Re: [gt-user] Mutual authentication failed while using RFT in GT4
Thank you, John!
But when I've tried to execute ./rft -z
/O=Grid/OU=GlobusTest/OU=simpleCA-test2.igroup/CN=host/test2.igroup -f
/home/ssedai/GlobusToolkit/share/globus_wsrf_rft_test/transfer.xfr command
and I've
got this error:
ERROR providers.AbstractEngine [ServiceThread-3,initializeInterceptors:245]
[JWSSEC-165] Error loading interceptor: Interceptor: selfAuthz:self
java.lang.ClassNotFoundException: self
at java.net.URLClassLoader$1.run(URLClassLoader.java:200)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:188)
at java.lang.ClassLoader.loadClass(ClassLoader.java:307)
at java.lang.ClassLoader.loadClass(ClassLoader.java:252)
at java.lang.ClassLoader.loadClassInternal(ClassLoader.java:320)
at java.lang.Class.forName0(Native Method)
at java.lang.Class.forName(Class.java:247)
at
org.globus.security.authorization.providers.AbstractEngine.loadClass(AbstractEngine.java:299)
at
org.globus.security.authorization.providers.AbstractEngine.initializeInterceptors(AbstractEngine.java:233)
at
org.globus.security.authorization.providers.AbstractEngine.initializeInterceptors(AbstractEngine.java:182)
at
org.globus.security.authorization.providers.AbstractEngine.engineInitialize(AbstractEngine.java:110)
at
org.globus.security.authorization.providers.PermitOverrideAlg.engineInitialize(PermitOverrideAlg.java:56)
at
org.globus.wsrf.impl.security.authorization.AuthorizationEngine.initialize(AuthorizationEngine.java:111)
at
org.globus.wsrf.impl.security.util.AuthzUtil.getAuthzEngine(AuthzUtil.java:146)
at
org.globus.wsrf.impl.security.util.AuthzUtil.getAuthzEngine(AuthzUtil.java:130)
at
org.globus.wsrf.impl.security.authorization.AuthorizationHandler.getDefaultAuthzEngine(AuthorizationHandler.java:327)
at
org.globus.wsrf.impl.security.authorization.AuthorizationHandler.invoke(AuthorizationHandler.java:226)
at
org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32)
at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118)
at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)
at org.apache.axis.server.AxisServer.invokeService(AxisServer.java:199)
at org.apache.axis.server.AxisServer.invoke(AxisServer.java:375)
at org.globus.wsrf.container.ServiceThread.doPost(ServiceThread.java:949)
at org.globus.wsrf.container.ServiceThread.process(ServiceThread.java:684)
at
org.globus.wsrf.container.GSIServiceThread.process(GSIServiceThread.java:182)
at org.globus.wsrf.container.ServiceThread.run(ServiceThread.java:471)
2009-05-20 14:36:19,235 ERROR authorization.AuthorizationHandler
[ServiceThread-3,invoke:232] guid=0d3406f0-452a-11de-9fbc-d88add76d387
event=org.globus.authz.end status=-1 msg=[JWSSEC-116] Authorization failed.
reason= [Caused by: [JWSSEC-165] Error loading interceptor: Interceptor:
selfAuthz:self]
DN=/O=Grid/OU=GlobusTest/OU=simpleCA-test2.igroup/CN=host/test2.igroup
service=NotificationConsumerService operation={
http://wsrf.globus.org/core/notification}notify
At this time parallely Globus container returns such text blocks:
Authentication with credential only failed on server localhost. Caused by
Authentication failed. Caused by GSSException: Operation unauthorized
(Mechanism level: [JGLOBUS-56] Authorization failed. Expected
/CN=host/localhost target but received
/O=Grid/OU=GlobusTest/OU=simpleCA-test2.igroup/OU=igroup/CN=Smolov Sergey)
at
org.globus.gsi.gssapi.GlobusGSSContextImpl.initSecContext(GlobusGSSContextImpl.java:520)
at
org.globus.ftp.extended.GridFTPControlChannel.authenticate(GridFTPControlChannel.java:209)
at org.globus.ftp.GridFTPClient.authenticate(GridFTPClient.java:107)
at org.globus.ftp.GridFTPClient.authenticate(GridFTPClient.java:92)
at
org.globus.transfer.reliable.service.cache.SingleConnectionImpl.init(SingleConnectionImpl.java:101)
at
org.globus.transfer.reliable.service.cache.ThirdPartyConnectionImpl.init(ThirdPartyConnectionImpl.java:49)
at
org.globus.transfer.reliable.service.cache.ConnectionManager.createNewConnection(ConnectionManager.java:340)
at
org.globus.transfer.reliable.service.cache.ConnectionManager.getConnection(ConnectionManager.java:191)
at
org.globus.transfer.reliable.service.client.ThirdPartyTransferClient.init(ThirdPartyTransferClient.java:67)
at
org.globus.transfer.reliable.service.client.ClientFactory.createThirdPartyTransferClient(ClientFactory.java:177)
at
org.globus.transfer.reliable.service.TransferWork.run(TransferWork.java:355)
at EDU.oswego.cs.dl.util.concurrent.PooledExecutor$Worker.run(Unknown
Source)
at java.lang.Thread.run(Thread.java:619)
2009-05-20T14:36:17.675+04:00 ERROR service.TransferWork
[Thread-28,oldLog:175] Transient transfer error
Authentication with credential only failed on server localhost [Caused by:
Authentication failed [Caused by: Operation unauthorized (Mechanism level:
[JGLOBUS-56] Authorization failed. Expected /CN=host/localhost target but
received /O=Grid/OU=GlobusTest/OU=simpleCA-test2.igroup/OU=igroup/CN=Smolov
Sergey)]]
I also have
[gt-user] Mutual authentication failed while using RFT in GT4
Hello, List!
