Re: [gt-user] OpenSSL CA verification problem

2012-09-18 Thread Nikolay Kutovskiy

Asher Spain wrote on 18/09/12 14:49:

Dear friends,

I'm getting an error verifying the trust in CA due to OpenSSL.
I have created using SimpleCA a CA and install its files in my clients without 
any problems.
However, one of my clients can't verify the CA hash because it is taking the CA 
hash as if it was
using the old OpenSSL version which used other hash type. I mean,
My CA has the following hash (which is created with OpenSSL 1.0.0e): c03c42ac
However, after installing it in the client (Ubuntu 11.10) and try to use 
"grid-proxy-init -debug
-verify" it can't verify it as it says it can't find trust in the CA with hash 
a784f43d.

I checked that the hash is asking me for is the same hash but calculated with 
the old OpenSSL
version of my CA:
openssl x509 -hash -noout < /etc/grid-security/certificates/c03c42ac.0
-> c03c42ac
openssl x509 -subject_hash_old -noout < 
/etc/grid-security/certificates/c03c42ac.0
-> a784f43d

I don't know how to solve this. I found a tool that converts old hash files 
into new hash files
(http://www.cilogon.org/openssl1) but mines are already the new ones so it 
makes no change and the
error remains. I have tried to uninstall libssl0.9.8 but it uninstalls 
grid-proxy-utils as well and
if reinstall the package it installs libssl0.9.8.
What can I do to avoid this problem?
AFAIK, one of the possible workaround is to create symlinks for old hashes to new ones or 
vice-versa. E.g.

$ ln -s /etc/grid-security/c03c42ac.0 /etc/grid-security/a784f43d.0

and repeat these steps for all CA credentials files like *.crl_url, *.r0, etc).

Hope it helps,
Nikolay.


Thanks in advance!

Asier


[gt-user] run gridftp as normal user with some specific configuration

2011-09-29 Thread Nikolay Kutovskiy

Dear community,

I need to deploy gridftp server (Scientific Linux 5.7, x86_64, GT 5.0.4) 
with the following properties.

1) it needs to be run under regular (non-root) user;
2) it has to provide a read-only access and only for certain dir but for 
all users without authorization check;

3) gridftp server has to start  after reboot automatically.

If I do as below:
$ tail -1 /etc/services
gsiftp  2811/tcp

$ cat /etc/xinetd.d/gridftp
service gsiftp
{
instances   = 100
socket_type = stream
wait= no
user= gridftp
env += GLOBUS_LOCATION=/opt/globus
env += LD_LIBRARY_PATH=/opt/globus/lib
env += GLOBUS_TCP_PORT_RANGE=2,25000
server  = /opt/globus/sbin/globus-gridftp-server
server_args = -c /opt/globus/etc/gridftp.conf
log_on_success  += DURATION
disable = no
}

$ cat /opt/globus/etc/gridftp.conf
port 2811
log_level info,warn,error
log_single /home/gridftp/gridftp.log
auth_level 0
disable_command_list STOR,ESTO,DELE,RDEL,RNTO


hostcert.pem, hostkey.pem and certificates dir I put into .globus subdir 
of gridftp's user home dir.


Then
[root]$ /etc/init.d/xinetd start

$ netstat -tunlp|grep 2811
tcp0  0 0.0.0.0:28110.0.0.0:* 
LISTEN  24268/xinetd


After that from another host as regular user (tried with with valid 
proxy (tried bot not sure if it's needed since auth_level 0)


$ uberftp -d 
an end-of-file was reachedan end-of-file was reached
globus_xio: An end of file occurred
Closing connection to service.

gridftp.log shows:
[24275] Thu Sep 29 20:55:22 2011 :: GFork functionality not enabled: 
globus_gfork_child_worker_start() failed:

globus_gfork: GFork error: Env not set

[24275] Thu Sep 29 20:55:22 2011 :: Configuration read from 
/opt/globus/etc/gridftp.conf.

[24275] Thu Sep 29 20:55:22 2011 :: Could not start server:
globus_xio: globus_l_xio_tcp_create_listener failed.
globus_xio: globus_l_xio_tcp_bind failed.
globus_xio: System error in bind: Address already in use
globus_xio: A system call failed: Address already in use

If I remove the 'port 2811' line from gridftp.conf file, restart xinetd 
and try connect again then uberftp hangs, nothing in the gridftp log.

