Nikolay Kutovskiy wrote:
> It used to be necessary for some of gLite (and now maybe for
> EMI{1,2}?) services to re-run YAIM after putting new host certificates.
>
ah, lost in errors I forgot that you mentioned the change of the
certificates :-)
did you replaced them in all places?
# locate cert.pem
/etc/grid-security/hostcert.pem <------------
/etc/grid-security/tomcat-cert.pem <-----------
/etc/pki/tls/cert.pem
/home/glite/.certs/hostcert.pem <-----------
https://wiki.italiangrid.it/twiki/bin/view/IGIRelease/HostCertificateUpdate
The advice to run yaim is good also.
Cristina
> HTH,
> Nikolay.
>
> emyr.james wrote on 19/07/12 13:48:
>> Hi,
>> That workaround didn't fix things. We still have the same problem.
>> Anyone got any other ideas ?
>> Regards,
>> Emyr
>>
>>
>> On 18/07/12 21:28, [log in to unmask] wrote:
>>> Hi,
>>>
>>> from the error it seems the issue is caused by the
>>> glite-lbjp-common-gss using the new globus-gssapi-gsi:
>>> http://www.eu-emi.eu/emi-1-kebnekaise-updates/-/asset_publisher/hHg1/content/gss-gsoap-plugin-issues-with-globus-gssapi-gsi-%3E%3D-10-6
>>>
>>>
>>>
>>> You'll find at the link above the temporary workaround.
>>>
>>> Cristina
>>>
>>> On 7/18/12 9:37 PM, emyr.james wrote:
>>>> Hi,
>>>> I had cream up and running on our soon to be certified Tier 2 site.
>>>> The computer crashed and I had to reboot it. I also had to change the
>>>> host certificates as they had expired.
>>>> I'm sure that the right certs are installed but am now getting the
>>>> following...
>>>>
>>>> etc/init.d/gLite restart
>>>> STOPPING SERVICES
>>>> *** glite-ce-blahparser:
>>>> Shutting down BNotifier: [ OK ]
>>>> Shutting down BUpdaterSGE: [ OK ]
>>>>
>>>> *** glite-lb-locallogger:
>>>> Stopping glite-lb-logd ... not running
>>>> Stopping glite-lb-interlogd ... not running
>>>>
>>>> *** tomcat5:
>>>> Stopping tomcat5: [ OK ]
>>>>
>>>> STARTING SERVICES
>>>> *** tomcat5:
>>>> Starting tomcat5: [ OK ]
>>>>
>>>> *** glite-lb-locallogger:
>>>> Starting glite-lb-logd ...This is LocalLogger, part of Workload
>>>> Management System in EU DataGrid& EGEE.
>>>> done
>>>> Warning: stale /var/cream_lb/glite-lb-interlogd.pid for
>>>> glite-lb-interlogd
>>>> Warning: stale /tmp/interlogger.sock for glite-lb-interlogd
>>>> Starting glite-lb-interlogd ...
>>>> Message from syslogd@ at Wed Jul 18 15:16:46 2012 ...
>>>> grid-cream-01 syslog[13826]: FATAL CONTROL - Failed to get GSI
>>>> credentials. Exiting.
>>>> done
>>>>
>>>> *** glite-ce-blahparser:
>>>> Starting BNotifier: /usr/bin/BNotifier: Error creating and binding
>>>> socket: Address already in use
>>>> [FAILED]
>>>> Starting BUpdaterSGE:
>>>> Message from syslogd@ at Wed Jul 18 15:16:48 2012 ...
>>>> grid-cream-01 syslog[14000]: FATAL SECURITY - Failed to load GSI
>>>> credential: edg_wll_gss_acquire_cred_gsi(): GSS Major Status: General
>>>> failure (GSS Minor Status Error Chain: globus_gsi_gssapi: Unable to
>>>> read credential for import globus_gsi_gssapi: Error with GSI
>>>> credential globus_credential: Error reading proxy credential:
>>>> Couldn't read PEM from bio OpenSSL Error: pem_lib.c:647: in library:
>>>> PEM routines, function PEM_read_bio: no start line ), exiting.
>>>> [ OK ]
>>>>
>>>>
>>>> Does anyone have any ideas on how to proceed ?
>>>>
>>>> Regards,
>>>>
>>>> Emyr
>>>>
>>>
>
--
Cristina Aiftimiei - EMI Project
Ist. Naz. di Fisica Nucleare - Padova
Address: via F. Marzolo, 8 - 35131 Padova - ITALY
Phone: +39.049.967.7362
Mobile: +39.3460230488
|