Hi Everyone
Has anyone seen before or could give me some pointers to debug the
following problem ?
I recently patched a pps installation of a gLite 3.1 UI and WMS/LB
setup. The wmproxy service on the WMS/LB now does not appear to be
picking up the VOMS attributes, from the credentials presented from the
UI.
See details below but in summary on the UI the voms attributes appear to
be set (voms-proxy-info -all) but a simple glite-wms-job-list-match
returns:
"Unable to delegate the credential to the endpoint......user not
authorized".
The wmproxy.log file on the WMS/LB shows
"wmpcommon::logRemoteHostInfo": Remote GRST CRED: Not Available
and
""WMPAuthorizer::checkGaclUserAuthZ": Unknown voms fqan: GRST_CRED_2
environment variable not set
"WMPAuthorizer::checkGaclUserAuthZ": fqan=
Any thoughts or debug pointers would be most appreciated.
Many thanks in advance
Jonathan
$ voms-proxy-info -all
subject : /C=UK/O=eScience/OU=CLRC/L=RAL/CN=jonathan
churchill/CN=proxy
issuer : /C=UK/O=eScience/OU=CLRC/L=RAL/CN=jonathan churchill
identity : /C=UK/O=eScience/OU=CLRC/L=RAL/CN=jonathan churchill
type : proxy
strength : 1024 bits
path : /tmp/x509up_p7498.fileFDwIbI.1
timeleft : 10:04:18
=== VO ngs.ac.uk extension information ===
VO : ngs.ac.uk
subject : /C=UK/O=eScience/OU=CLRC/L=RAL/CN=jonathan churchill
issuer :
/C=UK/O=eScience/OU=Manchester/L=MC/CN=voms.ngs.ac.uk/Email=support@grid
-support.ac.uk
attribute : /ngs.ac.uk/Role=NULL/Capability=NULL
timeleft : 10:04:18
uri : voms.ngs.ac.uk:15010
$ glite-wms-job-list-match -a ./job.jdl
Connecting to the service
https://ngsrb02.ngs.rl.ac.uk:7443/glite_wms_wmproxy_server
Warning - Unable to delegate the credential to the endpoint:
https://ngsrb02.ngs.rl.ac.uk:7443/glite_wms_wmproxy_server
Authorization error: user not authorized
<Section cut from wmproxy.log>
21 May, 12:02:54 -I- PID: 7827 - "wmpcommon::logRemoteHostInfo":
-------------------------------- Incoming Request
--------------------------------
21 May, 12:02:54 -I- PID: 7827 - "wmpcommon::logRemoteHostInfo": Remote
Host IP: 130.246.143.132:44046 - Remote Host Name: ngsui02.ngs.rl.ac.uk
21 May, 12:02:54 -I- PID: 7827 - "wmpcommon::logRemoteHostInfo": Remote
CLIENT S DN: /C=UK/O=eScience/OU=CLRC/L=RAL/CN=jonathan
churchill/CN=proxy
21 May, 12:02:54 -I- PID: 7827 - "wmpcommon::logRemoteHostInfo": Remote
GRST CRED: Not Available
21 May, 12:02:54 -I- PID: 7827 - "wmpcommon::logRemoteHostInfo": Service
GRST PROXY LIMIT: 6
21 May, 12:02:54 -I- PID: 7827 - "wmpcommon::logRemoteHostInfo":
------------------------------------------------------------------------
----------
21 May, 12:02:54 -I- PID: 7827 - "wmpoperations::getProxyReq":
Authorizing user...
21 May, 12:02:54 -W- PID: 7827 - "WMPAuthorizer::checkGaclUserAuthZ":
Unknown voms fqan: GRST_CRED_2 environment variable not set
21 May, 12:02:54 -I- PID: 7827 - "WMPAuthorizer::checkGaclUserAuthZ":
fqan=
21 May, 12:02:54 -I- PID: 7827 - "WMPAuthorizer::checkGaclUserAuthZ":
Authorization error: user not authorized
------------------------------------
Jonathan Churchill ([log in to unmask])
http://www.escience.stfc.ac.uk/
Tele: +44 (0) 1235 445176
STFC Rutherford Appleton Laboratory
------------------------------------
--
Scanned by iCritical.
|