[gt-user] GridFTP Troubleshooting

2018-08-28 Thread Amit Kumar 
Dear GT,

I have setup GridFTP and trying to use globus-url-copy to test it and
running it following errors, and wondering if you can help me here.

I have a InCommon cert for the gridftp host, I also have
InCommonRSAServerCA cert in the path but I am not able to find what issue
certificate is it complaining about?

Any help here is greatly appreciated.

Thank you,
Amit


$ globus-url-copy -vb -dbg gsiftp://gftp.host.xxx.edu/tmp/zero.source
file:///tmp/zero.dest
Source: gsiftp://gftp.host.xxx.edu/tmp/
Dest:   file:///tmp/
  zero.source  ->  zero.dest
debug: starting to get gsiftp://gftp.host.xxx.edu/tmp/zero.source
debug: connecting to gsiftp://gftp.host.xxx.edu/tmp/zero.source

debug: response from gsiftp://gftp.host.xxx.edu/tmp/zero.source:
220 10.10.29.20 GridFTP Server 12.8 (gcc64, 1531931206-85) [Globus Toolkit
6.0] ready.

debug: authenticating with gsiftp://gftp.host.xxx.edu/tmp/zero.source
debug: fault on connection to gsiftp://gftp.host.xxx.edu/tmp/zero.source:
globus_ftp_control: gss_init_sec_context failed
debug: data callback, error globus_ftp_control: gss_init_sec_context
failed, buffer 0x2aaab0ff3010, length 0, offset=0, eof=true
debug: operation complete

error: globus_ftp_control: gss_init_sec_context failed
OpenSSL Error: s3_clnt.c:1264: in library: SSL routines, function
ssl3_get_server_certificate: certificate verify failed
globus_gsi_callback_module: Could not verify credential
globus_gsi_callback_module: Could not verify credential: unable to get
issuer certificate

Re: [gt-user] GridFTP Troubleshooting

2018-08-28 Thread Foster, Ian T. 
Dear Amit:

Have you tried installing Globus Connect and using the Globus transfer service? 
Easier, faster, more reliable, …

See https://www.globus.org/data-transfer

Regards — Ian

On Aug 28, 2018, at 11:07 AM, Amit Kumar 
mailto:ihavebeenfor...@gmail.com>> wrote:

Dear GT,

I have setup GridFTP and trying to use globus-url-copy to test it and running 
it following errors, and wondering if you can help me here.

I have a InCommon cert for the gridftp host, I also have InCommonRSAServerCA 
cert in the path but I am not able to find what issue certificate is it 
complaining about?

Any help here is greatly appreciated.

Thank you,
Amit


$ globus-url-copy -vb -dbg 
gsiftp://gftp.host.xxx.edu/tmp/zero.source
 file:///tmp/zero.dest
Source: gsiftp://gftp.host.xxx.edu/tmp/
Dest:   file:///tmp/
  zero.source  ->  zero.dest
debug: starting to get 
gsiftp://gftp.host.xxx.edu/tmp/zero.source
debug: connecting to 
gsiftp://gftp.host.xxx.edu/tmp/zero.source

debug: response from 
gsiftp://gftp.host.xxx.edu/tmp/zero.source:
220 10.10.29.20 GridFTP Server 12.8 (gcc64, 1531931206-85) [Globus Toolkit 6.0] 
ready.

debug: authenticating with 
gsiftp://gftp.host.xxx.edu/tmp/zero.source
debug: fault on connection to 
gsiftp://gftp.host.xxx.edu/tmp/zero.source:
 globus_ftp_control: gss_init_sec_context failed
debug: data callback, error globus_ftp_control: gss_init_sec_context failed, 
buffer 0x2aaab0ff3010, length 0, offset=0, eof=true
debug: operation complete

error: globus_ftp_control: gss_init_sec_context failed
OpenSSL Error: s3_clnt.c:1264: in library: SSL routines, function 
ssl3_get_server_certificate: certificate verify failed
globus_gsi_callback_module: Could not verify credential
globus_gsi_callback_module: Could not verify credential: unable to get issuer 
certificate

