Hi,
Since we switched to CREAM/WMS ARGUS authorization and user mapping we
are experiencing some authorization problems, but it's true
only for a few users.
Here is an example from latest CREAM log:
27 Aug 2013 01:11:44,746 ERROR
org.glite.ce.cream.delegationmanagement.cmdexecutor.DelegationExecutor -
Execution of the command "RENEW_DELEGATION_REQUEST" failed: delegation
[delegId=13713718882E329983wms3122Ecern2Ech;
dn=CN_Bhawandeep_Bhawandeep_196178_OU_GRID_O_AP_C_TW; localUser=cms146]
not found!
27 Aug 2013 01:11:44,747 ERROR
org.glite.ce.cream.cmdmanagement.CommandManager - CommandManager
execute: RENEW_DELEGATION_REQUEST error delegation
[delegId=13713718882E329983wms3122Ecern2Ech;
dn=CN_Bhawandeep_Bhawandeep_196178_OU_GRID_O_AP_C_TW; localUser=cms146]
not found!
27 Aug 2013 01:11:44,747 INFO
org.glite.ce.cream.cmdmanagement.CommandManager - status change for
command [ID=1377558704745; NAME="RENEW_DELEGATION_REQUEST";
PRIORITY_LEVEL=1; IS_ASYNCHRONOUS=false; STATUS=EXECUTED-ERROR;
FAILURE_REASON="delegation [delegId=13713718882E329983wms3122Ecern2Ech;
dn=CN_Bhawandeep_Bhawandeep_196178_OU_GRID_O_AP_C_TW; localUser=cms146]
not found!"; CATEGORY="DELEGATION_MANAGEMENT";
EXECUTOR_NAME="DelegationExecutor"; CREATION_TIME="Tue Aug 27 01:11:44
CEST 2013"; START_PROCESSING_TIME="Tue Aug 27 01:11:44 CEST 2013";
EXECUTION_COMPLETED_TIME="Tue Aug 27 01:11:44 CEST 2013";
USER_DN_RFC2253="CN_Bhawandeep_Bhawandeep_196178_OU_GRID_O_AP_C_TW";
LOCAL_USER="cms146"; DELEGATION_ID="13713718882E329983wms3122Ecern2Ech"]
And sometimes there are messages like these (but not at the same time):
27 Aug 2013 01:03:21,175 ERROR org.glite.authz.pep.client.PEPClient -
Unable to read response from PEP Server
https://grid146.kfki.hu:8154/authz
27 Aug 2013 01:03:21,176 ERROR org.glite.authz.pep.client.PEPClient -
request failed for PEP Server https://grid146.kfki.hu:8154/authz
27 Aug 2013 01:03:21,176 ERROR org.glite.authz.pep.client.PEPClient -
No PEP Server [https://grid146.kfki.hu:8154/authz] was able to process
the request
27 Aug 2013 01:03:21,176 ERROR
org.glite.ce.commonj.authz.argus.ArgusPEP - No PEP Server
[https://grid146.kfki.hu:8154/authz] was able to process the request
27 Aug 2013 01:03:21,176 ERROR
org.glite.ce.commonj.authz.axis2.AuthorizationHandler - No PEP Server
[https://grid146.kfki.hu:8154/authz] was able to process the request
27 Aug 2013 01:03:21,176 ERROR org.apache.axis2.engine.AxisEngine -
Authorization error
Most of the services (all of the relevant ones) are up to date (EMI 3,
SL 6).
I can't figure it out from the logs what could be the problem. Is it
related to CREAM or ARGUS?
Cheers,
Andras
|