On Sun, 27 Nov 2005, Filippidis christos wrote:
> hi again,
>
> after sending a lot of sft jobs to xg009.inp.demokritos.gr [...]
I cannot even send 1 job:
-----------------------------------------------------------------------------
$ globus-job-run xg009.inp.demokritos.gr /usr/bin/pbsnodes -a
GRAM Job submission failed because authentication failed:
GSS Major Status: Authentication Failed
GSS Minor Status Error Chain:
init.c:499: globus_gss_assist_init_sec_context_async: Error during context
initialization
init_sec_context.c:171: gss_init_sec_context: SSLv3 handshake problems
globus_i_gsi_gss_utils.c:888: globus_i_gsi_gss_handshake:
Unable to verify remote side's credentials
globus_i_gsi_gss_utils.c:854: globus_i_gsi_gss_handshake:
SSLv3 handshake problems: Couldn't do ssl handshake
OpenSSL Error: s3_pkt.c:1046: in library: SSL routines, function SSL3_READ_BYTES:
sslv3 alert certificate expired (error code 7)
-----------------------------------------------------------------------------
As usual, globus-url-copy gives more details:
-----------------------------------------------------------------------------
$ globus-url-copy file:/etc/group gsiftp://xg009.inp.demokritos.gr/tmp/test.$$
error: the server sent an error response: 535 535-FTPD GSSAPI error:
GSS Major Status: Authentication Failed
535-FTPD GSSAPI error: GSS Minor Status Error Chain:
535-FTPD GSSAPI error:
535-FTPD GSSAPI error: accept_sec_context.c:170: gss_accept_sec_context:
SSLv3 handshake problems
535-FTPD GSSAPI error: globus_i_gsi_gss_utils.c:881: globus_i_gsi_gss_handshake:
Unable to verify remote side's credentials
535-FTPD GSSAPI error: globus_i_gsi_gss_utils.c:854: globus_i_gsi_gss_handshake:
SSLv3 handshake problems: Couldn't do ssl handshake
535-FTPD GSSAPI error: OpenSSL Error: s3_srvr.c:1816: in library: SSL routines,
function SSL3_GET_CLIENT_CERTIFICATE: no certificate returned
535-FTPD GSSAPI error: globus_gsi_callback.c:351:
globus_i_gsi_callback_handshake_callback: Could not verify credential
535-FTPD GSSAPI error: globus_gsi_callback.c:477:
globus_i_gsi_callback_cred_verify: Could not verify credential
535-FTPD GSSAPI error: globus_gsi_callback.c:769:
globus_i_gsi_callback_check_revoked: Invalid CRL: The available CRL has expired
535 FTPD GSSAPI error: accepting context
-----------------------------------------------------------------------------
So, some CRL has expired. I verified the CRL for HellasGrid was OK on my UI,
so I suspect on your CE the CRL for CERN has expired.
Please run the fetch-crl cron job manually and verify its results.
|