Telnet gives
Trying ...
Connected to .
Escape character is '^]'.
Server listening at :24384

and hangs (ctrl+c doesn't work).

gridftp.log has
[24310] Thu Sep 29 21:12:29 2011 :: GFork functionality not enabled: 
globus_gfork_child_worker_start() failed:

globus_gfork: GFork error: Env not set

[24310] Thu Sep 29 21:12:29 2011 :: Configuration read from 
/opt/globus/etc/gridftp.conf.

[24310] Thu Sep 29 21:12:29 2011 :: Server started in daemon mode.
and that's it.

Any help on that, please?

Regards,
Nikolay.


Re: [gt-user] Defective credential detected [Caused by: Proxy file (/tmp/x509up_u501) not found.]

2011-04-24 Thread Nikolay Kutovskiy

arindam choudhury wrote on 24/04/11 22:57:

Hi,

I am installing globus toolkit 4.0.8 on Fedora 9. I followed the steps
given in
http://www.globus.org/toolkit/docs/4.0/admin/docbook/quickstart.html

I am getting an error:

[globus@nodea ~]$ globus-stop-container
Error: ; nested exception is:
GSSException: Defective credential detected [Caused by: Proxy file
(/tmp/x509up_u501) not found.]
It looks like globus container was run by user with uid 501 but you are 
trying to stop globus container under user with uid 502 (see a value for 
path field in the output of grid-proxy-info below). So one needs to 
become user with uid 501, generate a valid proxy-certificate and stop 
container.


HTH,
Nikolay.


[quser@nodea example]$ grid-proxy-info
subject :
/O=Grid/OU=GlobusTest/OU=simpleCA-nodea.globus.es/OU=globus.es/CN=quser/CN=398098423
issuer :
/O=Grid/OU=GlobusTest/OU=simpleCA-nodea.globus.es/OU=globus.es/CN=quser
identity :
/O=Grid/OU=GlobusTest/OU=simpleCA-nodea.globus.es/OU=globus.es/CN=quser
type : Proxy draft (pre-RFC) compliant impersonation proxy
strength : 512 bits
path : /tmp/x509up_u502
timeleft : 11:18:56

Please help.

-Arindam


Re: [gt-user] globus-gridftp-server is not running

2010-05-19 Thread Nikolay Kutovskiy
try to do the following:
$ export PATH=$PATH:$GLOBUS_LOCATION/sbin
$ export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:$GLOBUS_LOCATION/lib

hope that will help,
Nikolay.

Deepti Malhotra wrote on 19/05/10 11:47:
> Hi all
>My globus-gridftp-server is not running
> 
> dee...@webserver sbin]$ globus-gridftp-server
> -bash: globus-gridftp-server: command not found
> 
> 
> Then i set a path by using the below command  even then the
> globus-gridftp-server is not running
> 
> [dee...@webserver ~]$ vi .bashrc
> 
> export
> LD_LIBRARY_PATH=$GLOBUS_LOCATION/lib\$GLOBUS_LOCATION/sbin/globus-gridftp-server
> 
> [dee...@webserver ~]$ source .bashrc
> [dee...@webserver ~]$ globus-gridftp-server -i
> 
> -bash: globus-gridftp-server: command not found
> 
> Can anybody tell me how to solve this problem or how to configure
> gridftp server
> 
> 
> 


Re: [gt-user] error in installing 5.0.1

2010-04-29 Thread Nikolay Kutovskiy
Deepti Malhotra wrote on 29/04/10 10:14:
> "/usr/local/globus-5.0.1/etc/globus_packages/globus_simple_ca_3f1d6fab_setup"
> mkdir: cannot create directory
> `/usr/local/globus-5.0.1/etc/globus_packages/globus_simple_ca_3f1d6fab_setup':
> Permission denied
Please, make sure that you performed all corresponding steps during GT
installation mentioned at
http://globus.org/toolkit/docs/latest-stable/admin/install/#gtadmin-install
In particular,
"Create a user named globus. This non-privileged user will be used to
perform administrative tasks, deploying services, etc. Pick an
installation directory, and make sure this account has read and write
permissions in the installation directory.
[Tip]   Tip

You might need to create the target directory as root, then chown it to
the globus user:

# mkdir /usr/local/globus-5.0.1
# chown globus:globus /usr/local/globus-5.0.1

[Important] Important

If for some reason you do not create a user named "globus", be sure to
run the installation as a non-root user. In that case, make sure to pick
an install directory that your user account has write access to. "

i.e. it looks like you need to execute the following command:
[root]$ chown -R globus:globus /usr/local/globus-5.0.1

Hope that helps,
Nikolay


Re: [gt-user] Run job on specified number of nodes and number of processors per node

2010-03-22 Thread Nikolay Kutovskiy
Hi Alexey,

> I want to start such program, as it corresponds the next TORQUE job script
> 
> #PBS -l nodes=4:ppn=8
> cd $PBS_O_WORKDIR
> 
> mpiexec ./pi_mpi
did you manage to run your job in that way? if you did then could you,
please, share your experience?
I am also interested in running MPI jobs on GT5.

