Hi Antun,
> > > Jun 19 11:27:01 myproxy myproxy-server: <28424> authorization failed
> > > Jun 19 11:27:01 myproxy myproxy-server: <28424> Exiting: certificate chain
> > > verification failed "/C=RS/O=AEGIS/OU=Institute of Physics
> > > Belgrade/CN=host/wms.phy.bg.ac.yu" not authoriz
> > > ed by server's trusted_retrievers policy X509_verify_cert() failed
> > > authentication failed authentication failed
> >
> > We have the same complaints in /var/log/messages on myproxy.cern.ch!
> > Something is not quite right, but does it actually cause jobs to fail?
> >
>
> Hi Maarten,
>
> Oh yes, thousands of them, and their final status is that they are aborted
> due to the expired proxy...
As a workaround, can you try adding that host DN as a trusted retriever?
trusted_retrievers "/C=RS/O=AEGIS/....."
|