I am using GT4 and I want to use RFT. I've installed GT4, then I've strated
globus-gridftp-server and container, and I've tried to start rft command
line tool, as it is described in
http://globus.org/toolkit/docs/4.2/4.2.1/data/rft/user/#rft-user-using
But I get this error instead:
ERROR delegation.DelegationUtil [main,getCertificateChainRP:615]
org.globus.gsi.gssapi.auth.AuthorizationException: Mutual authentication
failed
Expected target subject name=/CN=host/localhost
Target returned subject name=/O=Grid/OU/CN=host/test2.igroup
Exception in thread main Error during startup processing. Caused by .
Caused by AxisFault
faultCode: {http://schemas.xmlsoap.org/soap/envelope/}Server.userException
faultSubcode:
faultString: org.globus.gsi.gssapi.auth.AuthorizationException: Mutual
authentication failed
Expected target subject name=quot;/CN=host/localhostquot;
Target returned subject name=quot;/O=Grid/OU/CN=host/test2.igroupquot;
faultActor:
faultNode:
faultDetail:
{
http://xml.apache.org/axis/}stackTrace:org.globus.gsi.gssapi.auth.AuthorizationException:
Mutual authentication failed
Expected target subject name=quot;/CN=host/localhostquot;
Target returned subject name=quot;/O=Grid/OU/CN=host/test2.igroupquot;
at
org.globus.gsi.gssapi.auth.Authorization.generateAuthorizationException(Authorization.java:54)
at
org.globus.gsi.gssapi.auth.HostAuthorization.authorize(HostAuthorization.java:97)
at org.globus.gsi.gssapi.net.GssSocket.startHandshake(GssSocket.java:156)
at org.globus.gsi.gssapi.net.GssSocket.getInputStream(GssSocket.java:177)
at
org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:744)
at
org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:386)
at
org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:170)
at
org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:396)
at
org.apache.axis.transport.http.CommonsHTTPSender.invoke(CommonsHTTPSender.java:224)
at
org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32)
at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118)
at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)
at org.apache.axis.client.AxisClient.invokeTransport(AxisClient.java:150)
at org.apache.axis.client.AxisClient.invoke(AxisClient.java:289)
at org.apache.axis.client.Call.invokeEngine(Call.java:2838)
at org.apache.axis.client.Call.invoke(Call.java:2824)
at org.apache.axis.client.Call.invoke(Call.java:2501)
at org.apache.axis.client.Call.invoke(Call.java:2424)
at org.apache.axis.client.Call.invoke(Call.java:1835)
at
org.globus.delegationService.DelegationFactoryPortTypeSOAPBindingStub.getResourceProperty(DelegationFactoryPortTypeSOAPBindingStub.java:1420)
at
org.globus.delegation.DelegationUtil.getCertificateChainRP(DelegationUtil.java:613)
at
org.globus.delegation.DelegationUtil.getCertificateChainRP(DelegationUtil.java:571)
at
org.globus.transfer.reliable.client.ReliableFileTransferJob.getDelegationEpr(ReliableFileTransferJob.java:291)
at
org.globus.transfer.reliable.client.ReliableFileTransferClient.parseArgs(ReliableFileTransferClient.java:141)
at
org.globus.transfer.reliable.client.ReliableFileTransferClient.main(ReliableFileTransferClient.java:262)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.globus.bootstrap.BootstrapBase.launch(BootstrapBase.java:114)
at org.globus.bootstrap.Bootstrap.main(Bootstrap.java:41)
{http://xml.apache.org/axis/}hostname:test2
Perhaps this error appears because of incorrect configuration of SimpleCA
after the GT4 installation. The situation is that I want to use RFT and GT4
on my localhost only and I've not created special user globus (I have only
root and one nonroot user in my system).