Thanks!
Nikolay.


Re: [gt-user] Error while installing GT 4.0.8

2010-03-20 Thread Nikolay Kutovskiy
I guess you need to install perl-XML-Parser package.

Nikolay.
Ankuj Gupta wrote on 20/03/10 14:52:
> Hi !!
> While installing GT 4.0.8 I issued the
> *make install *
>  command but
> I received the following error
> 
> *ERROR: Required perl module XML::Parser not found*
> 
> I can not guess what is missing even though the make command finished
> without any error.
> 
> Ankuj Gupta
> 


Re: [gt-user] Simple CA certificate creation problem

2010-03-07 Thread Nikolay Kutovskiy
Hi,

Ankuj Gupta wrote on 06/03/10 19:54:
> Hi all!!
> I was installing the Simple CA certificate. After installing GSI i
> tried the Host certificate part . When I gave the command
> 
> grid-cert-request -host 'hostname'
> 
> I got the following error
> bash: grid-cert-request-host: command not found
probably you missed space before '-host' option.
the correct invocation should be
$ grid-cert-request -host 

> Also what should be  the hostname here. I have globus user which will
> be used as host  and a client user on same machine which will be using
> the GT services
as value for the '-host' option in grid-cert-request command you have to
specify the hostname of the machine where GT services will be run

Hope that helps
Nikolay

> 
> Ankuj Gupta


Re: [gt-user] globus-job-status: UNKNOWN JOB STATE 0

2010-01-25 Thread Nikolay Kutovskiy
Thanks. Joseph! That helped!

Nikolay.

Joseph Bester wrote on 25/01/10 20:54:
> On Jan 23, 2010, at 4:53 PM, Stuart Martin wrote:
>> Joe,
>>
>> Can you help debug what might be wrong when Nikolay starts the seg:
>>
>>> [root]$ globus-job-manager-event-generator -scheduler pbs -background
>>> -pidfile $GLOBUS_LOCATION/var/globus-job-manager-seg-pbs.pid
>>> Error: pbs not configured
>>
>> -Stu
> 
> Run gpt-postinstall -force to get the setup package to be rerun so that
> it will know about the PBS setup. There is currently an unexpressed
> order dependency between the PBS SEG and job manager SEG setup packages,
> so depending on install order they may get run in the wrong order.
> 
> Joe
> 


Re: [gt-user] prews-test

2010-01-25 Thread Nikolay Kutovskiy
Stuart and Joseph, thanks for information! It was very useful for me as
well as tests themselves!

Nikolay.

Joseph Bester wrote on 25/01/10 17:13:
> 
> On Jan 22, 2010, at 6:34 PM, Stuart Martin wrote:
> 
>> There is doc and examples here:
>> 
>> http://www.globus.org/toolkit/docs/5.0/5.0.0/execution/gram5/admin/#gram5-admin-testing
>>
>>
>> -Stu
>>
>> On Jan 22, 2010, at Jan 22, 12:12 PM, Nikolay Kutovskiy wrote:
>>
>>> It is written in documentation
>>> (http://www.globus.org/toolkit/docs/5.0/5.0.0/admin/install/#gtadmin-packaging)
>>>
>>> there is the target 'prews-test' which is "Tests for pre-webservices
>>> components".
>>> I wonder how those tests can be run?
>>>
>>> Nikolay.
>>
> 
> To test the non-GRAM5 parts as well, you can do the following
> 
> cd $GLOBUS_LOCATION/test/globus_test
> ./test-toolkit
> 
> Joe
> 