_
Ian Foster
Director, Data Science and Learning Division; Senior Scientist; Distinguished 
Fellow, Argonne National Laboratory
Arthur Holly Compton Distinguished Service Professor of Computer Science, 
University of Chicago
Fellow, Institute for Molecular Engineering
Chief Troublemaker, Globus, www.globus.org
Check out our new book: Cloud Computing for Science and Engineering
Online at https://cloud4scieng.org
Tel: +1 630 252 4619

Re: [gt-user] GridFTP Troubleshooting

2018-08-28 Thread Amit Kumar 
Hi Ian,

Thank you for quick response. Yes we have Globus connect server setup along
with an endpoint for our institution, and that works fine for us. This is a
new setup that I am working on so that I can get out LHC collaborators to
use GridFTP along for their ATLAS computing needs.
This (Globus connect) installation of GridFTP is a slightly different and
older works nicely for our DTN, but I need this new setup to use different
authentication (LCMAPS VOMS) hence working on another instance.

I think I pretty close to getting this setup if I can figure out
certificate issues, seems basic to me but I lack a bit of understanding on
this. Any insight here will be a great help.

Thank you,
Amit

On Tue, Aug 28, 2018 at 11:18 AM Foster, Ian T.  wrote:

> Dear Amit:
>
> Have you tried installing Globus Connect and using the Globus transfer
> service? Easier, faster, more reliable, …
>
> See https://www.globus.org/data-transfer
>
> Regards — Ian
>
> On Aug 28, 2018, at 11:07 AM, Amit Kumar 
> wrote:
>
> Dear GT,
>
> I have setup GridFTP and trying to use globus-url-copy to test it and
> running it following errors, and wondering if you can help me here.
>
> I have a InCommon cert for the gridftp host, I also have
> InCommonRSAServerCA cert in the path but I am not able to find what issue
> certificate is it complaining about?
>
> Any help here is greatly appreciated.
>
> Thank you,
> Amit
>
>
> $ globus-url-copy -vb -dbg gsiftp://gftp.host.xxx.edu/tmp/zero.source
> file:///tmp/zero.dest
> Source: gsiftp://gftp.host.xxx.edu/tmp/
> Dest:   file:///tmp/
>   zero.source  ->  zero.dest
> debug: starting to get gsiftp://gftp.host.xxx.edu/tmp/zero.source
> debug: connecting to gsiftp://gftp.host.xxx.edu/tmp/zero.source
>
> debug: response from gsiftp://gftp.host.xxx.edu/tmp/zero.source:
> 220 10.10.29.20 GridFTP Server 12.8 (gcc64, 1531931206-85) [Globus Toolkit
> 6.0] ready.
>
> debug: authenticating with gsiftp://gftp.host.xxx.edu/tmp/zero.source
> debug: fault on connection to gsiftp://gftp.host.xxx.edu/tmp/zero.source:
> globus_ftp_control: gss_init_sec_context failed
> debug: data callback, error globus_ftp_control: gss_init_sec_context
> failed, buffer 0x2aaab0ff3010, length 0, offset=0, eof=true
> debug: operation complete
>
> error: globus_ftp_control: gss_init_sec_context failed
> OpenSSL Error: s3_clnt.c:1264: in library: SSL routines, function
> ssl3_get_server_certificate: certificate verify failed
> globus_gsi_callback_module: Could not verify credential
> globus_gsi_callback_module: Could not verify credential: unable to get
> issuer certificate
>
>
> _
> Ian Foster
> Director, Data Science and Learning Division; Senior Scientist;
> Distinguished Fellow, Argonne National Laboratory
> Arthur Holly Compton Distinguished Service Professor of Computer Science,
> University of Chicago
> Fellow, Institute for Molecular Engineering
> Chief Troublemaker, Globus, www.globus.org
> Check out our new book: *Cloud Computing for Science and Engineering*
> Online at https://cloud4scieng.org
> Tel: +1 630 252 4619
>
>
>
>
>

Re: [gt-user] GridFTP Troubleshooting

2018-08-28 Thread Ian Foster 
Dear Amit:

Unfortunately I am not up to speed on the certificate issues. Things would be 
simpler if ATLAS used Globus -)

