The point is that I'm using Xen VM's. The clock for each DomU is equal to Dom0. All VM's are running on the same machine, and have the same configuration (at least, they are supposed to). The thing is that GridFTP works with one of the nodes (CFrontend), but not with another one (called GFrontend).
2009/12/8 Eric Blau <b...@mcs.anl.gov> > > If you're having clock skew problems, I suggest running ntpd on all of the > nodes. > > Eric > > ----- "cmasmas cmasmas" <cmasma...@gmail.com> wrote: > > > Hi there! > > > > Now, the problem is half-solved. Now globus-url-copy works fine > > between GTMaster and CFrontend. > > The point is that I have another node that also has GTMaster as > > upstream. Clock and timezone are set up correctly, but still have > > clock skew problem. > > > > Any ideas please? > > > > > > 2009/12/7 Michael Link < ml...@mcs.anl.gov > > > > > > > Both errors show clock skew problems. Fix that and see if you still > > have issues. > > > > Mike > > > > cmasmas cmasmas wrote: > > > > > > > > Hello everybody: > > > > I'm trying to make gridftp work on two nodes, called GTMaster and > > CFrontend (GTMaster is the upstream for CFrontend). Could anyone help > > me with this, please? Thanks!! > > > > *FIRST CASE* > > > ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- > > > > If I try to copy a file in the same machine, I get this: (with -dbg > > option) > > > > /*globus-url-copy -dbg -vb gsiftp:// cfrontend.xxx.es/etc/group < > > http://cfrontend.xxx.es/etc/group > file:///tmp/a*/ > > > > /Source: gsiftp:// cfrontend.xxx.es/etc/ < > > http://cfrontend.xxx.es/etc/ > > > > > Dest: file:///tmp/ > > group -> a > > debug: starting to get gsiftp:// cfrontend.xxx.es/etc/group < > > http://cfrontend.xxx.es/etc/group > > > debug: connecting to gsiftp:// cfrontend.xxx.es/etc/group < > > http://cfrontend.xxx.es/etc/group > > > > > debug: response from gsiftp:// cfrontend.xxx.es/etc/group < > > http://cfrontend.xxx.es/etc/group >: > > 220 cfrontend.xxx.es < http://cfrontend.xxx.es > GridFTP Server 3.15 > > (gcc32, 1222656151-78) [Globus Toolkit 4.2.1] ready. > > > > debug: authenticating with gsiftp:// cfrontend.xxx.es/etc/group < > > http://cfrontend.xxx.es/etc/group > > > debug: response from gsiftp:// cfrontend.xxx.es/etc/group < > > http://cfrontend.xxx.es/etc/group >: > > > > 530-globus_xio: Authentication Error > > 530-OpenSSL Error: s3_srvr.c:2533: in library: SSL routines, function > > SSL3_GET_CLIENT_CERTIFICATE: no certificate returned > > 530-globus_gsi_callback_module: Could not verify credential > > 530-globus_gsi_callback_module: The certificate is not yet valid: Cert > > with subject: /O=Grid/OU=GlobusTest/OU= > > simpleCA-gtmaster.xxx.es/OU=xxx.es/CN=Charles < > > http://simpleCA-gtmaster.xxx.es/OU=xxx.es/CN=Charles > > > Bacon/CN=422956853 is not yet valid- check clock skew between hosts. > > 530 End. > > > > debug: fault on connection to gsiftp:// cfrontend.xxx.es/etc/group < > > http://cfrontend.xxx.es/etc/group > > > > > debug: data callback, error globus_ftp_client: the server responded > > with an error, buffer 0xb79de008, length 0, offset=0, eof=true > > debug: operation complete > > > > error: globus_ftp_client: the server responded with an error > > 530 530-globus_xio: Authentication Error > > 530-OpenSSL Error: s3_srvr.c:2533: in library: SSL routines, function > > SSL3_GET_CLIENT_CERTIFICATE: no certificate returned > > 530-globus_gsi_callback_module: Could not verify credential > > 530-globus_gsi_callback_module: The certificate is not yet valid: Cert > > with subject: /O=Grid/OU=GlobusTest/OU= > > simpleCA-gtmaster.xxx.es/OU=xxx.es/CN=Charles < > > http://simpleCA-gtmaster.xxx.es/OU=xxx.es/CN=Charles > > > Bacon/CN=422956853 is not yet valid- check clock skew between hosts. > > > > 530 End./ > > > > The problem seems to be that both nodes are not synchronized. It's > > true. But I'm using Xen VMs and had not managed to synz them. > > > > *SECOND CASE* > > > --------------------------------------------------------------------------------------------------------------------------------------------------------------- > > Trying to copy a file from CFrontend to GTMaster. See that the output > > says nothing about clock skew. > > > > /*globus-url-copy -dbg -vb gsiftp:// cfrontend.XXX.es/etc/group < > > http://cfrontend.XXX.es/etc/group > gsiftp:// gtmaster.xxx.es/tmp/a < > > http://gtmaster.xxx.es/tmp/a >* > > / > > /Source: gsiftp:// cfrontend.xxx.es/etc/ < > > http://cfrontend.xxx.es/etc/ > > > Dest: gsiftp:// gtmaster.xxx.es/tmp/ < http://gtmaster.xxx.es/tmp/ > > > group -> a > > debug: starting to size gsiftp:// cfrontend.xxx.es/etc/group < > > http://cfrontend.xxx.es/etc/group > > > debug: connecting to gsiftp:// cfrontend.xxx.es/etc/group < > > http://cfrontend.xxx.es/etc/group > > > debug: response from gsiftp:// cfrontend.xxx.es/etc/group < > > http://cfrontend.xxx.es/etc/group >: > > 220 cfrontend.xxx.es < http://cfrontend.xxx.es > GridFTP Server 3.15 > > (gcc32, 1222656151-78) [Globus Toolkit 4.2.1] ready. > > > > debug: authenticating with gsiftp:// cfrontend.xxx.es/etc/group < > > http://cfrontend.xxx.es/etc/group > > > debug: response from gsiftp:// cfrontend.xxx.es/etc/group < > > http://cfrontend.xxx.es/etc/group >: > > > > 530-globus_xio: Authentication Error > > 530-OpenSSL Error: s3_srvr.c:2533: in library: SSL routines, function > > SSL3_GET_CLIENT_CERTIFICATE: no certificate returned > > 530-globus_gsi_callback_module: Could not verify credential > > 530-globus_gsi_callback_module: The certificate is not yet valid: Cert > > with subject: /O=Grid/OU=GlobusTest/OU= > > simpleCA-gtmaster.xxx.es/OU=xxx.es/CN=Charles < > > http://simpleCA-gtmaster.xxx.es/OU=xxx.es/CN=Charles > > > Bacon/CN=422956853 is not yet valid- check clock skew between hosts. > > 530 End. > > > > debug: fault on connection to gsiftp:// cfrontend.xxx.es/etc/group < > > http://cfrontend.xxx.es/etc/group > > > debug: operation complete > > debug: starting to transfer gsiftp:// cfrontend.xxx.es/etc/group < > > http://cfrontend.xxx.es/etc/group > to gsiftp:// gtmaster.xxx.es/tmp/a > > < http://gtmaster.xxx.es/tmp/a > > > debug: connecting to gsiftp:// gtmaster.xxx.es/tmp/a < > > http://gtmaster.xxx.es/tmp/a > > > > > debug: response from