Re: [gt-user] globus-job-status: UNKNOWN JOB STATE 0

2010-01-22 Thread Nikolay Kutovskiy
>>> Strange.  Yea - looks like a bug.  Is that repeatable / happens for every 
>>> PBS job?
>> I haven't tested hard yet but at least I saw such status twice (for
>> different jobs).
>>
>>> Are you using the SEG for PBS job monitoring?
>> not yet. It wasn't clear for me how to configure SEG. It's written:
>> It must be explicitly enabled by adding the -seg-module LRM option to
>> the job manager configuration.
>> But in what configuration file does it need to specify "-seg-module"
>> option? in $GLOBUS_LOCATION/etc/globus-pbs.conf?
> 
> Doc is here: 
> http://www.globus.org/toolkit/docs/5.0/5.0.0/execution/gram5/admin/#gram5-Interface_Config_Frag-seg_module
Sorry, I wasn't reading careful enough. It's clear now how to configure
SEG from URL above.
So now I have
$ ll /usr/local/globus-5.0.0/etc/grid-services/jobmanager
lrwxrwxrwx  1 globus globus 56 Jan 22 14:58
/usr/local/globus-5.0.0/etc/grid-services/jobmanager ->
/usr/local/globus-5.0.0/etc/grid-services/jobmanager-pbs

$ cat /usr/local/globus-5.0.0/etc/grid-services/jobmanager-pbs
stderr_log,local_cred -
/usr/local/globus-5.0.0/libexec/globus-job-manager globus-job-manager
-conf /usr/local/globus-5.0.0/etc/globus-job-manager.conf -type pbs
-seg-module pbs

$ cat /usr/local/globus-5.0.0/etc/globus-pbs.conf
log_path=/var/spool/torque/server_logs

$ cat /usr/local/globus-5.0.0/etc/globus-job-manager.conf
-home "/usr/local/globus-5.0.0"
-globus-gatekeeper-host vps115.jinr.ru
-globus-gatekeeper-port 2119
-globus-gatekeeper-subject "/C=RU/O=JINR/OU=LIT/CN=vps115.jinr.ru"
-globus-host-cputype i686
-globus-host-manufacturer pc
-globus-host-osname Linux
-globus-host-osversion 2.6.9-023stab046.2
-globus-toolkit-version 5.0.0
-stdio-log "$(HOME)"
-log-levels 'FATAL|ERROR'
-state-file-dir /usr/local/globus-5.0.0/tmp/gram_job_state

$ globus-job-manager-event-generator -scheduler pbs -background -pidfile
$GLOBUS_LOCATION/var/globus-job-manager-seg-pbs.pid
Error: pbs not configured

I've tried also to reload/restart xinetd since globus-gatekeeper is run
by xinetd.
More hints?

GRAM5 was compiled as
$ ./configure --prefix=$GLOBUS_LOCATION
$ make

But $GLOBUS_LOCATION/etc/globus-pbs.conf could be found that's why I run
$ make gram5-pbs install.

More hints?
Nikolay.
> 
> No - it goes in $GLOBUS_LOCATION/etc/grid-services/jobmanager-pbs
> 
> Mine looks like this:
> % cat jobmanager-pbs
> stderr_log,local_cred - 
> /home/smartin/gt/5.0.0/INSTALL/libexec/globus-job-manager globus-job-manager 
> -conf /home/smartin/gt/5.0.0/INSTALL/etc/globus-job-manager.conf -type pbs 
> -seg-module pbs
> 
>> How? Just add
>> '-seg-module' to new line? e.g.
>> log_path=/var/spool/torque/server_logs
>> -seg-module
>> $ cat /usr/local/globus-5.0.0/etc/globus-pbs.conf
>> log_path=/var/spool/torque/server_logs
>> -seg-module
>>
>> [root]$ globus-job-manager-event-generator -scheduler pbs -background
>> -pidfile $GLOBUS_LOCATION/var/globus-job-manager-seg-pbs.pid
>> Error: pbs not configured
> 
> Maybe that is a result of you adding the extra -seg-module line to the 
> globus-pbs.conf file ??
> 
>> So what exact steps needs to be performed to run SEG?
>>
>> Nikolay.
>>
>>> If not, try using the SEG and see what happens.
>>> 
>>> http://www.globus.org/toolkit/docs/5.0/5.0.0/execution/gram5/admin/#gram5-Interface_Config_Frag-seg_module
>>> 
>>> http://www.globus.org/toolkit/docs/5.0/5.0.0/execution/gram5/admin/#id2545819
>>>
>>> -Stu
>>>
>>> On Jan 22, 2010, at Jan 22, 7:43 AM, Nikolay Kutovskiy wrote:
>>>
>>>> Hello list,
>>>>
>>>> I have installed GRAM5 to use PBS and get the following output of
>>>> globus-job-status command:
>>>> $ globus-job-submit :2119/jobmanager-pbs /bin/hostname
>>>> https://:51499/16073727533535086921/7782764993921513916/
>>>>
>>>> [user]$ globus-job-status
>>>> https://:51499/16073727533535086921/7782764993921513916/
>>>> UNKNOWN JOB STATE 0
>>>>
>>>> [user]$ globus-job-status
>>>> https://:51499/16073727533535086921/7782764993921513916/
>>>> UNKNOWN JOB STATE 0
>>>>
>>>> [user]$ globus-job-status
>>>> https://:51499/16073727533535086921/7782764993921513916/
>>>> UNKNOWN JOB STATE 0
>>>> [user]$ globus-job-status
>>>> https://:51499/16073727533535086921/7782764993921513916/
>>>> DONE
>>>>
>>>> Is that a bug? some GRAM5|PBS misconfiguration?
>>>>
>>>> Commands like globus-job-run work fine.
>>>> Environment:
>>>> gt5.0.0-all-source-installer.tar.bz2
>>>> torque-2.3.7-1cri
>>>> torque-docs-2.3.7-1cri
>>>> torque-server-2.3.7-1cri
>>>> torque-client-2.3.7-1cri
>>>> torque-scheduler-2.3.7-1cri
>>>>
>>>> Thanks in advance,
>>>> Nikolay
> 


