Thanks for looking into this. At the time I investigated the problem and
found that something with an openssl callback didn't work as it should,
causing the unknown CA error message. The relevant CA was installed, you
can see the locally compiled gt5.0.2 invocation succeeding.

What you mention about version numbers is interesting. And the problem is 
indeed still occuring on 11.04:
  $ globus-url-copy gsiftp://host/file file:///tmp/q
  error: globus_ftp_client: the server responded with an error
  535 Authentication failed: GSSException: Failure unspecified at GSS-API level 
[Caused by: Unknown CA]
while an strace shows that the correct files from 
/etc/grid-security/certificates are found and read. Binaries built from 
upstream's gt5.0.2 do work still.

Further investigation shows that Ubuntu's libglobus_gssapi_gsi.so.4 is
the culprit; when using upstream's libglobus_gssapi_gsi_gcc64dbg.so.0
(LD_LIBRARY_PATH with symlinks) the same binary works:

  $ globus-url-copy gsiftp://host/file file:///tmp/q && wc -l /tmp/q
  error: globus_ftp_client: the server responded with an error
  535 Authentication failed: GSSException: Failure unspecified at GSS-API level 
[Caused by: Unknown CA]
  $ ldd /usr/bin/globus-url-copy | grep -v '=> \(/usr\)\?/lib'
        linux-vdso.so.1 =>  (0x00007fffb9cd5000)
        /lib64/ld-linux-x86-64.so.2 (0x00007fa235081000)
  $ mkdir /tmp/foo && cd /tmp/foo
  $ cp /tmp/prefix-gt5.0.2-orig/lib/libglobus_gssapi_gsi_gcc64dbg.so.0 
libglobus_gssapi_gsi.so.4
  $ ldd libglobus_gssapi_gsi.so.4 | sed 's!^\s*\(\(.*\)_gcc.*\.so.*\) => not 
found!ln -s /usr/lib/\2.so.? \1!p;d' >dolink.sh && sh dolink.sh
  $ LD_LIBRARY_PATH=/tmp/foo ldd /usr/bin/globus-url-copy | grep -v '=> 
\(/usr\)\?/lib'
        linux-vdso.so.1 =>  (0x00007fffb05ff000)
        libglobus_gssapi_gsi.so.4 => /tmp/foo/libglobus_gssapi_gsi.so.4 
(0x00007f87cc4e7000)
        /lib64/ld-linux-x86-64.so.2 (0x00007f87cd5e2000)
  $ LD_LIBRARY_PATH=/tmp/foo globus-url-copy gsiftp://host/file file:///tmp/q 
&& wc -l /tmp/q
  3 /tmp/q
 
Comparing the source files between Ubuntu's globus-gssapi-gsi-7.5/library/* and 
/tmp/gt5.0.2-all-source-installer/source-trees/gsi/gssapi/source/library/ did 
not show any difference, however. I'll see if I can find anything more, but if 
you have any ideas they would be welcome.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/703897

Title:
  globus openssl trouble: please upgrade to gt5.0.2

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/globus-gssapi-gsi/+bug/703897/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to