gsiftp:// gtmaster.xxx.es/tmp/a < > > http://gtmaster.xxx.es/tmp/a >: > > 220 gtmaster.xxx.es < http://gtmaster.xxx.es > GridFTP Server 3.15 > > (gcc32, 1222656151-78) [Globus Toolkit 4.2.1] ready. > > > > debug: authenticating with gsiftp:// gtmaster.xxx.es/tmp/a < > > http://gtmaster.xxx.es/tmp/a > > > debug: response from gsiftp:// gtmaster.xxx.es/tmp/a < > > http://gtmaster.xxx.es/tmp/a >: > > > > 230 User bacon logged in. > > > > debug: sending command to gsiftp:// gtmaster.xxx.es/tmp/a < > > http://gtmaster.xxx.es/tmp/a >: > > SITE HELP > > > > debug: response from gsiftp:// gtmaster.xxx.es/tmp/a < > > http://gtmaster.xxx.es/tmp/a >: > > > > 214-The following commands are recognized: > > ALLO APPE REST CWD CDUP DCAU EPSV FEAT > > ERET MDTM STAT ESTO HELP LIST MODE NLST > > MLSD PASV RNFR MLST NOOP OPTS STOR PASS > > PBSZ PORT PROT SITE EPRT RETR SPOR SCKS > > TREV PWD QUIT SBUF SIZE SPAS STRU SYST > > RNTO TYPE USER LANG MKD RMD DELE CKSM > > 214 End > > > > debug: sending command to gsiftp:// gtmaster.xxx.es/tmp/a < > > http://gtmaster.xxx.es/tmp/a >: > > FEAT > > > > debug: response from gsiftp:// gtmaster.xxx.es/tmp/a < > > http://gtmaster.xxx.es/tmp/a >: > > > > 211-Extensions supported > > AUTHZ_ASSERT > > UTF8 > > LANG EN > > DCAU > > PARALLEL > > SIZE > > MLST > > > Type*;Size*;Modify*;Perm*;Charset;UNIX.mode*;UNIX.owner*;UNIX.group*;Unique*;UNIX.slink*; > > ERET > > ESTO > > SPAS > > SPOR > > REST STREAM > > MDTM > > PASV AllowDelayed; > > 211 End. > > > > debug: sending command to gsiftp:// gtmaster.xxx.es/tmp/a < > > http://gtmaster.xxx.es/tmp/a >: > > TYPE I > > debug: response from gsiftp:// gtmaster.xxx.es/tmp/a < > > http://gtmaster.xxx.es/tmp/a >: > > > > 200 Type set to I. > > > > debug: sending command to gsiftp:// gtmaster.xxx.es/tmp/a < > > http://gtmaster.xxx.es/tmp/a >: > > MODE E > > > > debug: response from gsiftp:// gtmaster.xxx.es/tmp/a < > > http://gtmaster.xxx.es/tmp/a >: > > > > 200 Mode set to E. > > > > debug: sending command to gsiftp:// gtmaster.xxx.es/tmp/a < > > http://gtmaster.xxx.es/tmp/a >: > > PBSZ 1048576 > > > > debug: response from gsiftp:// gtmaster.xxx.es/tmp/a < > > http://gtmaster.xxx.es/tmp/a >: > > 200 PBSZ=1048576 > > > > debug: sending command to gsiftp:// gtmaster.xxx.es/tmp/a < > > http://gtmaster.xxx.es/tmp/a >: > > PASV > > > > debug: response from gsiftp:// gtmaster.xxx.es/tmp/a < > > http://gtmaster.xxx.es/tmp/a >: > > > > 227 Entering Passive Mode (192,168,51,74,205,97) > > > > debug: sending command to gsiftp:// gtmaster.xxx.es/tmp/a < > > http://gtmaster.xxx.es/tmp/a >: > > STOR /tmp/a > > > > debug: sending command to gsiftp:// cfrontend.xxx.es/etc/group < > > http://cfrontend.xxx.es/etc/group >: > > TYPE I > > debug: response from gsiftp:// cfrontend.xxx.es/etc/group < > > http://cfrontend.xxx.es/etc/group >: > > > > 530 Must perform GSSAPI authentication. > > > > debug: fault on connection to gsiftp:// cfrontend.xxx.es/etc/group < > > http://cfrontend.xxx.es/etc/group > > > > > debug: operation complete > > > > error: globus_ftp_client: the server responded with an error > > 530 Must perform GSSAPI authentication. > > / >
