Hi Gilbert,
I would be very interested to know how you hacked the wrapper script... as
you know I am looking at the possibility of providing a general solution
for this (at least for the WP1 stuff).
All the best,
david
On Tue, 4 Mar 2003, Gilbert Grosdidier wrote:
> Hi David,
>
> You gave me a very strong hint below !
>
> On Tue, 4 Mar 2003, Dr D J Colling wrote:
>
> > Ok people,
> >
> > I see two different problems here, one more serious than the other. So we
> > shall deal with the serious first. There is an authentication problem for
> > Liverpool, Oxford, Cambridge and SLAC. All that I see in the log files are
> > really useless messages such as " Reason: authentication with the remote
> > server failed" and "Globus Failure".
> >
> > Gilbert tells me that the SLAC CRLs are up to date.... I have no reason to
> > doubt him, besides I would normally get a more informative message in the
> > logs if that were the case. The problem appears to happen at somepoint
> > where the some files are geing transferred (maybe by the wrapper script).
> > Have there been firewall changes at any of these sites? I shall have a
> > deeper look at this and see if I can see something, but any ideas would be
> > welcome.
> > [...]
>
> Yes, this rings a bell for me: yes, I did have to hack the wrapper script,
> since the worker nodes are located behind a firewall at SLAC, and I can't
> make them access anything in the outside world. But this was running rather
> smoothly until February 17th at least.
>
> But I got no trace of the request being even forwarded to the SLAC CE, since
> this is the only message showing in the gatekeeper log file:
>
> ------------------
> GRAM contact:
> bbr-gate01.slac.stanford.edu:2119:/O=doesciencegrid.org/OU=Services/CN=bbr-gate01.slac.stanford.edu
> Notice: 6: Got connection 155.198.216.19 at Mon Mar 3 05:31:46 2003
>
> Failed reading length 0
> GSS authentication failure
> Communications Error
> globus_gss_assist token :3: failure: Connection closed
> GSS status: major:00090000 minor: 00008000 token: 00000003
> Failure: GSS failed Major:00090000 Minor:00008000 Token:00000003
>
> Failure: GSS failed Major:00090000 Minor:00008000 Token:00000003
> ------------------
>
> which IMHO shows that the authentication step was not passed.
>
> Beyond this, here is the date stamp of all the CRL files that I know of:
> [bbr-gate01] ~ > ll /etc/grid-security/certificates/*.r0
> -rw-r--r-- 1 root root 30721 Mar 3 09:25
> /etc/grid-security/certificates/0ed6468a.r0
> -rw-r--r-- 1 root root 2354 Mar 3 09:25
> /etc/grid-security/certificates/16da7552.r0
> -rw-r--r-- 1 root root 2158 Mar 3 09:25
> /etc/grid-security/certificates/1e43b9cc.r0
> -rw-r--r-- 1 root root 3417 Mar 3 09:25
> /etc/grid-security/certificates/1f0e8352.r0
> -rw-r--r-- 1 root root 1783 Mar 3 09:25
> /etc/grid-security/certificates/34a509c3.r0
> -rw-r--r-- 1 root root 1847 Mar 3 09:25
> /etc/grid-security/certificates/41380387.r0
> -rw-r--r-- 1 root root 7614 Mar 3 09:25
> /etc/grid-security/certificates/49f18420.r0
> -rw-r--r-- 1 root root 1459 Mar 3 09:25
> /etc/grid-security/certificates/6349a761.r0
> -rw-r--r-- 1 root root 5805 Mar 3 09:25
> /etc/grid-security/certificates/6b4ddd18.r0
> -rw-r--r-- 1 root root 5065 Mar 3 09:25
> /etc/grid-security/certificates/6df70cb1.r0
> -rw-r--r-- 1 root root 4840 Mar 3 09:25
> /etc/grid-security/certificates/90e2484f.r0
> -rw-r--r-- 1 root root 11017 Mar 3 09:25
> /etc/grid-security/certificates/9d8753eb.r0
> -rw-r--r-- 1 root root 1888 Mar 3 09:25
> /etc/grid-security/certificates/bc870044.r0
> -rw-r--r-- 1 root root 1763 Mar 3 09:25
> /etc/grid-security/certificates/cf4ba8c8.r0
> -rw-r--r-- 1 root root 2182 Mar 3 09:25
> /etc/grid-security/certificates/d64ccb53.r0
> -rw-r--r-- 1 root root 5660 Mar 3 09:25
> /etc/grid-security/certificates/df312a4e.r0
> -rw-r--r-- 1 root root 3667 Mar 3 09:25
> /etc/grid-security/certificates/ed99a497.r0
>
> Did I miss something ?
>
> Thanks, Cheers, Gilbert.
>
> --
> *---------------------------------------------------------------------*
> Gilbert Grosdidier mailto:[log in to unmask]
> Ext 74462 when at CERN
> LAL / IN2P3 / CNRS Phone : +33 1 6446 8909
> Faculte des Sciences, Bat. 200 Fax : +33 1 6446 8546
> B.P. 34, F-91898 Orsay Cedex (FRANCE)
>
>
>
>
|