[gt-user] prews-test

2010-01-22 Thread Nikolay Kutovskiy
It is written in documentation
(http://www.globus.org/toolkit/docs/5.0/5.0.0/admin/install/#gtadmin-packaging)
there is the target 'prews-test' which is "Tests for pre-webservices
components".
I wonder how those tests can be run?

Nikolay.


Re: [gt-user] globus-job-status: UNKNOWN JOB STATE 0

2010-01-22 Thread Nikolay Kutovskiy
Hi Stuart

Stuart Martin wrote on 22/01/10 19:04:
> Hi Nikolay,
> 
> Strange.  Yea - looks like a bug.  Is that repeatable / happens for every PBS 
> job?
I haven't tested hard yet but at least I saw such status twice (for
different jobs).

> 
> Are you using the SEG for PBS job monitoring?
not yet. It wasn't clear for me how to configure SEG. It's written:
It must be explicitly enabled by adding the -seg-module LRM option to
the job manager configuration.
But in what configuration file does it need to specify "-seg-module"
option? in $GLOBUS_LOCATION/etc/globus-pbs.conf? How? Just add
'-seg-module' to new line? e.g.
log_path=/var/spool/torque/server_logs
-seg-module
$ cat /usr/local/globus-5.0.0/etc/globus-pbs.conf
log_path=/var/spool/torque/server_logs
-seg-module

[root]$ globus-job-manager-event-generator -scheduler pbs -background
-pidfile $GLOBUS_LOCATION/var/globus-job-manager-seg-pbs.pid
Error: pbs not configured

So what exact steps needs to be performed to run SEG?

Nikolay.

>  If not, try using the SEG and see what happens.
>   
> http://www.globus.org/toolkit/docs/5.0/5.0.0/execution/gram5/admin/#gram5-Interface_Config_Frag-seg_module
>   
> http://www.globus.org/toolkit/docs/5.0/5.0.0/execution/gram5/admin/#id2545819
> 
> -Stu
> 
> On Jan 22, 2010, at Jan 22, 7:43 AM, Nikolay Kutovskiy wrote:
> 
>> Hello list,
>>
>> I have installed GRAM5 to use PBS and get the following output of
>> globus-job-status command:
>> $ globus-job-submit :2119/jobmanager-pbs /bin/hostname
>> https://:51499/16073727533535086921/7782764993921513916/
>>
>> [user]$ globus-job-status
>> https://:51499/16073727533535086921/7782764993921513916/
>> UNKNOWN JOB STATE 0
>>
>> [user]$ globus-job-status
>> https://:51499/16073727533535086921/7782764993921513916/
>> UNKNOWN JOB STATE 0
>>
>> [user]$ globus-job-status
>> https://:51499/16073727533535086921/7782764993921513916/
>> UNKNOWN JOB STATE 0
>> [user]$ globus-job-status
>> https://:51499/16073727533535086921/7782764993921513916/
>> DONE
>>
>> Is that a bug? some GRAM5|PBS misconfiguration?
>>
>> Commands like globus-job-run work fine.
>> Environment:
>> gt5.0.0-all-source-installer.tar.bz2
>> torque-2.3.7-1cri
>> torque-docs-2.3.7-1cri
>> torque-server-2.3.7-1cri
>> torque-client-2.3.7-1cri
>> torque-scheduler-2.3.7-1cri
>>
>> Thanks in advance,
>> Nikolay
> 


