Hi Greig,
Unfortunately, dcap ordinaire works fine and as far as I can tell both
the lcg-CA and voms server certs are up to date (if they weren't
wouldn't GridFTP fail as well?).
I can remember spending ages trying to get this to work in the past
before finally managing it.
Does anyone have a recipe from a working dCache/UI combination that does
used gsidcap to copy a file into or out of a dCache? (to test my test).
Thanks,
Chris.
> -----Original Message-----
> From: GRIDPP2: Deployment and support of SRM and local
> storage management [mailto:[log in to unmask]] On
> Behalf Of Greig Alan Cowan
> Sent: 14 January 2008 18:43
> To: [log in to unmask]
> Subject: Re: gsidcap doesn't work anymore
>
> Hi Chris,
>
> I was going to email you about this anyway as Steve T wants
> to make the
> SFT-posix test a critical test for SAM and it turns out the
> RAL-PPD is
> currently failing it (also Lancaster and IC-HEP - all dCache
> sites I note).
>
> First of all, does unauthenticated dcap work?
>
> Second, have you upgraded certificates recently on the
> gsidcap door nodes?
>
> Cheers,
> Greig
>
> On 14/01/08 18:00, Brew, CAJ (Chris) wrote:
> > Hi All,
> >
> > It turns out gsidcap access to my dCache no longer works
> all I get is:
> >
> > heplnx101 - ~ $ dccp
> >
> gsidcap://heplnx204.pp.rl.ac.uk:22128/pnfs/pp.rl.ac.uk/data/ba
> bar/user/b
> > rew/9936870.moose.01.root /tmp/gsidcap-test
> > Unable to send control message, line [3] is down
> > Failed to send Hello fd=3
> > Failed to create a control line
> > Error ( POLLIN POLLERR POLLHUP) (with data) on control line [3]
> > Failed to create a control line
> > Failed open file in the dCache.
> > Can't open source file : Server rejected "hello"
> > System error: Input/output error
> >
> > I've tried setting and unsetting DCACHE_IO_TUNNEL and
> > /opd/d-cache/dcap/lib is definitely in my LD_LIBRARY_PATH.
> >
> > All I see in the server logs is:
> >
> > 01/14 17:55:16 Cell(DCap-gsi-heplnx204@gsidcap-heplnx204Domain) :
> > Exception in secure protocol :
> > dmg.protocols.telnet.TelnetAuthenticationException:
> > Tunnel verification failed!
> > Failure unspecified at GSS-API level. Caused by
> > COM.claymoresystems.ptls.SSLThrewAlertException: Handshake failure
> > at COM.claymoresystems.ptls.SSLConn.alert(SSLConn.java:235)
> > at
> >
> COM.claymoresystems.ptls.SSLHandshakeServer.recvSSLv2ClientHel
> lo(SSLHand
> > shakeServer.java:431)
> > at
> >
> COM.claymoresystems.ptls.SSLHandshakeServer.processTokens(SSLH
> andshakeSe
> > rver.java:190)
> > at
> >
> COM.claymoresystems.ptls.SSLHandshake.processHandshake(SSLHand
> shake.java
> > :135)
> > at
> >
> org.globus.gsi.gssapi.GlobusGSSContextImpl.acceptSecContext(Gl
> obusGSSCon
> > textImpl.java:295)
> > at javatunnel.GssTunnel.verify(GssTunnel.java:189)
> > at javatunnel.GsiTunnel.verify(GsiTunnel.java:91)
> > at javatunnel.TunnelSocket.verify(TunnelSocket.java:170)
> > at
> sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> > at
> >
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccess
> orImpl.jav
> > a:39)
> > at
> >
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMeth
> odAccessor
> > Impl.java:25)
> > at java.lang.reflect.Method.invoke(Method.java:324)
> > at
> >
> dmg.protocols.telnet.TelnetStreamEngine.<init>(TelnetStreamEng
> ine.java:1
> > 08)
> > at
> >
> dmg.cells.services.login.LoginManager$RunEngineThread.run(Logi
> nManager.j
> > ava:848)
> > at java.lang.Thread.run(Thread.java:534)
> > 01/14 17:55:17 Cell(DCap-gsi-heplnx204@gsidcap-heplnx204Domain) :
> > Exception in secure protocol :
> > dmg.protocols.telnet.TelnetAuthenticationException:
> > Tunnel verification failed!
> >
> > I'm sure this used to work.
> >
> > Can anyone tell me what stupod mistake I've made this time?
> >
> > Thanks,
> > Chris.
>
|