Hi Maarteen,
Mário solved the issue. The ntpd as down, and after restarting it, it is
OK now:
[goncalo@ui01 goncalo]$ myproxy-init -d -n -s px01.lip.pt
Your identity: /C=PT/O=LIPCA/O=LIP/OU=Lisboa/CN=Goncalo Borges
Enter GRID pass phrase for this identity:
Creating proxy .............................. Done
Proxy Verify OK
Your proxy is valid until: Tue Jun 12 13:44:16 2007
A proxy valid for 168 hours (7.0 days) for user
/C=PT/O=LIPCA/O=LIP/OU=Lisboa/CN=Goncalo Borges now exists on px01.lip.pt.
Cheers
Goncalo
Maarten Litmaath, CERN wrote:
> On Tue, 5 Jun 2007, Mario David wrote:
>
>
>>> What happened was this: Piotr's old DN expired on Thursday, so the SAM
>>>
>> LIP operates the CA for Portugal,
>> it send a mail to the users, or owners of resources, one month before each
>> certificate expires.
>>
>> it's simple and one has one month to take care about it!!!!
>>
>
> Indeed, but maybe the message got overlooked or ended up in a spam folder?
> Meanwhile, can you look into this:
>
> -----------------------------------------------------------------------------
> $ myproxy-init -d -n -s px01.lip.pt
> Your identity: /C=CH/O=CERN/OU=GRID/CN=Maarten Litmaath 1689
> Enter GRID pass phrase for this identity:
> Creating proxy ..................................................... Done
> Proxy Verify OK
> Your proxy is valid until: Tue Jun 12 11:59:53 2007
> Error authenticating: GSS Major Status: Authentication Failed
> GSS Minor Status Error Chain:
>
> init.c:266: globus_gss_assist_init_sec_context: Error during context initialization
> init_sec_context.c:171: gss_init_sec_context: SSLv3 handshake problems
> globus_i_gsi_gss_utils.c:888: globus_i_gsi_gss_handshake: Unable to verify remote side's credentials
> globus_i_gsi_gss_utils.c:847: globus_i_gsi_gss_handshake: Unable to verify remote side's credentials: Couldn't verify the remote certificate
> OpenSSL Error: s3_pkt.c:1046: in library: SSL routines, function SSL3_READ_BYTES: sslv3 alert bad certificate
> -----------------------------------------------------------------------------
>
> Thanks,
> Maarten
>
|