Hi,
I re-generated the certs from the p12 file and it's ok now. I must have
made a mistake when I did it the first time round.
Thanks,
Emyr
On 19/07/12 12:30, Cristina Aiftimiei wrote:
> Nikolay Kutovskiy wrote:
>> It used to be necessary for some of gLite (and now maybe for
>> EMI{1,2}?) services to re-run YAIM after putting new host certificates.
>>
> ah, lost in errors I forgot that you mentioned the change of the
> certificates :-)
> did you replaced them in all places?
> # locate cert.pem
> /etc/grid-security/hostcert.pem <------------
> /etc/grid-security/tomcat-cert.pem <-----------
> /etc/pki/tls/cert.pem
> /home/glite/.certs/hostcert.pem <-----------
>
> https://wiki.italiangrid.it/twiki/bin/view/IGIRelease/HostCertificateUpdate
>
>
> The advice to run yaim is good also.
>
> Cristina
>> HTH,
>> Nikolay.
>>
>> emyr.james wrote on 19/07/12 13:48:
>>> Hi,
>>> That workaround didn't fix things. We still have the same problem.
>>> Anyone got any other ideas ?
>>> Regards,
>>> Emyr
>>>
>>>
>>> On 18/07/12 21:28, [log in to unmask] wrote:
>>>> Hi,
>>>>
>>>> from the error it seems the issue is caused by the
>>>> glite-lbjp-common-gss using the new globus-gssapi-gsi:
>>>> http://www.eu-emi.eu/emi-1-kebnekaise-updates/-/asset_publisher/hHg1/content/gss-gsoap-plugin-issues-with-globus-gssapi-gsi-%3E%3D-10-6
>>>>
>>>>
>>>>
>>>> You'll find at the link above the temporary workaround.
>>>>
>>>> Cristina
>>>>
>>>> On 7/18/12 9:37 PM, emyr.james wrote:
>>>>> Hi,
>>>>> I had cream up and running on our soon to be certified Tier 2 site.
>>>>> The computer crashed and I had to reboot it. I also had to change the
>>>>> host certificates as they had expired.
>>>>> I'm sure that the right certs are installed but am now getting the
>>>>> following...
>>>>>
>>>>> etc/init.d/gLite restart
>>>>> STOPPING SERVICES
>>>>> *** glite-ce-blahparser:
>>>>> Shutting down BNotifier: [ OK ]
>>>>> Shutting down BUpdaterSGE: [ OK ]
>>>>>
>>>>> *** glite-lb-locallogger:
>>>>> Stopping glite-lb-logd ... not running
>>>>> Stopping glite-lb-interlogd ... not running
>>>>>
>>>>> *** tomcat5:
>>>>> Stopping tomcat5: [ OK ]
>>>>>
>>>>> STARTING SERVICES
>>>>> *** tomcat5:
>>>>> Starting tomcat5: [ OK ]
>>>>>
>>>>> *** glite-lb-locallogger:
>>>>> Starting glite-lb-logd ...This is LocalLogger, part of Workload
>>>>> Management System in EU DataGrid& EGEE.
>>>>> done
>>>>> Warning: stale /var/cream_lb/glite-lb-interlogd.pid for
>>>>> glite-lb-interlogd
>>>>> Warning: stale /tmp/interlogger.sock for glite-lb-interlogd
>>>>> Starting glite-lb-interlogd ...
>>>>> Message from syslogd@ at Wed Jul 18 15:16:46 2012 ...
>>>>> grid-cream-01 syslog[13826]: FATAL CONTROL - Failed to get GSI
>>>>> credentials. Exiting.
>>>>> done
>>>>>
>>>>> *** glite-ce-blahparser:
>>>>> Starting BNotifier: /usr/bin/BNotifier: Error creating and binding
>>>>> socket: Address already in use
>>>>> [FAILED]
>>>>> Starting BUpdaterSGE:
>>>>> Message from syslogd@ at Wed Jul 18 15:16:48 2012 ...
>>>>> grid-cream-01 syslog[14000]: FATAL SECURITY - Failed to load GSI
>>>>> credential: edg_wll_gss_acquire_cred_gsi(): GSS Major Status: General
>>>>> failure (GSS Minor Status Error Chain: globus_gsi_gssapi: Unable to
>>>>> read credential for import globus_gsi_gssapi: Error with GSI
>>>>> credential globus_credential: Error reading proxy credential:
>>>>> Couldn't read PEM from bio OpenSSL Error: pem_lib.c:647: in library:
>>>>> PEM routines, function PEM_read_bio: no start line ), exiting.
>>>>> [ OK ]
>>>>>
>>>>>
>>>>> Does anyone have any ideas on how to proceed ?
>>>>>
>>>>> Regards,
>>>>>
>>>>> Emyr
>>>>>
>>>>
>>
>
>
|