[gt-user] globus-job-status: UNKNOWN JOB STATE 0

2010-01-22 Thread Nikolay Kutovskiy
Hello list,

I have installed GRAM5 to use PBS and get the following output of
globus-job-status command:
$ globus-job-submit :2119/jobmanager-pbs /bin/hostname
https://:51499/16073727533535086921/7782764993921513916/

[user]$ globus-job-status
https://:51499/16073727533535086921/7782764993921513916/
UNKNOWN JOB STATE 0

[user]$ globus-job-status
https://:51499/16073727533535086921/7782764993921513916/
UNKNOWN JOB STATE 0

[user]$ globus-job-status
https://:51499/16073727533535086921/7782764993921513916/
UNKNOWN JOB STATE 0
[user]$ globus-job-status
https://:51499/16073727533535086921/7782764993921513916/
DONE

Is that a bug? some GRAM5|PBS misconfiguration?

Commands like globus-job-run work fine.
Environment:
gt5.0.0-all-source-installer.tar.bz2
torque-2.3.7-1cri
torque-docs-2.3.7-1cri
torque-server-2.3.7-1cri
torque-client-2.3.7-1cri
torque-scheduler-2.3.7-1cri

Thanks in advance,
Nikolay


[gt-user] GT5.0.0 gcc32dbgpthr problem

2010-01-22 Thread Nikolay Kutovskiy
Hello,

I am trying to build GT5.0.0 from source (since binaries are not
available for now).
I get the following error:
[globus]$ ./configure --prefix=$GLOBUS_LOCATION --with-buildopts="-verbose"
[globus]$ make | tee installer.log
[...snip...]
 start -
checking whether we are using the GNU C++ compiler... no

checking whether /usr/bin/gcc accepts -g... no

checking dependency style of /usr/bin/gcc... none

checking how to run the C++ preprocessor... /usr/bin/gcc -E

configure: error: C++ preprocessor "/usr/bin/gcc -E" fails sanity check

See `config.log' for more details.


gpt-build > ...SKIPPING gcc32dbgpthr

gpt-build > Changing to /home/globus/gt5.0.0-all-source-installer/BUILD
WARNING: The following flavors are not supported for this platform:
gcc32dbgpthr

gpt-build > CHECKING BUILD DEPENDENCIES FOR globus_libtool
ERROR: At least one flavor needs to be defined for package globus_libtool
make: *** [globus_libtool-thr-compile] Error 2
 end -

./configure --prefix=$GLOBUS_LOCATION --with-buildopts="-verbose"
doesn't help either.

installer.log is available at
http://wwwinfo.jinr.ru/~kut/gt/GT5_installer.log.

Problem was solved by installing gcc-c++ rpm package (what is not
mentioned at
http://globus.org/toolkit/docs/latest-stable/admin/install/#gtadmin-prereq-required)

Environment:
OS version is Scientific Linux 4.8

$ gcc -v
Reading specs from /usr/lib/gcc/i386-redhat-linux/3.4.6/specs
Configured with: ../configure --prefix=/usr --mandir=/usr/share/man
--infodir=/usr/share/info --enable-shared --enable-threads=posix
--disable-checking --with-system-zlib --enable-__cxa_atexit
--disable-libunwind-exceptions --enable-java-awt=gtk
--host=i386-redhat-linux
Thread model: posix
gcc version 3.4.6 20060404 (Red Hat 3.4.6-11)

$ make -v
GNU Make 3.80
Copyright (C) 2002  Free Software Foundation, Inc.
This is free software; see the source for copying conditions.
There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
PARTICULAR PURPOSE.




[gt-user] some questions about RFT

2010-01-18 Thread Nikolay Kutovskiy
I am trying to run RFT with PostgreSQL DB and following
http://www.globus.org/toolkit/docs/4.2/4.2.1/data/rft/admin/#rft-postgresql:
7. Open $GLOBUS_LOCATION/etc/globus_wsrf_rft/jndi-config.xml.

8. Find the dbConfiguration section under the
ReliableFileTransferService  section.

9. Change the connectionString to point to the machine on which you
installed PostgreSQL and to the name of the database you used in step 2.
If you installed PostgreSQL on the same machine as your Globus install,
the default should work fine for you.

