On Wed, 2007-03-14 at 17:13, Gonçalo Borges wrote:
> Hi all,
> I'm trying to help an admin setting up a new site.
> However, he is complaining of problems regarding the "rgma-client-check"
> in the WNs.
> I do not know much about R-GMA. Do you know what could be causing the
> problems?
Its a CA certificate problem.
from the C++ errors:
WARN glite::rgma::SSLSocket -
Verification error string. Server not verified: unable to get local
issuer certificate
>From the java errors:
The trusted certificate
authority certificates reading failed: java.io.IOException: No CA files
found matching "/etc/grid-security/certificates/*.0
You need to have the CA certs on both the server and WN.
/etc/grid-security/certificates/ is the default place to look for these
but there is an environment variable(X509_CERT_DIR) which can be set to
look elsewhere, you could check this.
Alastair
> These are the errors he his reporting:
>
> [root@wn01 root]# $RGMA_HOME/bin/rgma-client-check
>
> *** Running R-GMA client tests on wn01.fam.ulusiada.pt ***
>
> Checking C API: Success
> Checking C++ API: Success
> Checking CommandLine API: Success
> Checking Java API: Success
> Checking Python API: RGMA Error: Could not contact R-GMA server at
> mon01.fam.ulusiada.pt:8443 - (-1, 'Connection timed out')
> Failure - failed to query test tuple
>
> *** R-GMA client test failed ***
>
>
> [root@wn02 root]# $RGMA_HOME/bin/rgma-client-check
>
> *** Running R-GMA client tests on wn02.fam.ulusiada.pt ***
>
> Checking C API: Success
> Checking C++ API: 2007-03-13 09:55:12,432 [3076319136] WARN
> glite::rgma::SSLSocket - SSL read failed with status of 2
> 2007-03-13 09:55:12,432 [3076319136] WARN glite::rgma::SSLSocket -
> SSL_ERROR_WANT_READ The TLS/SSL The operation did not complete
> Failed to contact Consumer service: Read failed: SSL_ERROR_WANT_READ The
> TLS/SSL The operation did not complete
> Failure - failed to query test tuple
> Checking CommandLine API: ERROR: Could not contact R-GMA server at
> mon01.fam.ulusiada.pt:8443 - (-1, 'Connection timed out')
> ERROR: Cannot declare table: table has already been declared
> Traceback (most recent call last):
> File "/opt/glite/libexec/rgma-command-line/rgma-cli.py", line 1464, in ?
> rgma_cli.cleanup();
> File "/opt/glite/libexec/rgma-command-line/rgma-cli.py", line 107, in
> cleanup
> self.producer.close()
> File "/opt/glite/lib/python/rgma.py", line 1742, in close
> self.callMethod("close")
> File "/opt/glite/lib/python/rgma.py", line 1732, in callMethod
> return self.callServiceMethod(method, returnType, **params)
> File "/opt/glite/lib/python/rgma.py", line 1613, in callServiceMethod
> xmlData = self._callServlet(command, **params)
> File "/opt/glite/lib/python/rgma.py", line 1590, in _callServlet
> raise RemoteException(self.host, e)
> rgma.RemoteException: Could not contact R-GMA server at
> mon01.fam.ulusiada.pt:8443 - (-1, 'Connection timed out')
> Failure - failed to insert test tuple
> Checking Java API: R-GMA error: Read timed out to:
> https://mon01.fam.ulusiada.pt:8443/R-GMA/PrimaryProducerServlet/declareTable?connectionId=1280670543&tableName=userTable&predicate=WHERE+userId+%3D+%27root25835%40wn02.fam.ulusiada.pt%3AJava%27&hrpSec=600&lrpSec=600
>
> Failure - failed to insert test tuple
> Checking Python API: RGMA Error: Could not contact R-GMA server at
> mon01.fam.ulusiada.pt:8443 - (-1, 'Connection timed out')
> Failure - failed to insert test tuple
>
> *** R-GMA client test failed ***
>
>
> [root@wn08 root]# $RGMA_HOME/bin/rgma-client-check
>
> *** Running R-GMA client tests on wn08.fam.ulusiada.pt ***
>
> Checking C API: Failed to create producer: Can't connect to servlet
> (authentication failed).
