[gt-user] crft in Globus Toolkit 4.2.1: Gridmap lookup failure
Hello, List! I want to test RFT and now I'm trying to run 'crft' command line tool. I run globus-gridftp-server and Globus container. But when I try to run crft, I get the following: ./globus-crft -c -s -m -vb -f $GLOBUS_LOCATION/testTransfer.txt -e https://127.0.0.2:8443/wsrf/services Communicating with delegation service. Creating the RFT service. Starting the RFT service. Waiting for the RFT transfers to complete. Authentication with credential only failed on server test2.iGroup [Caused by: Server refused performing the request. Custom message: Bad password. (error code 1) [Nested exception message: Custom message: Unexpected reply: 530-Login incorrect. : globus_gss_assist: Gridmap lookup failure: Could not map /O=Grid/OU/OU=igroup/CN=test2.igroup 530- 530 End.]] org.globus.transfer.reliable.service.exception.RftTransientException Transfered 0 of 1 | Status: Failed It looks like I have an incorrect grid-mapfile. Here is the /etc/grid-security/grid-mapfile content: /O=Grid/OU/OU=igroup/CN=test2.igroup ssedai All the components I ran by ssedai user. Also I have initiated GRIDMAP system variable. Google and GT mailing lists says nothing for my problem (i.e. similar problems are connected with REALLY incorrect grid-mapfile, where some symbols are missed). May be 'crft' tool uses an another gridmap file, but I have no idea how to establish it. All the information wiil be appreciated) Thanks in advance! -- Sergey Smolov
Re: [gt-user] Mutual authentication failed while using RFT in GT4
/CN=host/test2.igroup])
[junit] Tests run: 17, Failures: 0, Errors: 17, Time elapsed: 50,606 sec
[junit] Test org.globus.transfer.reliable.service.test.PackageTests FAILED
[junit] Running
org.globus.transfer.reliable.service.test.client.PackageTests
[junit] Tests run: 8, Failures: 0, Errors: 3, Time elapsed: 1,469 sec
[junit] Test org.globus.transfer.reliable.service.test.client.PackageTests
FAILED
[junit] Running
org.globus.transfer.reliable.service.test.connection.PackageTests
[junit] Tests run: 55, Failures: 12, Errors: 27, Time elapsed: 3,754 sec
[junit] Test
org.globus.transfer.reliable.service.test.connection.PackageTests FAILED
BUILD SUCCESSFUL
Total time: 1 minute 0 seconds
Here is my test.properties file:
PROTOCOL=https
HOST=127.0.0.1
PORT=8443
authType=GSI_TRANSPORT
authzVal=host
sourceHost=test2.iGroup
destinationHost=test2.iGroup
sourcePort=2811
destinationPort=2811
sourcePath=/etc/group
destPath=/tmp/rftTest_Done.tmp
sourceSubject=
subject=
destinationSubject=
binary=
tcpBufferSize=
blockSize=
noTpt=
parallelStreams=
dcau=
concurrency=1
allOrNone=false
maxAttempts=10
backwardsCompatible=true
Could somebody explain this?
Great thanks in advance
2009/5/19, John Bresnahan bresn...@mcs.anl.gov:
try adding -z O=Grid/OU/CN=host/test2.igroup to the rft client
Sergei Smolov wrote:
Hello, List!
I am using GT4 and I want to use RFT. I've installed GT4, then I've
strated
globus-gridftp-server and container, and I've tried to start rft command
line tool, as it is described in
m
But I get this error instead:
ERROR delegation.DelegationUtil [main,getCertificateChainRP:615]
org.globus.gsi.gssapi.auth.AuthorizationException: Mutual authentication
failed
Expected target subject name=/CN=host/localhost
Target returned subject name=/O=Grid/OU/CN=host/test2.igroup
Exception in thread main Error during startup processing. Caused by .