Does "the default should work fine for you" mean that even if I use
PostgreSQL as DB backend for RFT there is no need to change driverName
to org.postgresql.Driver (i.e. one can leave it as
org.apache.derby.jdbc.EmbeddedDriver) and connectionString to
  jdbc:postgresql:///rftDatabase (i.e. the
default value jdbc:derby:GLOBUS_LOCATION/var/rftDatabase can be used) in
$GLOBUS_LOCATION/etc/globus_wsrf_rft/jndi-config.xml file?

I have the following settings:
[rft server]$ grep tcpip  /var/lib/pgsql/data/postgresql.conf
tcpip_socket = true

[rft server]$ grep ^host /var/lib/pgsql/data/pg_hba.conf
hostrftDatabase "globus"""
255.255.255.255 md5

$GLOBUS_LOCATION/etc/globus_wsrf_rft/jndi-config.xml:


driverName


org.postgresql.Driver




connectionString


jdbc:postgresql:///rftDatabase
[...snip...]

[glo...@rft server]$ /etc/init.d/globus-ws-java-container restart
Stopping Globus container. PID: 23701
Container stopped
Starting Globus container. PID: 23871

[u...@user inteface]$ cat transfer.xfr

true

16000

16000

false

1

true

1

null

null

false

10

gsiftp://:2811/etc/group


gsiftp://:2811/tmp/rftTest_Done.tmp

[u...@user inteface]$ rft -h  -f transfer.xfr


Status: Pending

Exception in thread "main" Error during startup processing. Caused by
AxisFault
 faultCode:
{http://schemas.xmlsoap.org/soap/envelope/}Server.userException

 faultSubcode:

 faultString: java.rmi.RemoteException: Error in start; nested exception
is:
java.lang.NullPointerException

 faultActor:

 faultNode:

 faultDetail:


{http://xml.apache.org/axis/}stackTrace:java.rmi.RemoteException: Error
in start; nested exception is:
java.lang.NullPointerException

at
org.globus.transfer.reliable.service.ReliableFileTransferImpl.start(ReliableFileTransferImpl.java:160)

at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)

at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)

at java.lang.reflect.Method.invoke(Method.java:585)

at
org.apache.axis.providers.java.RPCProvider.invokeMethod(RPCProvider.java:410)

at
org.globus.axis.providers.RPCProvider.invokeMethodSub(RPCProvider.java:112)

at
org.globus.axis.providers.PrivilegedInvokeMethodAction.run(PrivilegedInvokeMethodAction.java:47)

at java.security.AccessController.doPrivileged(Native Method)

at javax.security.auth.Subject.doAs(Subject.java:396)

at
org.globus.gsi.jaas.GlobusSubject.runAs(GlobusSubject.java:60)

at org.globus.gsi.jaas.JaasSubject.doAs(JaasSubject.java:100)

at
org.globus.axis.providers.RPCProvider.invokeMethod(RPCProvider.java:102)

at
org.apache.axis.providers.java.RPCProvider.processMessage(RPCProvider.java:186)

at
org.apache.axis.providers.java.JavaProvider.invoke(JavaProvider.java:332)

at
org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32)

at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118)

at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)

at
org.apache.axis.handlers.soap.SOAPService.invoke(SOAPService.java:454)

at
org.apache.axis.server.AxisServer.invokeService(AxisServer.java:234)

at org.apache.axis.server.AxisServer.invoke(AxisServer.java:375)

at
org.globus.wsrf.container.ServiceThread.doPost(ServiceThread.java:949)

at
org.globus.wsrf.container.ServiceThread.process(ServiceThread.java:684)

at
org.globus.wsrf.container.GSIServiceThread.process(GSIServiceThread.java:182)

at
org.globus.wsrf.container.ServiceThread.run(ServiceThread.java:471)

Caused by: java.lang.NullPointerException

at
org.globus.transfer.reliable.service.ReliableFileTransferImpl.start(ReliableFileTransferImpl.java:129)

... 24 more



java.rmi.RemoteException: Error in start; nested exception is:
java.lang.NullPointerException
at
org.apache.axis.message.SOAPFaultBuilder.createFault(SOAPFaultBuilder.java:223)
at
org.apache.axis.message.SOAPFaultBuilder.endElement(SOAPFaultBuilder.java:130)

at
org.apache.axis.encodi

Re: [gt-user] Need help/advice GridFTP and RFT setup

2010-01-18 Thread Nikolay Kutovskiy
Hi,

I am not very experienced with GT4. So maybe somebody else could help you.

