 |
 |
But the error I obtain has nothing to do with my proxy. It appears from users that submit to the site. On 16.04.2008, at 15:17, Alessandro Paolini wrote: > Hi Eduard, > maybe is there a problem with your proxy? > > this commands works for me: > [paolini@lcg-ui paolini]$ globus-job-run lhcb-ce.nipne.ro /usr/bin/ > whoami > dteam042 > > also as sgm user: > [paolini@lcg-ui paolini]$ globus-job-run lhcb-ce.nipne.ro /usr/bin/ > whoami > sgmdtm11 > > what is the output of voms-proxy-info --all ? > > cheers, > Alessandro > > > Eduard Pauna ha scritto: >> Hi, >> >> The time is ok. The first thing I checked. >> >> The lcas.db is: >> >> # LCAS database/plugin list >> # >> # Format of each line: >> # pluginname="<name/path of plugin>", pluginargs="<arguments>" >> # >> pluginname=lcas_userban.mod,pluginargs=ban_users.db >> pluginname=lcas_voms.mod,pluginargs="-vomsdir /etc/grid-security/ >> vomsdir/ -certdir /etc/grid-security/certificates/ -authfile /etc/ >> grid-security/grid-mapfile -authformat simple -use_user_dn" >> >> >> and >> ls -la /etc/grid-security >> >> drwxr-xr-x 5 root root 4096 Apr 16 13:20 . >> drwxr-xr-x 77 root root 12288 Apr 16 13:05 .. >> drwxr-xr-x 2 root root 20480 Apr 16 12:16 certificates >> drwxrwx--- 2 root edguser 20480 Apr 16 13:23 gridmapdir >> -rw-r--r-- 1 root root 53913 Apr 16 13:23 grid-mapfile >> -rw-r--r-- 1 root root 53913 Apr 16 13:06 grid-mapfile.1 >> -rw-r--r-- 1 root root 548 Apr 16 13:06 groupmapfile >> -rw-r--r-- 1 root root 81 Apr 16 12:17 gsi-authz.conf >> -rw-r--r-- 1 root root 4866 Apr 16 10:48 hostcert.pem >> -r-------- 1 root root 887 Apr 16 10:48 hostkey.pem >> drwxr-xr-x 5 root root 4096 Apr 16 12:19 vomsdir >> -rw-r--r-- 1 root root 552 Apr 16 13:06 voms-grid-mapfile >> >> All seems ok to me. >> >> Cheers, >> Eduard >> On 16.04.2008, at 13:26, Oscar Koeroo wrote: >> >>> Hi, >>> >>> >>> I would focus on this chunk of the log: >>> >>> LCAS 0: lcas_plugin_voms- >>> plugin_confirm_authorization_from_x509(): Generic verification >>> error for VOMS (failure): AC not yet (or not anymore) valid. >>> LCAS 0: lcas.mod-lcas_run_va(): authorization failed for plugin / >>> opt/glite/lib/modules/lcas_voms.mod >>> >>> Check the paths that are configured in the lcas.db that they point >>> to the directories and files that they should be pointing to. I >>> would have a look at the machine if it is correctly running on time. >>> >>> >>> cheers, >>> >>> Oscar >>> >>> >>> >>> Eduard Pauna wrote: >>>> Hi all, >>>> Because nothing worked I did a fresh install with the right >>>> repository for MON, I reconfigured and still not working. Some >>>> authentication problem appear. From globus-gatekeeper.log: >>>> Failed reading length 0 >>>> GSS authentication failure globus_gss_assist token :3: read >>>> failure: Connection closed >>>> Failure: GSS failed Major:01090000 Minor:00000000 Token:00000003 >>>> TIME: Wed Apr 16 13:08:49 2008 >>>> PID: 30467 -- Failure: GSS failed Major:01090000 Minor:00000000 >>>> Token:00000003 >>>> TIME: Wed Apr 16 13:09:21 2008 >>>> PID: 30609 -- Notice: 6: Got connection 128.142.173.82 at Wed Apr >>>> 16 13:09:21 2008 >>>> TIME: Wed Apr 16 13:09:21 2008 >>>> PID: 30609 -- Notice: 5: Authenticated globus user: /DC=es/ >>>> DC=irisgrid/O=ecm-ub/CN=Ricardo-Graciani-Diaz >>>> lcas client name: /DC=es/DC=irisgrid/O=ecm-ub/CN=Ricardo-Graciani- >>>> Diaz >>>> LCAS 0: LCAS 1: Initialization LCAS version 1.3.7.0 >>>> allowing empty credentials >>>> LCAS 2: LCAS authorization request >>>> LCAS 0: lcas_userban.mod-plugin_confirm_authorization(): >>>> checking banned users in /opt/glite/etc/lcas/ban_users.db >>>> LCAS 0: lcas_plugin_voms- >>>> plugin_confirm_authorization_from_x509(): Generic verification >>>> error for VOMS (failure): AC not yet (or not anymore) valid. >>>> LCAS 0: 2008-04-16.13:09:21 : lcas_plugin_voms- >>>> plugin_confirm_authorization_from_x509(): voms plugin failed >>>> LCAS 0: lcas.mod-lcas_run_va(): authorization failed for >>>> plugin /opt/glite/lib/modules/lcas_voms.mod >>>> LCAS 0: lcas.mod-lcas_run_va(): failed >>>> Any hints? >>>> On 16.04.2008, at 10:44, Raúl Sampedro Martín wrote: >>>>> Hello * >>>>> >>>>> The last week I installed the meta-package glite-MON in SL4.5, >>>>> and this is the repository that I used. I hope will be helpfully >>>>> for you >>>>> >>>>> [glite-MON] >>>>> name=gLite 