Caused by AxisFault
faultCode: {
http://schemas.xmlsoap.org/soap/envelope/}Server.userExceptionhttp://schemas.xmlsoap.org/soap/envelope/%7DServer.userException
faultSubcode:
faultString: org.globus.gsi.gssapi.auth.AuthorizationException: Mutual
authentication failed
Expected target subject name=quot;/CN=host/localhostquot;
Target returned subject name=quot;/O=Grid/OU/CN=host/test2.igroupquot;
faultActor:
faultNode:
faultDetail:
{
http://xml.apache.org/axis/}stackTrace:org.globus.gsi.gssapi.auth.AuthorizationExceptionhttp://xml.apache.org/axis/%7DstackTrace:org.globus.gsi.gssapi.auth.AuthorizationException
:
Mutual authentication failed
Expected target subject name=quot;/CN=host/localhostquot;
Target returned subject name=quot;/O=Grid/OU/CN=host/test2.igroupquot;
at
org.globus.gsi.gssapi.auth.Authorization.generateAuthorizationException(Authorization.java:54)
at
org.globus.gsi.gssapi.auth.HostAuthorization.authorize(HostAuthorization.java:97)
at org.globus.gsi.gssapi.net.GssSocket.startHandshake(GssSocket.java:156)
at org.globus.gsi.gssapi.net.GssSocket.getInputStream(GssSocket.java:177)
at
org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:744)
at
org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:386)
at
org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:170)
at
org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:396)
at
org.apache.axis.transport.http.CommonsHTTPSender.invoke(CommonsHTTPSender.java:224)
at
org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32)
at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118)
at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)
at org.apache.axis.client.AxisClient.invokeTransport(AxisClient.java:150)
at org.apache.axis.client.AxisClient.invoke(AxisClient.java:289)
at org.apache.axis.client.Call.invokeEngine(Call.java:2838)
at org.apache.axis.client.Call.invoke(Call.java:2824)
at org.apache.axis.client.Call.invoke(Call.java:2501)
at org.apache.axis.client.Call.invoke(Call.java:2424)
at org.apache.axis.client.Call.invoke(Call.java:1835)
at
org.globus.delegationService.DelegationFactoryPortTypeSOAPBindingStub.getResourceProperty(DelegationFactoryPortTypeSOAPBindingStub.java:1420)
at
org.globus.delegation.DelegationUtil.getCertificateChainRP(DelegationUtil.java:613)
at
org.globus.delegation.DelegationUtil.getCertificateChainRP(DelegationUtil.java:571)
at
org.globus.transfer.reliable.client.ReliableFileTransferJob.getDelegationEpr(ReliableFileTransferJob.java:291)
at
org.globus.transfer.reliable.client.ReliableFileTransferClient.parseArgs(ReliableFileTransferClient.java:141)
at
org.globus.transfer.reliable.client.ReliableFileTransferClient.main(ReliableFileTransferClient.java:262)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke
[gt-user] SimpleCA in GT4
Hello, List! I have some doubts about the correctness of SimpleCA work. As it is described in Installing SimpleCA guide ( http://globus.org/toolkit/docs/latest-stable/admin/install/#gtadmin-simpleca) there must be net two steps: 1) Run the script $GLOBUS_LOCATION/setup/globus/setup-simple-ca as globus user and 2) Run two scripts as root user: $GLOBUS_LOCATION/setup/globus_simple_ca_CA_Hash_setup/setup-gsi -default grid-cert-request -host 'hostname' I have one problem with the last command. Is it means that 'hostname' is Fully-Qualified Domain Name? The thing is, that I have two different unique subject name for CA - while I run first script and when I see the output of the last script. For example, when I run first, I've entered this string: /O=Grid/OU/CN=host/test2.igroup and when I run the third script I see: A private host key and a certificate request has been generated with the subject: /O=Grid/OU/CN/CN=host/test2.igroup Is it a correct behavior of SimpleCA? Perhaps, my troubles with RFT usage are connected with this effect (I get errors likeExpected /CN=host/localhost target but received /O=Grid/OU/OU=igroup/CN=host/test2.iGroup and so on) Thanks in advance -- Sergey Smolov
[gt-user] Mutual authentication failed while using RFT in GT4
Hello, List!
I am using GT4 and I want to use RFT. I've installed GT4, then I've strated
globus-gridftp-server and container, and I've tried to start rft command
line tool, as it is described in
http://globus.org/toolkit/docs/4.2/4.2.1/data/rft/user/#rft-user-using
But I get this error instead:
ERROR delegation.DelegationUtil [main,getCertificateChainRP:615]
org.globus.gsi.gssapi.auth.AuthorizationException: Mutual authentication
failed
Expected target subject name=/CN=host/localhost
Target returned subject name=/O=Grid/OU/CN=host/test2.igroup
Exception in thread main Error during startup processing. Caused by .
