >> http://cfrontend.xxx.es/etc/group> >> >> debug: operation complete >> >> error: globus_ftp_client: the server responded with an error >> 530 Must perform GSSAPI authentication. >> / >> >> >>
