[gt-user] Problem in installing GRAM4 !!
Hello, I had installed the globus toolkit 4.2.0 successfully on my system. Also, security configuration was successful. But, as given in the globus toolkit's tutorial, when i tried to install GRAM on my system it gave me error regarding PBS (PBS command not found). For that problem, I installed PBS, but still the same problem persists. And now, the problem has come that when I run command 'grid-cert-info' the error is coming 'command not found'. Can anyone please help me out with this problem. Thanks Regards, Manisha Lakra
Re: [gt-user] Problem in installing GRAM4 !!
Manisha Lakra wrote: Hello, I had installed the globus toolkit 4.2.0 successfully on my system. Also, security configuration was successful. But, as given in the globus toolkit's tutorial, when i tried to install GRAM on my system it gave me error regarding PBS (PBS command not found). For that problem, I installed PBS, but still the same problem persists. And now, the problem has come that when I run command 'grid-cert-info' the error is coming 'command not found'. Can anyone please help me out with this problem. Check that the path of the user that is trying to install the GRAM-PBS adapter contains pbs* commands. Moreover, PBS_HOME should point to the directory /var/spool/torque or similar. Like above, check that your $PATH variable also contains globus toolkit commands (e.g. /opt/gt4/bin:/opt/gt4/sbin). You can do it by inserting some lines on the .bash_profile or globally by modifying file /etc/profile. Regards, Fabrizio. Thanks Regards, Manisha Lakra -- mailto:mess...@dmi.unict.it Fabrizio Messina Tel: +39 095 7383000 (direct) Dipartimento di Matematica e Informatica Mobile: +39 345.70.991.70 Universita' di Catania Fax: +39 095 330094 Viale A. Doria 6, 95125 Catania, Italy PGP Key Available @ 0xF5BDE774 smime.p7s Description: S/MIME Cryptographic Signature
Re: [gt-user] Mutual authentication failed while using RFT in GT4
Thank you, John!
But when I've tried to execute ./rft -z
/O=Grid/OU=GlobusTest/OU=simpleCA-test2.igroup/CN=host/test2.igroup -f
/home/ssedai/GlobusToolkit/share/globus_wsrf_rft_test/transfer.xfr command
and I've
got this error:
ERROR providers.AbstractEngine [ServiceThread-3,initializeInterceptors:245]
[JWSSEC-165] Error loading interceptor: Interceptor: selfAuthz:self
java.lang.ClassNotFoundException: self
at java.net.URLClassLoader$1.run(URLClassLoader.java:200)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:188)
at java.lang.ClassLoader.loadClass(ClassLoader.java:307)
at java.lang.ClassLoader.loadClass(ClassLoader.java:252)
at java.lang.ClassLoader.loadClassInternal(ClassLoader.java:320)
at java.lang.Class.forName0(Native Method)
at java.lang.Class.forName(Class.java:247)
at
org.globus.security.authorization.providers.AbstractEngine.loadClass(AbstractEngine.java:299)
at
org.globus.security.authorization.providers.AbstractEngine.initializeInterceptors(AbstractEngine.java:233)
at
org.globus.security.authorization.providers.AbstractEngine.initializeInterceptors(AbstractEngine.java:182)
at
org.globus.security.authorization.providers.AbstractEngine.engineInitialize(AbstractEngine.java:110)
at
org.globus.security.authorization.providers.PermitOverrideAlg.engineInitialize(PermitOverrideAlg.java:56)
at
org.globus.wsrf.impl.security.authorization.AuthorizationEngine.initialize(AuthorizationEngine.java:111)
at
org.globus.wsrf.impl.security.util.AuthzUtil.getAuthzEngine(AuthzUtil.java:146)
at
org.globus.wsrf.impl.security.util.AuthzUtil.getAuthzEngine(AuthzUtil.java:130)
at
org.globus.wsrf.impl.security.authorization.AuthorizationHandler.getDefaultAuthzEngine(AuthorizationHandler.java:327)
at
org.globus.wsrf.impl.security.authorization.AuthorizationHandler.invoke(AuthorizationHandler.java:226)
at
org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32)
at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118)
at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)
at org.apache.axis.server.AxisServer.invokeService(AxisServer.java:199)
at org.apache.axis.server.AxisServer.invoke(AxisServer.java:375)
at org.globus.wsrf.container.ServiceThread.doPost(ServiceThread.java:949)
at org.globus.wsrf.container.ServiceThread.process(ServiceThread.java:684)
at
org.globus.wsrf.container.GSIServiceThread.process(GSIServiceThread.java:182)
at org.globus.wsrf.container.ServiceThread.run(ServiceThread.java:471)
2009-05-20 14:36:19,235 ERROR authorization.AuthorizationHandler
[ServiceThread-3,invoke:232] guid=0d3406f0-452a-11de-9fbc-d88add76d387
event=org.globus.authz.end status=-1 msg=[JWSSEC-116] Authorization failed.