3.1 Monbox >>>>> baseurl=http://linuxsoft.cern.ch/EGEE/gLite/R3.1/glite-MON/sl4/$basearch/ >>>>> enable=1 >>>>> >>>>> >>>>> cheers! >>>>> >>>>> On Wed, Apr 16, 2008 at 9:43 AM, Raúl Sampedro Martín <[log in to unmask] >>>>> <mailto:[log in to unmask]>> wrote: >>>>> >>>>> >>>>> >>>>> On Wed, Apr 16, 2008 at 9:25 AM, Christian Neissner >>>>> <[log in to unmask] <mailto:[log in to unmask]>> wrote: >>>>> >>>>> Hi Eduard, >>>>> >>>>> and as I wrote as well in the mail it it's a pre-production >>>>> repo. At the time I wrote the mail the glite-MON 3.1 has not >>>>> yet been in production. Sorry for causing confusion. >>>>> >>>>> Regards, >>>>> Christian. >>>>> >>>>> Eduard Pauna wrote: >>>>> >>>>> Hi Maarten, >>>>> >>>>> The repository for the MON I got it because I tried to >>>>> install a MON on slc4 and the only reference I found was >>>>> here in the ROLLOUT. An e-mail from Christian Neissner >>>>> wrote: >>>>> >>>>> Raul Sampedro wrote: >>>>> >>>>> Hello, >>>>> >>>>> Anyone knows what are the repositories to get >>>>> glite-MON for SL4 using yum?? >>>>> >>>>> thanks in advance. >>>>> >>>>> AFAIK this service is still in SA3 certification, >>>>> isn't it? >>>>> >>>>> Sorry, I was wrong, it is in pre-production, e.g. >>>>> http://grid-deployment.we.cern.ch/grid-deployment/glite/pps/3.1/generic/sl4/i386 >>>>> works. >>>>> >>>>> Don't know if the repos from CNAF are available as >>>>> well... >>>>> On 16.04.2008, at 01:00, Maarten Litmaath wrote: >>>>> No I changed the repository for MON also. Now I am >>>>> doing a >>>>> reconfiguration and hope it will work. >>>>> Cheers,Eduard >>>>> >>>>> On Tue, 15 Apr 2008, Maarten Litmaath wrote: >>>>> >>>>> Hi Eduard, >>>>> you have rpms installed that were not yet >>>>> released >>>>> to production: >>>>> >>>>> glite-yaim-lcg-ce-4.0.4-2 >>>>> lcg-extra-jobmanagers-1.1.13-3 >>>>> vdt_globus_jobmanager_common- >>>>> VDT1.6.0x86_rhas_4_LCG-1 >>>>> >>>>> We need to find which of your yum repositories >>>>> provided these >>>>> and either remove it from the list, or fix its >>>>> contents. >>>>> >>>>> This mixture is sufficient to cause all job >>>>> submission to fail! >>>>> >>>>> >>>>> The guilty party is: >>>>> >>>>> >>>>> ----------------------------------------------------------------------------- >>>>> -rw-r--r-- 1 root root 357 Mar 13 08:54 >>>>> /etc/yum.repos.d/glite-MON.repo >>>>> >>>>> ----------------------------------------------------------------------------- >>>>> >>>>> It contains: >>>>> >>>>> >>>>> ----------------------------------------------------------------------------- >>>>> # This is the official YUM repository string for the >>>>> glite 3.1 BDII >>>>> # Fetched from: >>>>> http://grid-deployment.web.cern.ch/grid-deployment/yaim/repos/glite-BDII.repo >>>>> # Place it to /etc/yum.repos.d/ and run 'yum update' >>>>> >>>>> [glite-MON] >>>>> name=gLite 3.1 MON service >>>>> baseurl=http://grid-deployment.web.cern.ch/grid-deployment/glite/pps/3.1/generic/sl4/i386/ >>>>> enabled=1 >>>>> >>>>> ----------------------------------------------------------------------------- >>>>> >>>>> It looks like someone put in the wrong URL, or >>>>> forgot >>>>> to update it. >>>>> How did you get that file? Probably not from the >>>>> commented URL! >>>>> >>>>> In fact, there is not even a glite-MON.repo there... >>>>> >>>>> I will look further into the matter. In the >>>>> meantime, >>>>> please correct it: >>>>> >>>>> >>>>> ----------------------------------------------------------------------------- >>>>> baseurl=http://linuxsoft.cern.ch/EGEE/gLite/R3.1/glite-MON/sl4/i386/ >>>>> >>>>> ----------------------------------------------------------------------------- >>>>> >>>>> Then you need to adjust the middleware rpms to those >>>>> in the latest lcg-CE >>>>> release: >>>>> >>>>> http://glite.web.cern.ch/glite/packages/R3.1/deployment/lcg-CE/lcg-CE.asp >>>>> >>>>> A reconfiguration is recommended as well. >>>>> >>>>> >>>>> >>>>> >>> >>> > > > -- > Dr. Alessandro Paolini > INFN - CNAF > Viale Berti Pichat 6/2 > 40127 Bologna > Italy > tel: +39 051 6092723 > fax: +39 051 6092746 > ICQ: 192172027 > skype: alex.paolini > ********************** > "credo nel potere del riso e delle lacrime" > "come antidoto all'odio ed al terrore" > "un giorno senza un sorriso" > "è un giorno perso" >>> Charlie Chaplin