Nikolay

Arn wrote:
> Hi,
> 
> Thanks for your prompt response.
> 
> The page you mention doesn't really talk much about GridFTP+RFT setup.
> Is it possible to have RFT on a separate machine from the GridFTP
> servers ?
> 
> Also, is MyProxy needed at all or can we do without it? We still need
> authentication but as I understand it MyProxy is a service for
> distributing certificates.
> 
> thanks
> Arn
> 
> On Sun, Jan 17, 2010 at 2:00 AM, Nikolay Kutovskiy
>  wrote:
>> Hi, Arn,
>>
>> Arn wrote on 17/01/10 12:42:
>>
>>> 5) Is there any example of GridFTP setups anywhere, i.e.
>>> documentations on such setups etc that I can refer to ?
>> Some  (all?) types of GridFTP servers configuration are written at
>> http://www.globus.org/toolkit/docs/4.2/4.2.1/data/gridftp/admin/#gridftp-admin-installing
>>
>> HTH,
>> Nikolay
>>
>>> Thanks in advance
>>> Arn


Re: [gt-user] Need help/advice GridFTP and RFT setup

2010-01-17 Thread Nikolay Kutovskiy
Hi, Arn,

Arn wrote on 17/01/10 12:42:

> 5) Is there any example of GridFTP setups anywhere, i.e.
> documentations on such setups etc that I can refer to ?
Some  (all?) types of GridFTP servers configuration are written at
http://www.globus.org/toolkit/docs/4.2/4.2.1/data/gridftp/admin/#gridftp-admin-installing

HTH,
Nikolay

> 
> Thanks in advance
> Arn


[gt-user] some questions about RFT

2010-01-16 Thread Nikolay Kutovskiy
Dear colleagues,

I am trying to setup RFT service.
OS is Scientific Linux 4.8,
gt4.2.1-x86_rhas_4-installer.tar.gz,
jdk-1.5.0_17-fcs,
apache-ant-1.7.1.

If GT4 is installing from binary package like below:
[globus]$ ./configure --prefix=$GLOBUS_LOCATION
[globus]$ make gridftp wsrft install

there wasn't file $GLOBUS_LOCATION/etc/init.d/globus-ws-java-container.
So as workaround it was copied from another GT4 installation as well as
the whole $GLOBUS_LOCATION/sbin dir since there were some files in that
dir used by $GLOBUS_LOCATION/etc/init.d/globus-ws-java-container.

Are targets 'gridftp', 'wsrft' and 'install'  not enough in command
'make gridftp wsrft install' to install gridftp and wsrft services?

With such GT4 installation the globus-ws-java-container fails to start
[glo...@server]$ /etc/init.d/globus-ws-java-container start
Starting Globus container. PID: 22191
WARNING: It seems like the container died directly
 Please see $GLOBUS_LOCATION/var/container.log for more information

The content of $GLOBUS_LOCATION/var/container.log can be found at
http://wwwinfo.jinr.ru/~kut/gt4/rft_start_container.log

If  GT4 is installed by performing
[globus]$ ./configure --prefix=$GLOBUS_LOCATION
[globus]$ make 2>&1 | tee build.log
[globus]$ make install

then $GLOBUS_LOCATION/etc/init.d/globus-ws-java-container file and some
from $GLOBUS_LOCATION/sbin dir what were missing before are in place and
container can start successfully.

The user with valid proxy from remote machine can successfully perform
3rd party's transfers between gridftp servers using rft tool:
[user]$ rft -h  -f transfer.xfr
Status: Pending
Status: Done

and the files mentioned in transfer.xfr file were in place after that
command execution.

But globus-crft tool fails:

[user]$ globus-crft -c -s -m -vb -f rft_test_transfers -e https://:8443/wsrf/services/ReliableFileTransferFactoryService
Communicating with delegation service.
globus_delegation_client_util:
DelegationFactoryPortType_GetResourceProperty callback failed.
globus_soap_message_module: SOAP Fault
Fault code: ns1:Server.NoService
Fault string: The AXIS engine could not find a target service to invoke!
 targetService is /DelegationFactoryService

DelegationFactoryService is deployed on RFT host (but wasn't configured):
[rfthost]$ grep DelegationFactoryService  $GLOBUS_LOCATION/var/container.log
[10]: https://:8443/wsrf/services/DelegationFactoryService


So my questions are the following:

1. In order to user RFT service via globus-crft tool is it mandatory to
setup properly and run Delegation services too?
2. What targets has to be specified for 'make' in order to install just
gridftp and wsrft on the same machine and to make run them properly?


Thanks in advance for your replies,
Nikolay.