reason= [Caused by: [JWSSEC-165] Error loading interceptor: Interceptor:
selfAuthz:self]
DN=/O=Grid/OU=GlobusTest/OU=simpleCA-test2.igroup/CN=host/test2.igroup
service=NotificationConsumerService operation={
http://wsrf.globus.org/core/notification}notify
At this time parallely Globus container returns such text blocks:
Authentication with credential only failed on server localhost. Caused by
Authentication failed. Caused by GSSException: Operation unauthorized
(Mechanism level: [JGLOBUS-56] Authorization failed. Expected
/CN=host/localhost target but received
/O=Grid/OU=GlobusTest/OU=simpleCA-test2.igroup/OU=igroup/CN=Smolov Sergey)
at
org.globus.gsi.gssapi.GlobusGSSContextImpl.initSecContext(GlobusGSSContextImpl.java:520)
at
org.globus.ftp.extended.GridFTPControlChannel.authenticate(GridFTPControlChannel.java:209)
at org.globus.ftp.GridFTPClient.authenticate(GridFTPClient.java:107)
at org.globus.ftp.GridFTPClient.authenticate(GridFTPClient.java:92)
at
org.globus.transfer.reliable.service.cache.SingleConnectionImpl.init(SingleConnectionImpl.java:101)
at
org.globus.transfer.reliable.service.cache.ThirdPartyConnectionImpl.init(ThirdPartyConnectionImpl.java:49)
at
org.globus.transfer.reliable.service.cache.ConnectionManager.createNewConnection(ConnectionManager.java:340)
at
org.globus.transfer.reliable.service.cache.ConnectionManager.getConnection(ConnectionManager.java:191)
at
org.globus.transfer.reliable.service.client.ThirdPartyTransferClient.init(ThirdPartyTransferClient.java:67)
at
org.globus.transfer.reliable.service.client.ClientFactory.createThirdPartyTransferClient(ClientFactory.java:177)
at
org.globus.transfer.reliable.service.TransferWork.run(TransferWork.java:355)
at EDU.oswego.cs.dl.util.concurrent.PooledExecutor$Worker.run(Unknown
Source)
at java.lang.Thread.run(Thread.java:619)
2009-05-20T14:36:17.675+04:00 ERROR service.TransferWork
[Thread-28,oldLog:175] Transient transfer error
Authentication with credential only failed on server localhost [Caused by:
Authentication failed [Caused by: Operation unauthorized (Mechanism level:
[JGLOBUS-56] Authorization failed. Expected /CN=host/localhost target but
received /O=Grid/OU=GlobusTest/OU=simpleCA-test2.igroup/OU=igroup/CN=Smolov
Sergey)]]
I also have
Re: [gt-user] Is there something as fsssh available for Globus
I don't know about fsssh but if it works with ssh, it should work with gsissh. Alexander Beck-Ratzka wrote: Hi Folks, fsssh allowsx to mount a remote file system directory to a local directory. All what is needed for this is an ssh access to the remote machine. I would like to know, whether a simliar tool existst for Globus so that it is possible to mount a remote filesystem on a host which can only connected via a globus grid connection? Cheers Alexander smime.p7s Description: S/MIME Cryptographic Signature
[gt-user] SimpleCA in GT4
Hello, List! I have some doubts about the correctness of SimpleCA work. As it is described in Installing SimpleCA guide ( http://globus.org/toolkit/docs/latest-stable/admin/install/#gtadmin-simpleca) there must be net two steps: 1) Run the script $GLOBUS_LOCATION/setup/globus/setup-simple-ca as globus user and 2) Run two scripts as root user: $GLOBUS_LOCATION/setup/globus_simple_ca_CA_Hash_setup/setup-gsi -default grid-cert-request -host 'hostname' I have one problem with the last command. Is it means that 'hostname' is Fully-Qualified Domain Name? The thing is, that I have two different unique subject name for CA - while I run first script and when I see the output of the last script. For example, when I run first, I've entered this string: /O=Grid/OU/CN=host/test2.igroup and when I run the third script I see: A private host key and a certificate request has been generated with the subject: /O=Grid/OU/CN/CN=host/test2.igroup Is it a correct behavior of SimpleCA? Perhaps, my troubles with RFT usage are connected with this effect (I get errors likeExpected /CN=host/localhost target but received /O=Grid/OU/OU=igroup/CN=host/test2.iGroup and so on) Thanks in advance -- Sergey Smolov
