 |
 |
On 27/08/2013 16:04, Andras Hazi wrote: > Hi, > > There is no entry with this id in the database: this is the point, the delegation has been purged by CREAM because it was expired. The problem is not at CREAM side, but at the pilot logic which handles its own delegations. Cheers, Lisa > > mysql> show databases; > +--------------------+ > | Database | > +--------------------+ > | information_schema | > | creamdb | > | delegationcreamdb | > | mysql | > | test | > +--------------------+ > 5 rows in set (0.05 sec) > > mysql> use delegationcreamdb > Reading table information for completion of table and column names > You can turn off this feature to get a quicker startup with -A > > Database changed > mysql> select * from delegation where > id="13713718882E329983wms3122Ecern2Ech"; > Empty set (0.03 sec) > > Cheers, > Andras > > > 2013-08-27 15:14 időpontban Lisa ezt írta: >> Hi Andras, >> >> could you check if such delegation exists into the DB? >> Please use: >> >> mysql> show databases; >> +--------------------+ >> | Database | >> +--------------------+ >> | information_schema | >> | creamdb | >> | delegationcreamdb | >> | delegationesdb | >> | esdb | >> | mysql | >> | test | >> +--------------------+ >> 7 rows in set (0.00 sec) >> >> mysql> use delegationcreamdb; >> Database changed >> >> mysql> select * from delegation where >> id="13713718882E329983wms3122Ecern2Ech"; >> Empty set (0.00 sec) >> >> >> Thanks a lot. >> Cheers, >> Lisa >> >> On 27/08/2013 13:57, Andras Hazi wrote: >>> Hi Lisa, >>> >>> Thank you for your reply. >>> >>> I'm sending you the requested summary of recent cream log parts >>> related to delegation mentioned before. >>> >>> Cheers, >>> Andras >>> >>> 2013-08-27 12:10 időpontban Lisa ezt írta: >>>> Hi Andreas, >>>> >>>> the possible reason could be: the delegation is expired and than >>>> purged by CREAM. In this scenario the proxy renewal operation fails >>>> because the delegation doesn't exist anymore. >>>> Please find (grep) in the CREAM logs all >>>> 13713718882E329983wms3122Ecern2Ech occurrences. It could be useful for >>>> better understanding the message error. >>>> >>>> Cheers, >>>> Lisa >>>> >>>> >>>> On 27/08/2013 11:21, Andras Hazi wrote: >>>>> Hi, >>>>> >>>>> Since we switched to CREAM/WMS ARGUS authorization and user >>>>> mapping we are experiencing some authorization problems, but it's >>>>> true >>>>> only for a few users. https://grid146.kfki.hu:8154/authz >>>>> Here is an example from latest CREAM log: >>>>> >>>>> 27 Aug 2013 01:11:44,746 ERROR >>>>> org.glite.ce.cream.delegationmanagement.cmdexecutor.DelegationExecutor >>>>> - Execution of the command "RENEW_DELEGATION_REQUEST" failed: >>>>> delegation [delegId=13713718882E329983wms3122Ecern2Ech; >>>>> dn=CN_Bhawandeep_Bhawandeep_196178_OU_GRID_O_AP_C_TW; >>>>> localUser=cms146] not found! >>>>> 27 Aug 2013 01:11:44,747 ERROR >>>>> org.glite.ce.cream.cmdmanagement.CommandManager - CommandManager >>>>> execute: RENEW_DELEGATION_REQUEST error delegation >>>>> [delegId=13713718882E329983wms3122Ecern2Ech; >>>>> dn=CN_Bhawandeep_Bhawandeep_196178_OU_GRID_O_AP_C_TW; >>>>> localUser=cms146] not found! >>>>> 27 Aug 2013 01:11:44,747 INFO >>>>> org.glite.ce.cream.cmdmanagement.CommandManager - status change >>>>> for command [ID=1377558704745; NAME="RENEW_DELEGATION_REQUEST"; >>>>> PRIORITY_LEVEL=1; IS_ASYNCHRONOUS=false; STATUS=EXECUTED-ERROR; >>>>> FAILURE_REASON="delegation >>>>> [delegId=13713718882E329983wms3122Ecern2Ech; >>>>> dn=CN_Bhawandeep_Bhawandeep_196178_OU_GRID_O_AP_C_TW; >>>>> localUser=cms146] not found!"; CATEGORY="DELEGATION_MANAGEMENT"; >>>>> EXECUTOR_NAME="DelegationExecutor"; CREATION_TIME="Tue Aug 27 >>>>> 01:11:44 CEST 2013"; START_PROCESSING_TIME="Tue Aug 27 01:11:44 >>>>> CEST 2013"; EXECUTION_COMPLETED_TIME="Tue Aug 27 01:11:44 CEST >>>>> 2013"; >>>>> USER_DN_RFC2253="CN_Bhawandeep_Bhawandeep_196178_OU_GRID_O_AP_C_TW"; >>>>> LOCAL_USER="cms146"; >>>>> DELEGATION_ID="13713718882E329983wms3122Ecern2Ech"] >>>>> >>>>> And sometimes there are messages like these (but not at the same >>>>> time): >>>>> >>>>> 27 Aug 2013 01:03:21,175 ERROR >>>>> org.glite.authz.pep.client.PEPClient - Unable to read response >>>>> from PEP Server https://grid146.kfki.hu:8154/authz >>>>> 27 Aug 2013 01:03:21,176 ERROR >>>>> org.glite.authz.pep.client.PEPClient - request failed for PEP >>>>> Server https://grid146.kfki.hu:8154/authz >>>>> 27 Aug 2013 01:03:21,176 ERROR >>>>> org.glite.authz.pep.client.PEPClient - No PEP Server >>>>> [https://grid146.kfki.hu:8154/authz] was able to process the request >>>>> 27 Aug 2013 01:03:21,176 ERROR >>>>> org.glite.ce.commonj.authz.argus.ArgusPEP - No PEP Server >>>>> [https://grid146.kfki.hu:8154/authz] was able to process the request >>>>> 27 Aug 2013 01:03:21,176 ERROR >>>>> org.glite.ce.commonj.authz.axis2.AuthorizationHandler - No PEP >>>>> Server [https://grid146.kfki.hu:8154/authz] was able to process >>>>> the request >>>>> 27 Aug 2013 01:03:21,176 ERROR org.apache.axis2.engine.AxisEngine >>>>> - Authorization error >>>>> >>>>> >>>>> Most of the services (all of the relevant ones) are up to date >>>>> (EMI 3, SL 6). >>>>> >>>>> I can't figure it out from the logs what could be the problem. Is >>>>> it related to CREAM or ARGUS? >>>>> >>>>> Cheers, >>>>> Andras