Regards — Ian

> On Aug 28, 2018, at 11:25 AM, Amit Kumar  wrote:
> 
> Hi Ian,
> 
> Thank you for quick response. Yes we have Globus connect server setup along 
> with an endpoint for our institution, and that works fine for us. This is a 
> new setup that I am working on so that I can get out LHC collaborators to use 
> GridFTP along for their ATLAS computing needs. 
> This (Globus connect) installation of GridFTP is a slightly different and 
> older works nicely for our DTN, but I need this new setup to use different 
> authentication (LCMAPS VOMS) hence working on another instance. 
> 
> I think I pretty close to getting this setup if I can figure out certificate 
> issues, seems basic to me but I lack a bit of understanding on this. Any 
> insight here will be a great help.
> 
> Thank you,
> Amit
> 
> On Tue, Aug 28, 2018 at 11:18 AM Foster, Ian T.  > wrote:
> Dear Amit:
> 
> Have you tried installing Globus Connect and using the Globus transfer 
> service? Easier, faster, more reliable, …
> 
> See https://www.globus.org/data-transfer 
> 
> 
> Regards — Ian
> 
>> On Aug 28, 2018, at 11:07 AM, Amit Kumar > > wrote:
>> 
>> Dear GT,
>> 
>> I have setup GridFTP and trying to use globus-url-copy to test it and 
>> running it following errors, and wondering if you can help me here. 
>> 
>> I have a InCommon cert for the gridftp host, I also have InCommonRSAServerCA 
>> cert in the path but I am not able to find what issue certificate is it 
>> complaining about?
>> 
>> Any help here is greatly appreciated.
>> 
>> Thank you,
>> Amit
>> 
>> 
>> $ globus-url-copy -vb -dbg gsiftp://gftp.host.xxx.edu/tmp/zero.source 
>>  file:///tmp/zero.dest <>
>> Source: gsiftp://gftp.host.xxx.edu/tmp/ 
>> Dest:   file:///tmp/ <>
>>   zero.source  ->  zero.dest
>> debug: starting to get gsiftp://gftp.host.xxx.edu/tmp/zero.source 
>> 
>> debug: connecting to gsiftp://gftp.host.xxx.edu/tmp/zero.source 
>> 
>> 
>> debug: response from gsiftp://gftp.host.xxx.edu/tmp/zero.source 
>> :
>> 220 10.10.29.20 GridFTP Server 12.8 (gcc64, 1531931206-85) [Globus Toolkit 
>> 6.0] ready.
>> 
>> debug: authenticating with gsiftp://gftp.host.xxx.edu/tmp/zero.source 
>> 
>> debug: fault on connection to gsiftp://gftp.host.xxx.edu/tmp/zero.source 
>> : globus_ftp_control: 
>> gss_init_sec_context failed
>> debug: data callback, error globus_ftp_control: gss_init_sec_context failed, 
>> buffer 0x2aaab0ff3010, length 0, offset=0, eof=true
>> debug: operation complete
>> 
>> error: globus_ftp_control: gss_init_sec_context failed
>> OpenSSL Error: s3_clnt.c:1264: in library: SSL routines, function 
>> ssl3_get_server_certificate: certificate verify failed
>> globus_gsi_callback_module: Could not verify credential
>> globus_gsi_callback_module: Could not verify credential: unable to get 
>> issuer certificate
> 
> _
> Ian Foster
> Director, Data Science and Learning Division; Senior Scientist; Distinguished 
> Fellow, Argonne National Laboratory
> Arthur Holly Compton Distinguished Service Professor of Computer Science, 
> University of Chicago
> Fellow, Institute for Molecular Engineering
> Chief Troublemaker, Globus, www.globus.org  
> Check out our new book: Cloud Computing for Science and Engineering
> Online at https://cloud4scieng.org 
> Tel: +1 630 252 4619
> 
> 
> 
>

Re: [gt-user] GridFTP Troubleshooting

2018-08-28 Thread Amit Kumar 
Dear Ian,

No worries I got past the certificate issue had to get it reissued.