Re: [gt-user] Is there something as fsssh available for Globus
There's also Parrot: http://www.cse.nd.edu/~ccl/software/parrot On Wed, 20 May 2009, John Bresnahan wrote: you can check out grifi: http://grifi.sourceforge.net/ Alexander Beck-Ratzka wrote: Hi Folks, fsssh allowsx to mount a remote file system directory to a local directory. All what is needed for this is an ssh access to the remote machine. I would like to know, whether a simliar tool existst for Globus so that it is possible to mount a remote filesystem on a host which can only connected via a globus grid connection? Cheers Alexander -- Justin M Wozniak
Re: [gt-user] Is there something as fsssh available for Globus
you can check out grifi: http://grifi.sourceforge.net/ Alexander Beck-Ratzka wrote: Hi Folks, fsssh allowsx to mount a remote file system directory to a local directory. All what is needed for this is an ssh access to the remote machine. I would like to know, whether a simliar tool existst for Globus so that it is possible to mount a remote filesystem on a host which can only connected via a globus grid connection? Cheers Alexander
Re: [gt-user] Is there something as fsssh available for Globus
fsssh allowsx to mount a remote file system directory to a local directory. All what is needed for this is an ssh access to the remote machine. I would like to know, whether a simliar tool existst for Globus so that it is possible to mount a remote filesystem on a host which can only connected via a globus grid connection? It is possible to configure GridSite (an apache module that runs with httpd) as a file server that will use X.509 certs to authenticate to the system and GACL (or a sub-set of XACML) for authorization (access control to files/directories). There is then a fuse client you can compile to do file system mounts through a system called SlashGrid. GACL, compared to every alternative I've seen, has the advantage that it is simple and self-explanatory. The challenge, in my experience, can be getting the various parts to compile, although it is all heavily used within EGEE (which means it is is designed to compile as part of the gLite monolithic OS+software stack), so the code is solid and maintained. http://www.gridsite.org http://www.gridsite.org/slashgrid/ Ian -- Ian Stokes-ReesW: http://sbgrid.org ijsto...@crystal.harvard.edu T: +1 617 432-5608 x75 SBGrid, Harvard Medical School F: +1 617 432-5600 begin:vcard fn:Ian Stokes-Rees n:Stokes-Rees;Ian org:Harvard Medical School;SBGrid adr;dom:;;250 Longwood Ave;Boston;MA;02115 email;internet:ijsto...@crystal.harvard.edu title:Research Associate tel;work:+1 617 432-5608 x75 tel;fax:+1 617 432-5600 tel;cell:+1 617 331-5993 url:http://www.sbgrid.org version:2.1 end:vcard
[gt-user] GRAM4 installation's effect on GT installation ????
Hello, Is it so, that after installing the full globus toolkit, if we try to install the GRAM4 as a separate component, it effects the previously installed GT?? or could anyone tell me that after installing the full toolkit, do I still need to install GRAM4 separately? Thanks Regards, Manisha Lakra.
