On Mar 6, 2013, at 1:47 PM, Felix Farcas wrote:
> Hello
>
> I have a Storage element in Romania on site RO-14-ITIM.
>
> I tried today to recompile when changing the certificates.
>
> I had a lot of error.
Hi Felix,
It looks like your host certificate has a problem, e.g. if I try connecting with gridftp
Error in OLD GAA code: The subject of the certificate "/DC=RO/DC=RomaniaGRID/O=ITIM/CN=cn-se1.itim-cj.ro" does not match the signing policies defined in /etc/grid-security/certificates/1f3834d0.signing_policy
and signing policy I have for the CA says:
cond_subjects globus '"/DC=RO/DC=RomanianGRID/*"'
Note the certificate says "DC=RomaniaGRID" and the policy says "DC=RomanianGRID". Double check with your CA.
The voms search errors in the yaim log are probably harmless, but shows you've got (some) old definitions for the dteam voms servers. You could check you have only the hellasgrid server defined:
VO_DTEAM_VOMS_SERVERS='vomss://voms.hellasgrid.gr:8443/voms/dteam?/dteam/'
VO_DTEAM_VOMSES="\
'dteam voms.hellasgrid.gr 15004 \
/C=GR/O=HellasGrid/OU=hellasgrid.gr/CN=voms.hellasgrid.gr dteam 24' \
'dteam voms2.hellasgrid.gr 15004 \
/C=GR/O=HellasGrid/OU=hellasgrid.gr/CN=voms2.hellasgrid.gr dteam 24' \
"
VO_DTEAM_VOMS_CA_DN="\
'/C=GR/O=HellasGrid/OU=Certification Authorities/CN=HellasGrid CA 2006' \
'/C=GR/O=HellasGrid/OU=Certification Authorities/CN=HellasGrid CA 2006' \
"
in your site-info.def or (without the VO_DTEAM_ prefix) in your vo.d/dteam file.
The backtraces from dpns-mkdir are due to a bug which is being triggered by the certificate problems.
Yours,
David
--
-------------------------------------------------------------------------
David Smith e-mail: [log in to unmask] tel: +41 22 76 70394
Address: D. Smith, CERN G07310, Bat 28 R-004, 1211 Geneva 23, Switzerland
-------------------------------------------------------------------------
|