I am at different error past mapping the user as below. Userid gets mapped
according to grid-mapfile but still get this error.

debug: response from gsiftp://gftp.host.xxx.edu/tmp/zero.source:
530-Login incorrect. : globus_gss_assist: Error invoking callout
530-globus_callout_module: The callout returned an error
530-an unknown error occurred
530 End.

debug: fault on connection to gsiftp://gftp.host.xxx.edu/tmp/zero.source
debug: data callback, error globus_ftp_client: the server responded with an
error, buffer 0x2aaab0ff3010, length 0, offset=0, eof=true
debug: operation complete

error: globus_ftp_client: the server responded with an error
530 530-Login incorrect. : globus_gss_assist: Error invoking callout
530-globus_callout_module: The callout returned an error
530-an unknown error occurred
530 End.

thank you,
Amit


On Tue, Aug 28, 2018 at 2:47 PM Ian Foster  wrote:

> Dear Amit:
>
> Unfortunately I am not up to speed on the certificate issues. Things would
> be simpler if ATLAS used Globus -)
>
> Regards — Ian
>
> On Aug 28, 2018, at 11:25 AM, Amit Kumar 
> wrote:
>
> Hi Ian,
>
> Thank you for quick response. Yes we have Globus connect server setup
> along with an endpoint for our institution, and that works fine for us.
> This is a new setup that I am working on so that I can get out LHC
> collaborators to use GridFTP along for their ATLAS computing needs.
> This (Globus connect) installation of GridFTP is a slightly different and
> older works nicely for our DTN, but I need this new setup to use different
> authentication (LCMAPS VOMS) hence working on another instance.
>
> I think I pretty close to getting this setup if I can figure out
> certificate issues, seems basic to me but I lack a bit of understanding on
> this. Any insight here will be a great help.
>
> Thank you,
> Amit
>
> On Tue, Aug 28, 2018 at 11:18 AM Foster, Ian T.  wrote:
>
>> Dear Amit:
>>
>> Have you tried installing Globus Connect and using the Globus transfer
>> service? Easier, faster, more reliable, …
>>
>> See https://www.globus.org/data-transfer
>>
>> Regards — Ian
>>
>> On Aug 28, 2018, at 11:07 AM, Amit Kumar 
>> wrote:
>>
>> Dear GT,
>>
>> I have setup GridFTP and trying to use globus-url-copy to test it and
>> running it following errors, and wondering if you can help me here.
>>
>> I have a InCommon cert for the gridftp host, I also have
>> InCommonRSAServerCA cert in the path but I am not able to find what issue
>> certificate is it complaining about?
>>
>> Any help here is greatly appreciated.
>>
>> Thank you,
>> Amit
>>
>>
>> $ globus-url-copy -vb -dbg gsiftp://gftp.host.xxx.edu/tmp/zero.source
>> file:///tmp/zero.dest
>> Source: gsiftp://gftp.host.xxx.edu/tmp/
>> Dest:   file:///tmp/
>>   zero.source  ->  zero.dest
>> debug: starting to get gsiftp://gftp.host.xxx.edu/tmp/zero.source
>> debug: connecting to gsiftp://gftp.host.xxx.edu/tmp/zero.source
>>
>> debug: response from gsiftp://gftp.host.xxx.edu/tmp/zero.source:
>> 220 10.10.29.20 GridFTP Server 12.8 (gcc64, 1531931206-85) [Globus
>> Toolkit 6.0] ready.
>>
>> debug: authenticating with gsiftp://gftp.host.xxx.edu/tmp/zero.source
>> debug: fault on connection to gsiftp://gftp.host.xxx.edu/tmp/zero.source:
>> globus_ftp_control: gss_init_sec_context failed
>> debug: data callback, error globus_ftp_control: gss_init_sec_context
>> failed, buffer 0x2aaab0ff3010, length 0, offset=0, eof=true
>> debug: operation complete
>>
>> error: globus_ftp_control: gss_init_sec_context failed
>> OpenSSL Error: s3_clnt.c:1264: in library: SSL routines, function
>> ssl3_get_server_certificate: certificate verify failed
>> globus_gsi_callback_module: Could not verify credential
>> globus_gsi_callback_module: Could not verify credential: unable to get
>> issuer certificate
>>
>>
>> _
>> Ian Foster
>> Director, Data Science and Learning Division; Senior Scientist;
>> Distinguished Fellow, Argonne National Laboratory
>> Arthur Holly Compton Distinguished Service Professor of Computer Science,
>> University of Chicago
>> Fellow, Institute for Molecular Engineering
>> Chief Troublemaker, Globus, www.globus.org
>> Check out our new book: *Cloud Computing for Science and Engineering*
>> Online at https://cloud4scieng.org
>> Tel: +1 630 252 4619
>>
>>
>>
>>
>>
>