Hi,

I have gt-4.0.8 installed on. It was working fine but when my certificates 
expired and I configured new certificates I get the following error. Even when 
I run my container with -nosec still it generates the same error.

Certificates permissions are as follows:

r...@quaidian:/etc/grid-security# ls -la
total 32
drwxr-xr-x   3 root   root   4096 2010-03-04 20:09 .
drwxr-xr-x 157 root   root   8192 2010-03-04 10:58 ..
drwxr-xr-x   2 root   root   4096 2009-07-15 00:44 certificates
-rw-r--r--   1 globus globus 2192 2010-03-04 19:59 containercert.pem
-r--------   1 globus globus 1938 2010-03-04 19:58 containerkey.pem
-rw-r--r--   1 root   root      0 2009-05-27 15:15 grid-mapfile
-rw-r--r--   1 root   root   2192 2010-03-04 20:09 hostcert.pem
-r--------   1 root   root   1938 2010-03-04 20:09 hostkey.pem

and 

glo...@quaidian:~/.globus$ ls -la
total 28
drwxr-xr-x  3 globus globus 4096 2010-03-04 20:49 .
drwxr-xr-x 25 globus globus 4096 2009-07-23 18:01 ..
-rw-r--r--  1 globus globus 2192 2010-03-04 20:19 containercert.pem
-r--------  1 globus globus 1938 2010-03-04 20:19 containerkey.pem
drwxr-xr-x  8 globus globus 4096 2010-03-03 11:18 persisted
-rw-r--r--  1 globus globus 2192 2010-03-04 20:49 usercert.pem
-r--------  1 globus globus 1938 2010-03-04 20:49 userkey.pem


contents of the global security descriptor are as following

(globus_wsrf_core/global_security_descriptor.xml )

<?xml version="1.0" encoding="UTF-8"?>
<securityConfig xmlns="http://www.globus.org";>
    <credential>
        <key-file value="/etc/grid-security/containerkey.pem"/>
        <cert-file value="/etc/grid-security/containercert.pem"/>
    </credential>
    <gridmap value="/etc/grid-security/grid-mapfile"/>
</securityConfig>


The  error I get is the following.


glo...@quaidian:/usr/local/globus-4.0.8$ globus-start-container
Failed to start container: Failed to initialize 'ManagedJobFactoryService' 
service [Caused by: [SEC] Service credentials not configured and was not able 
to obtain container credentials.; nested exception is: 
    org.globus.wsrf.security.SecurityException: [SEC] Error obtaining container 
credentials; nested exception is: 
    org.globus.wsrf.config.ConfigException: Failed to initialize container 
security config file "etc/globus_wsrf_core/global_security_descriptor.xml" 
[Caused by:  [Caused by: Failed to load credentials. [Caused by: Private key 
file must not be encrypted.]]]]

Regards,

Sardar Hussain








      

Reply via email to