Caused by AxisFault
faultCode: {http://schemas.xmlsoap.org/soap/envelope/}Server.userException
faultSubcode:
faultString: org.globus.gsi.gssapi.auth.AuthorizationException: Mutual
authentication failed
Expected target subject name=quot;/CN=host/localhostquot;
Target returned subject name=quot;/O=Grid/OU/CN=host/test2.igroupquot;
faultActor:
faultNode:
faultDetail:
{
http://xml.apache.org/axis/}stackTrace:org.globus.gsi.gssapi.auth.AuthorizationException:
Mutual authentication failed
Expected target subject name=quot;/CN=host/localhostquot;
Target returned subject name=quot;/O=Grid/OU/CN=host/test2.igroupquot;
at
org.globus.gsi.gssapi.auth.Authorization.generateAuthorizationException(Authorization.java:54)
at
org.globus.gsi.gssapi.auth.HostAuthorization.authorize(HostAuthorization.java:97)
at org.globus.gsi.gssapi.net.GssSocket.startHandshake(GssSocket.java:156)
at org.globus.gsi.gssapi.net.GssSocket.getInputStream(GssSocket.java:177)
at
org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:744)
at
org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:386)
at
org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:170)
at
org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:396)
at
org.apache.axis.transport.http.CommonsHTTPSender.invoke(CommonsHTTPSender.java:224)
at
org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32)
at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118)
at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)
at org.apache.axis.client.AxisClient.invokeTransport(AxisClient.java:150)
at org.apache.axis.client.AxisClient.invoke(AxisClient.java:289)
at org.apache.axis.client.Call.invokeEngine(Call.java:2838)
at org.apache.axis.client.Call.invoke(Call.java:2824)
at org.apache.axis.client.Call.invoke(Call.java:2501)
at org.apache.axis.client.Call.invoke(Call.java:2424)
at org.apache.axis.client.Call.invoke(Call.java:1835)
at
org.globus.delegationService.DelegationFactoryPortTypeSOAPBindingStub.getResourceProperty(DelegationFactoryPortTypeSOAPBindingStub.java:1420)
at
org.globus.delegation.DelegationUtil.getCertificateChainRP(DelegationUtil.java:613)
at
org.globus.delegation.DelegationUtil.getCertificateChainRP(DelegationUtil.java:571)
at
org.globus.transfer.reliable.client.ReliableFileTransferJob.getDelegationEpr(ReliableFileTransferJob.java:291)
at
org.globus.transfer.reliable.client.ReliableFileTransferClient.parseArgs(ReliableFileTransferClient.java:141)
at
org.globus.transfer.reliable.client.ReliableFileTransferClient.main(ReliableFileTransferClient.java:262)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.globus.bootstrap.BootstrapBase.launch(BootstrapBase.java:114)
at org.globus.bootstrap.Bootstrap.main(Bootstrap.java:41)
{http://xml.apache.org/axis/}hostname:test2
Perhaps this error appears because of incorrect configuration of SimpleCA
after the GT4 installation. The situation is that I want to use RFT and GT4
on my localhost only and I've not created special user globus (I have only
root and one nonroot user in my system).
My OS is OpenSUSE 11.0
Could you help me in this?
