Hello,
CASTORGRID (the SE at CERN) has also been upgraded now to the new CA
RPMs (v 0.28).
Cheers,
Thorsten
________________________________
From: LHC Computer Grid - Rollout
[mailto:[log in to unmask]] On Behalf Of david bouvet
Sent: Friday, April 15, 2005 11:39 AM
To: [log in to unmask]
Subject: Re: [LCG-ROLLOUT] Update your CA rpms !!!
Hi Thorsten,
Please update all the CERN nodes.
castorgrid.cern.ch seems to be not updated as you can see:
--------------
ccali13:[/afs/in2p3.fr/home/d/dbouvet/EGEE/test]edg-gridftp-ls
gsiftp://castorgrid.cern.ch/
error the server sent an error response: 535 535-FTPD GSSAPI
error: GSS Major Status: Authentication Failed
535-FTPD GSSAPI error: GSS Minor Status Error Chain:
535-FTPD GSSAPI error:
535-FTPD GSSAPI error: accept_sec_context.c:170:
gss_accept_sec_context: SSLv3 handshake problems
535-FTPD GSSAPI error: globus_i_gsi_gss_utils.c:881:
globus_i_gsi_gss_handshake: Unable to verify remote side's credentials
535-FTPD GSSAPI error: globus_i_gsi_gss_utils.c:854:
globus_i_gsi_gss_handshake: SSLv3 handshake problems: Couldn't do ssl
handshake
535-FTPD GSSAPI error: OpenSSL Error: s3_srvr.c:1816: in
library: SSL routines, function SSL3_GET_CLIENT_CERTIFICATE: no
certificate returned
535-FTPD GSSAPI error: globus_gsi_callback.c:351:
globus_i_gsi_callback_handshake_callback: Could not verify credential
535-FTPD GSSAPI error: globus_gsi_callback.c:490:
globus_i_gsi_callback_cred_verify: Could not verify credential
535-FTPD GSSAPI error: globus_gsi_callback.c:850:
globus_i_gsi_callback_check_signing_policy: Error with signing policy
535-FTPD GSSAPI error: globus_gsi_callback.c:1058:
globus_i_gsi_callback_check_gaa_auth: Error in OLD GAA code: CA policy
violation: <no reason given>
535 FTPD GSSAPI error: accepting context
error the server sent an error response: 535 535-FTPD GSSAPI
error: GSS Major Status: Authentication Failed
535-FTPD GSSAPI error: GSS Minor Status Error Chain:
535-FTPD GSSAPI error:
535-FTPD GSSAPI error: accept_sec_context.c:170:
gss_accept_sec_context: SSLv3 handshake problems
535-FTPD GSSAPI error: globus_i_gsi_gss_utils.c:881:
globus_i_gsi_gss_handshake: Unable to verify remote side's credentials
535-FTPD GSSAPI error: globus_i_gsi_gss_utils.c:854:
globus_i_gsi_gss_handshake: SSLv3 handshake problems: Couldn't do ssl
handshake
535-FTPD GSSAPI error: OpenSSL Error: s3_srvr.c:1816: in
library: SSL routines, function SSL3_GET_CLIENT_CERTIFICATE: no
certificate returned
535-FTPD GSSAPI error: globus_gsi_callback.c:351:
globus_i_gsi_callback_handshake_callback: Could not verify credential
535-FTPD GSSAPI error: globus_gsi_callback.c:490:
globus_i_gsi_callback_cred_verify: Could not verify credential
535-FTPD GSSAPI error: globus_gsi_callback.c:850:
globus_i_gsi_callback_check_signing_policy: Error with signing policy
535-FTPD GSSAPI error: globus_gsi_callback.c:1058:
globus_i_gsi_callback_check_gaa_auth: Error in OLD GAA code: CA policy
violation: <no reason given>
535 FTPD GSSAPI error: accepting context
------------
Cheers,
David.
Thorsten Kleinwort wrote:
Hello,
CERN-PROD is now on version 0.28 for the CA rpms {on
LXPLUS (UI), LXBATCH(WN), and LXGATE13(CE)} .
Cheers,
Thorsten
---
Thorsten Kleinwort email:
[log in to unmask]
CERN/IT-FIO-FS phone: +41-22-767-9576
CH-1211 Geneva 23 fax: +41-22-767-7155
Switzerland office: 31-1-009
________________________________
From: LHC Computer Grid - Rollout
[mailto:[log in to unmask]] On Behalf Of david bouvet
Sent: Thursday, April 14, 2005 10:11 AM
To: [log in to unmask]
Subject: [LCG-ROLLOUT] Update your CA rpms !!!
Dear all,
Please update your CA rpms to version 0.28 !
French CA has changed from Datagrid-Fr to
GRID-FR. So if your CA rpms are not updated on your nodes, users will
not be able to use French sites and especially French SEs, where some
important files for production might be stored.
Atlas production is already troubled with this.
Cheers,
David.
--
David BOUVET
Applications Support Coordinator - EGEE Project
team
IN2P3/CNRS Computing Centre - Lyon (FRANCE)
http://grid.in2p3.fr <http://grid.in2p3.fr/>
Tel. : +33 4 72 69 41 62 | Fax. : +33 4 72 69 41
70 | e-mail : [log in to unmask]
--
David BOUVET
Applications Support Coordinator - EGEE Project team
IN2P3/CNRS Computing Centre - Lyon (FRANCE)
http://grid.in2p3.fr <http://grid.in2p3.fr/>
Tel. : +33 4 72 69 41 62 | Fax. : +33 4 72 69 41 70 | e-mail :
[log in to unmask]
