Hello LIP site admin,
I have been experiencing problem on your SE constantly for a few days
(hitting it quite often, as your SE is quite often picked up randomly by
script of mine :) ). You probably have wrong permissions on your host
certificate in /etc/grid-security/hostcert.pem - simple testcase follows:
$ edg-gridftp-ls gsiftp://se01.lip.pt/
error the server sent an error response: 501 501-FTPD GSSAPI error: GSS
Major Status: General failure
501-FTPD GSSAPI error: GSS Minor Status Error Chain:
501-FTPD GSSAPI error:
501-FTPD GSSAPI error: acquire_cred.c:125: gss_acquire_cred: Error with
GSI credential
501-FTPD GSSAPI error: globus_i_gsi_gss_utils.c:1310:
globus_i_gsi_gss_cred_read: Error with gss credential handle
501-FTPD GSSAPI error: globus_gsi_credential.c:721: globus_gsi_cred_read:
Valid credentials could not be found in any of the possible locations
specified by the credential search order.
501-FTPD GSSAPI error: globus_gsi_credential.c:573: globus_gsi_cred_read:
Error reading service credential
501-FTPD GSSAPI error: globus_gsi_credential.c:2132:
globus_l_gsi_cred_get_service: Error determining service name.: No service
name found in subject /CN=host/se01.lip.pt.
501-FTPD GSSAPI error:
501-FTPD GSSAPI error: globus_gsi_credential.c:447: globus_gsi_cred_read:
Error reading host credential
501-FTPD GSSAPI error: globus_gsi_system_config.c:3943:
globus_gsi_sysconfig_get_host_cert_filename_unix: Error with certificate
filename
501-FTPD GSSAPI error: globus_gsi_system_config.c:380:
globus_i_gsi_sysconfig_create_cert_string: Error with certificate
filename: /etc/grid-security/hostcert.pem has invalid permissions.
501-FTPD GSSAPI error:
501-FTPD GSSAPI error: globus_gsi_credential.c:239: globus_gsi_cred_read:
Error reading proxy credential
501-FTPD GSSAPI error: globus_gsi_system_config.c:4660:
globus_gsi_sysconfig_get_proxy_filename_unix: Could not find a valid proxy
certificate file location
501-FTPD GSSAPI error: globus_gsi_system_config.c:4657:
globus_gsi_sysconfig_get_proxy_filename_unix: File does not exist: Proxy
file /tmp/x509up_u<uid> does not exist
501-FTPD GSSAPI error: globus_gsi_credential.c:324: globus_gsi_cred_read:
Error reading user credential
501-FTPD GSSAPI error: globus_gsi_system_config.c:3670:
globus_gsi_sysconfig_get_user_cert_filename_unix: Error with certificate
filename
501-FTPD GSSAPI error: globus_gsi_system_config.c:380:
globus_i_gsi_sysconfig_create_cert_string: Error with certificate
filename: /etc/grid-security/hostcert.pem has invalid permissions.
501 FTPD GSSAPI error: acquiring credentials
--
Jiri Kosina
Institute of Physics, Academy of sciences of the Czech Republic
|