Thanks in advance
--
Sergey Smolov
[gt-user] Problem with RFT configuration: No suitable driver found error
Hello, List! I've installed Globus Toolkit 4.2.1 and PostgreSQL 7.3.2 for RFT testing. Then I execute the following commands: ./postmaster -D data directory address -o -i $GLOBUS_LOCATION/sbin/globus-gridftp-server -p 2811 $GLOBUS_LOCATION/bin/globus-start-container When I try to start container, I get the following error: Unable to connect to database.No suitable driver found for /home/ssedai/GlobusToolkit/var/rftDatabase. Caused by java.sql.SQLException: No suitable driver found for /home/ssedai/GlobusToolkit/var/rftDatabase at java.sql.DriverManager.getConnection(DriverManager.java:602) at java.sql.DriverManager.getConnection(DriverManager.java:185) at org.apache.commons.dbcp.DriverManagerConnectionFactory.createConnection(DriverManagerConnectionFactory.java:48) at org.apache.commons.dbcp.PoolableConnectionFactory.makeObject(PoolableConnectionFactory.java:290) at org.apache.commons.pool.impl.GenericObjectPool.borrowObject(GenericObjectPool.java:771) at org.apache.commons.dbcp.PoolingDriver.connect(PoolingDriver.java:175) at java.sql.DriverManager.getConnection(DriverManager.java:582) at java.sql.DriverManager.getConnection(DriverManager.java:207) at org.globus.transfer.reliable.service.database.RFTDatabaseSetup.getDBConnection(RFTDatabaseSetup.java:261) at org.globus.transfer.reliable.service.database.ReliableFileTransferDbAdapter.setSchemaVersion(ReliableFileTransferDbAdapter.java:441) at org.globus.transfer.reliable.service.database.ReliableFileTransferDbAdapter.setup(ReliableFileTransferDbAdapter.java:155) at org.globus.transfer.reliable.service.ReliableFileTransferImpl.init(ReliableFileTransferImpl.java:78) at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39) at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27) at java.lang.reflect.Constructor.newInstance(Constructor.java:513) at java.lang.Class.newInstance0(Class.java:355) at java.lang.Class.newInstance(Class.java:308) at org.globus.axis.providers.RPCProvider.getNewServiceInstance(RPCProvider.java:120) at org.globus.axis.description.ServiceDescUtil.initializeProviders(ServiceDescUtil.java:214) at org.globus.axis.description.ServiceDescUtil.initializeService(ServiceDescUtil.java:163) at org.globus.wsrf.container.ServiceManager$InitPrivilegedAction.initialize(ServiceManager.java:384) at org.globus.wsrf.container.ServiceManager$InitPrivilegedAction.run(ServiceManager.java:396) at java.security.AccessController.doPrivileged(Native Method) at javax.security.auth.Subject.doAs(Subject.java:396) at org.globus.gsi.jaas.GlobusSubject.runAs(GlobusSubject.java:60) at org.globus.gsi.jaas.JaasSubject.doAs(JaasSubject.java:100) at org.globus.wsrf.container.ServiceManager.initializeService(ServiceManager.java:271) at org.globus.wsrf.container.ServiceManager.start(ServiceManager.java:177) at org.globus.wsrf.container.ServiceDispatcher.startServices(ServiceDispatcher.java:799) at org.globus.wsrf.container.ServiceDispatcher.init(ServiceDispatcher.java:435) at org.globus.wsrf.container.ServiceContainer.start(ServiceContainer.java:252) at org.globus.wsrf.container.ServiceContainer.init(ServiceContainer.java:212) at org.globus.wsrf.container.GSIServiceContainer.init(GSIServiceContainer.java:42) at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39) at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27) at java.lang.reflect.Constructor.newInstance(Constructor.java:513) at org.globus.wsrf.container.ServiceContainer.createContainer(ServiceContainer.java:168) at org.globus.wsrf.container.ServiceContainer.startSecurityContainer(ServiceContainer.java:606) at org.globus.wsrf.container.ServiceContainer.main(ServiceContainer.java:539) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) at java.lang.reflect.Method.invoke(Method.java:597) at org.globus.bootstrap.BootstrapBase.launch(BootstrapBase.java:114) at org.globus.bootstrap.ContainerBootstrap.main(ContainerBootstrap.java:40) 2009-04-09T16:01:14.200+04:00 ERROR service.ReliableFileTransferImpl [main,oldLog:179] Unable to setup database driver with pooling.Unable to connect to database.No suitable driver found for /home/ssedai/GlobusToolkit/var/rftDatabase [Caused by: No suitable driver found for /home/ssedai/GlobusToolkit/var/rftDatabase] 2009-04-09T16:01:15.409+04:00 WARN service.ReliableFileTransferHome [main,oldLog:190] All RFT requests will fail and all GRAM jobs that require file staging will fail.Unable to connect to database.No suitable driver found for /home/ssedai/GlobusToolkit/var/rftDatabase [Caused by: No