My OS is OpenSUSE 11.0
Could you help me in this?
Thanks in advance
--
Sergey Smolov
Re: [gt-user] Mutual authentication failed while using RFT in GT4
try adding -z O=Grid/OU/CN=host/test2.igroup to the rft client
Sergei Smolov wrote:
Hello, List!
I am using GT4 and I want to use RFT. I've installed GT4, then I've strated
globus-gridftp-server and container, and I've tried to start rft command
line tool, as it is described in
m
But I get this error instead:
ERROR delegation.DelegationUtil [main,getCertificateChainRP:615]
org.globus.gsi.gssapi.auth.AuthorizationException: Mutual authentication
failed
Expected target subject name=/CN=host/localhost
Target returned subject name=/O=Grid/OU/CN=host/test2.igroup
Exception in thread main Error during startup processing. Caused by .
Caused by AxisFault
faultCode: {http://schemas.xmlsoap.org/soap/envelope/}Server.userException
faultSubcode:
faultString: org.globus.gsi.gssapi.auth.AuthorizationException: Mutual
authentication failed
Expected target subject name=quot;/CN=host/localhostquot;
Target returned subject name=quot;/O=Grid/OU/CN=host/test2.igroupquot;
faultActor:
faultNode:
faultDetail:
{
http://xml.apache.org/axis/}stackTrace:org.globus.gsi.gssapi.auth.AuthorizationException:
Mutual authentication failed
Expected target subject name=quot;/CN=host/localhostquot;
Target returned subject name=quot;/O=Grid/OU/CN=host/test2.igroupquot;
at
org.globus.gsi.gssapi.auth.Authorization.generateAuthorizationException(Authorization.java:54)
at
org.globus.gsi.gssapi.auth.HostAuthorization.authorize(HostAuthorization.java:97)
at org.globus.gsi.gssapi.net.GssSocket.startHandshake(GssSocket.java:156)
at org.globus.gsi.gssapi.net.GssSocket.getInputStream(GssSocket.java:177)
at
org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:744)
at
org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:386)
at
org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:170)
at
org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:396)
at
org.apache.axis.transport.http.CommonsHTTPSender.invoke(CommonsHTTPSender.java:224)
at
org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32)
at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118)
at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)
at org.apache.axis.client.AxisClient.invokeTransport(AxisClient.java:150)
at org.apache.axis.client.AxisClient.invoke(AxisClient.java:289)
at org.apache.axis.client.Call.invokeEngine(Call.java:2838)
at org.apache.axis.client.Call.invoke(Call.java:2824)
at org.apache.axis.client.Call.invoke(Call.java:2501)
at org.apache.axis.client.Call.invoke(Call.java:2424)
at org.apache.axis.client.Call.invoke(Call.java:1835)
at
org.globus.delegationService.DelegationFactoryPortTypeSOAPBindingStub.getResourceProperty(DelegationFactoryPortTypeSOAPBindingStub.java:1420)
at
org.globus.delegation.DelegationUtil.getCertificateChainRP(DelegationUtil.java:613)
at
org.globus.delegation.DelegationUtil.getCertificateChainRP(DelegationUtil.java:571)
at
org.globus.transfer.reliable.client.ReliableFileTransferJob.getDelegationEpr(ReliableFileTransferJob.java:291)
at
org.globus.transfer.reliable.client.ReliableFileTransferClient.parseArgs(ReliableFileTransferClient.java:141)
at
org.globus.transfer.reliable.client.ReliableFileTransferClient.main(ReliableFileTransferClient.java:262)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.globus.bootstrap.BootstrapBase.launch(BootstrapBase.java:114)
at org.globus.bootstrap.Bootstrap.main(Bootstrap.java:41)
{http://xml.apache.org/axis/}hostname:test2
Perhaps this error appears because of incorrect configuration of SimpleCA
after the GT4 installation. The situation is that I want to use RFT and GT4
on my localhost only and I've not created special user globus (I have only
root and one nonroot user in my system).
My OS is OpenSUSE 11.0
Could you help me in this?
Thanks in advance
