Hi,
I fellow the indications and in the cream.log file i find the
following errors:
11 Mar 2011 17:07:05,783 ERROR org.glite.voms.PKIVerifier
(PKIVerifier.java:391) - (TP-Processor22) Cannot find usable
certificates to validate the AC. Check that the voms server host
certificate is in your vomsdir directory.
and:
11 Mar 2011 17:07:05,821 ERROR
org.glite.ce.commonj.authz.AuthorizationHandler
(AuthorizationHandler.java:258) - (TP-Processor22) User
C=IT,O=INFN,OU=Personal Certificate,L=Milano,CN=Davide Rebatto not
authorized for operation QueryEvent
and:
AxisFault
faultCode: {http://schemas.xmlsoap.org/soap/
envelope/}Server.generalException
faultSubcode:
faultString:
faultActor:
faultNode:
faultDetail:
{http://xml.apache.org/
axis
/}exceptionName:org.glite.ce.creamapi.ws.cream2.types.AuthorizationFault
.........
at
org
.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:
117)
.....
{http://xml.apache.org/axis/}hostname:atlasce2
......
at
org
.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:
117)
and so on the error series appear again
In the /etc/grid-security/vomsdir there ais the VO directories
[root@atlasce2 vomsdir]# ll
total 20
drwxr-xr-x 2 root root 4096 Mar 9 15:45 atlas
drwxr-xr-x 2 root root 4096 Mar 9 15:45 dteam
drwxr-xr-x 2 root root 4096 Mar 9 15:45 gridit
drwxr-xr-x 2 root root 4096 Mar 9 15:45 infngrid
drwxr-xr-x 2 root root 4096 Mar 9 15:45 ops
and into them there is the lsc files
[root@atlasce2 vomsdir]# ll dteam/
total 16
-rw-r--r-- 1 root root 103 Mar 11 13:41 lcg-voms.cern.ch.lsc
-rw-r--r-- 1 root root 129 Mar 11 13:41 voms2.hellasgrid.gr.lsc
-rw-r--r-- 1 root root 99 Mar 11 13:41 voms.cern.ch.lsc
-rw-r--r-- 1 root root 128 Mar 11 13:41 voms.hellasgrid.gr.lsc
Into vomsdir there is not the voms server certificate but in the
installation instructions it is indicated that is not necessary to
have them. That right?
where can i look to find the problem?
cheers
agnese
On 11 Mar 2011, at 16:27, Massimo Sgaravatto - INFN Padova wrote:
> Here:
>
> http://grid.pd.infn.it/cream/field.php?n=Main.ErrorMessagesReportedByCREAMToClient#usernotaut
>
> you can find some info to debug this problem
>
> Cheers, Massimo
>
>
> On Fri, 11 Mar 2011, Agnese Martini wrote:
>
>> Hello
>>
>> I am configuring a cream ce like secondary CE ( the batch systemPBS
>> is running on the LCG-CE)
>>
>> I make all the step of the installation and configuration but now
>> the job that arrive throug the WMS (the nagios tests are OK)
>> failled because they can't authenticate
>> the user.
>> the error is:
>>
>> Status info for the Job : https://lb002.cnaf.infn.it:9000/0xl6weG4RFtINpxkZ1gAqQ
>> Current Status: Done (Failed)
>> Logged Reason(s):
>> - Transfer to CREAM failed due to exception: Failed to create a
>> delegation id for job https://lb002.cnaf.infn.it:9000/0xl6weG4RFtINpxkZ1gAqQ
>> : reason is User C=IT,O=INFN,OU=Personal
>> Certificate,L=LNF,CN=Agnese Martini not authorized for operation {http://www.gridsite.org/namespaces/delegation-2
>> }getProxyReq
>>
>>
>> and if I try:
>>
>> glite-ce-allowed-submission atlasce2.lnf.infn.it:8443
>>
>> 2011-03-11 16:05:17,372 WARN - No configuration file suitable for
>> loading. Using built-in configuration
>> 2011-03-11 16:05:17,425 ERROR - MethodName=[invoke] ErrorCode=[0]
>> Description=[User C=IT,O=INFN,OU=Personal
>> Certificate,L=LNF,CN=Agnese Martini not authorized for operation
>> getServiceInfo] FaultCause=[User C=IT,O=INFN,OU=Personal
>> Certificate,L=LNF,CN=Agnese Martini not authorized for operation
>> getServiceInfo] Timestamp=[Fri 11 Mar 2011 16:05:17]
>>
>> in both cases I have a valid login on atlas VO that the site supports
>>
>> some help?
>>
>> agnese martini
>
> \|||/
> -----------0oo----( o o )----oo0-------------------
> (_)
> INFN Sezione di Padova
> Via Marzolo, 8
> 35131 Padova - Italy E-mail: massimo.sgaravatto [at] pd.infn.it
> Tel: ++39 0499677360 Skype: massimo.sgaravatto
> Fax: ++39 0498275952