> Failure - failed to insert test tuple
> Checking C++ API: 2007-03-13 09:17:26,236 [3076331424] WARN
> glite::rgma::SSLSocket - SSL connect failed with status of 1 Operation
> not permitted
> 2007-03-13 09:17:26,237 [3076331424] WARN glite::rgma::SSLSocket -
> Verification error string. Server not verified: unable to get local
> issuer certificate
> 2007-03-13 09:17:26,314 [3076331424] WARN glite::rgma::SSLSocket - SSL
> connect failed with status of 1 Operation not permitted
> 2007-03-13 09:17:26,314 [3076331424] WARN glite::rgma::SSLSocket -
> Verification error string. Server not verified: unable to get local
> issuer certificate
> Failed to contact PrimaryProducer service: SSL Connect failed:. Server
> not verified: unable to get local issuer certificate Operation not
> permitted
> Failure - failed to insert test tuple
> Checking CommandLine API: ERROR: Could not contact R-GMA server at
> mon01.fam.ulusiada.pt:8443 - (-1, 'Connection timed out')
> ERROR: Cannot declare table: table has already been declared
> Traceback (most recent call last):
> File "/opt/glite/libexec/rgma-command-line/rgma-cli.py", line 1464, in ?
> rgma_cli.cleanup();
> File "/opt/glite/libexec/rgma-command-line/rgma-cli.py", line 107, in
> cleanup
> self.producer.close()
> File "/opt/glite/lib/python/rgma.py", line 1742, in close
> self.callMethod("close")
> File "/opt/glite/lib/python/rgma.py", line 1732, in callMethod
> return self.callServiceMethod(method, returnType, **params)
> File "/opt/glite/lib/python/rgma.py", line 1613, in callServiceMethod
> xmlData = self._callServlet(command, **params)
> File "/opt/glite/lib/python/rgma.py", line 1590, in _callServlet
> raise RemoteException(self.host, e)
> rgma.RemoteException: Could not contact R-GMA server at
> mon01.fam.ulusiada.pt:8443 - (-1, 'Connection timed out')
> Failure - failed to insert test tuple
> Checking Java API: java.io.IOException: No CA files found matching
> "/etc/grid-security/certificates/*.0
> at
> org.glite.security.trustmanager.ContextWrapper.initTrustAnchors(ContextWrapper.java:444)
>
> at
> org.glite.security.trustmanager.ContextWrapper.init(ContextWrapper.java:300)
>
> at
> org.glite.security.trustmanager.ContextWrapper.<init>(ContextWrapper.java:166)
>
> at
> org.glite.security.trustmanager.TimedOutContextWrapper.<init>(TimedOutContextWrapper.java:41)
>
> at
> org.edg.info.ServletConnection.setupHTTPS(ServletConnection.java:199)
> at
> org.edg.info.ServletConnection.setupSecurity(ServletConnection.java:190)
> at
> org.edg.info.ServletConnection.connect(ServletConnection.java:518)
> at
> org.edg.info.ServletConnection.connect(ServletConnection.java:414)
> at
> org.edg.info.ServletConnection.sendCommand(ServletConnection.java:460)
> at
> org.glite.rgma.stubs.ProducerFactoryStub.createInstance(ProducerFactoryStub.java:165)
>
> at
> org.glite.rgma.stubs.ProducerFactoryStub.createPrimaryProducer(ProducerFactoryStub.java:76)
>
> at InsertTuple.main(InsertTuple.java:24)
> R-GMA error: Failed to set up secure connection: The trusted certificate
> authority certificates reading failed: java.io.IOException: No CA files
> found matching "/etc/grid-security/certificates/*.0
> Failure - failed to insert test tuple
> Checking Python API: RGMA Error: Could not contact R-GMA server at
> mon01.fam.ulusiada.pt:8443 - (-1, 'Connection timed out')
> Failure - failed to insert test tuple
>
> *** R-GMA client test failed ***
>
> Thanks in advance for your help...
> Cheers
> Goncalo
|