Hola Arnau,
> last Tuesday, our fresh installed CE (gLite 3.1) stared to fail SAM
> tests. I checked globus-gatekeeper log and I saw many errors like:
>
> TIME: Tue Jul 22 20:00:28 2008
> PID: 29875 -- Notice: 5: Authenticated globus user: /DC=org/OU=People/CN=20966
> lcas client name: /DC=org/OU=People/CN=20966
> LCAS 0:
> LCAS 1: Initialization LCAS version 1.3.7
> allowing empty credentials
> LCAS 2: LCAS authorization request
> LCAS 0: lcas_userban.mod-plugin_confirm_authorization(): checking banned users in /opt/glite/etc/lcas/ban_users.db
> LCAS 0: lcas_plugin_voms-plugin_confirm_authorization_from_x509(): Did not find a matching VO entry in the authorization file
> LCAS 0: 2008-07-22.20:00:28 : lcas_plugin_voms-plugin_confirm_authorization_from_x509(): voms plugin failed
> LCAS 0: lcas.mod-lcas_run_va(): authorization failed for plugin /opt/glite/lib/modules/lcas_voms.mod
> LCAS 0: lcas.mod-lcas_run_va(): failed
> TIME: Tue Jul 22 20:00:29 2008
> PID: 29935 -- Notice: 6: Got connection 131.154.101.15 at Tue Jul 22 20:00:29 2008
>
> I reconfigured the node and all worked fine again, but I have a couple
> of questions:
>
> 1.-) Which file is "authorization file"?
/etc/grid-security/grid-mapfile
See /opt/glite/etc/lcas/lcas.db.
> 2.-) What could cause authorization file's "corruption"?
That file was not corrupted, the DN was truncated!
This suggests the gatekeeper memory was in a very bad shape.
I have never seen such an error before.
Are there dubious entries in /var/log/messages, e.g. pointing to HW errors?
|