But the error I obtain has nothing to do with my proxy. It appears
from users that submit to the site.
On 16.04.2008, at 15:17, Alessandro Paolini wrote:
> Hi Eduard,
> maybe is there a problem with your proxy?
>
> this commands works for me:
> [paolini@lcg-ui paolini]$ globus-job-run lhcb-ce.nipne.ro /usr/bin/
> whoami
> dteam042
>
> also as sgm user:
> [paolini@lcg-ui paolini]$ globus-job-run lhcb-ce.nipne.ro /usr/bin/
> whoami
> sgmdtm11
>
> what is the output of voms-proxy-info --all ?
>
> cheers,
> Alessandro
>
>
> Eduard Pauna ha scritto:
>> Hi,
>>
>> The time is ok. The first thing I checked.
>>
>> The lcas.db is:
>>
>> # LCAS database/plugin list
>> #
>> # Format of each line:
>> # pluginname="<name/path of plugin>", pluginargs="<arguments>"
>> #
>> pluginname=lcas_userban.mod,pluginargs=ban_users.db
>> pluginname=lcas_voms.mod,pluginargs="-vomsdir /etc/grid-security/
>> vomsdir/ -certdir /etc/grid-security/certificates/ -authfile /etc/
>> grid-security/grid-mapfile -authformat simple -use_user_dn"
>>
>>
>> and
>> ls -la /etc/grid-security
>>
>> drwxr-xr-x 5 root root 4096 Apr 16 13:20 .
>> drwxr-xr-x 77 root root 12288 Apr 16 13:05 ..
>> drwxr-xr-x 2 root root 20480 Apr 16 12:16 certificates
>> drwxrwx--- 2 root edguser 20480 Apr 16 13:23 gridmapdir
>> -rw-r--r-- 1 root root 53913 Apr 16 13:23 grid-mapfile
>> -rw-r--r-- 1 root root 53913 Apr 16 13:06 grid-mapfile.1
>> -rw-r--r-- 1 root root 548 Apr 16 13:06 groupmapfile
>> -rw-r--r-- 1 root root 81 Apr 16 12:17 gsi-authz.conf
>> -rw-r--r-- 1 root root 4866 Apr 16 10:48 hostcert.pem
>> -r-------- 1 root root 887 Apr 16 10:48 hostkey.pem
>> drwxr-xr-x 5 root root 4096 Apr 16 12:19 vomsdir
>> -rw-r--r-- 1 root root 552 Apr 16 13:06 voms-grid-mapfile
>>
>> All seems ok to me.
>>
>> Cheers,
>> Eduard
>> On 16.04.2008, at 13:26, Oscar Koeroo wrote:
>>
>>> Hi,
>>>
>>>
>>> I would focus on this chunk of the log:
>>>
>>> LCAS 0: lcas_plugin_voms-
>>> plugin_confirm_authorization_from_x509(): Generic verification
>>> error for VOMS (failure): AC not yet (or not anymore) valid.
>>> LCAS 0: lcas.mod-lcas_run_va(): authorization failed for plugin /
>>> opt/glite/lib/modules/lcas_voms.mod
>>>
>>> Check the paths that are configured in the lcas.db that they point
>>> to the directories and files that they should be pointing to. I
>>> would have a look at the machine if it is correctly running on time.
>>>
>>>
>>> cheers,
>>>
>>> Oscar
>>>
>>>
>>>
>>> Eduard Pauna wrote:
>>>> Hi all,
>>>> Because nothing worked I did a fresh install with the right
>>>> repository for MON, I reconfigured and still not working. Some
>>>> authentication problem appear. From globus-gatekeeper.log:
>>>> Failed reading length 0
>>>> GSS authentication failure globus_gss_assist token :3: read
>>>> failure: Connection closed
>>>> Failure: GSS failed Major:01090000 Minor:00000000 Token:00000003
>>>> TIME: Wed Apr 16 13:08:49 2008
>>>> PID: 30467 -- Failure: GSS failed Major:01090000 Minor:00000000
>>>> Token:00000003
>>>> TIME: Wed Apr 16 13:09:21 2008
>>>> PID: 30609 -- Notice: 6: Got connection 128.142.173.82 at Wed Apr
>>>> 16 13:09:21 2008
>>>> TIME: Wed Apr 16 13:09:21 2008
>>>> PID: 30609 -- Notice: 5: Authenticated globus user: /DC=es/
>>>> DC=irisgrid/O=ecm-ub/CN=Ricardo-Graciani-Diaz
>>>> lcas client name: /DC=es/DC=irisgrid/O=ecm-ub/CN=Ricardo-Graciani-
>>>> Diaz
>>>> LCAS 0: LCAS 1: Initialization LCAS version 1.3.7.0
>>>> allowing empty credentials
>>>> LCAS 2: LCAS authorization request
>>>> LCAS 0: lcas_userban.mod-plugin_confirm_authorization():
>>>> checking banned users in /opt/glite/etc/lcas/ban_users.db
>>>> LCAS 0: lcas_plugin_voms-
>>>> plugin_confirm_authorization_from_x509(): Generic verification
>>>> error for VOMS (failure): AC not yet (or not anymore) valid.
>>>> LCAS 0: 2008-04-16.13:09:21 : lcas_plugin_voms-
>>>> plugin_confirm_authorization_from_x509(): voms plugin failed
>>>> LCAS 0: lcas.mod-lcas_run_va(): authorization failed for
>>>> plugin /opt/glite/lib/modules/lcas_voms.mod
>>>> LCAS 0: lcas.mod-lcas_run_va(): failed
>>>> Any hints?
>>>> On 16.04.2008, at 10:44, Raúl Sampedro Martín wrote:
>>>>> Hello *
>>>>>
>>>>> The last week I installed the meta-package glite-MON in SL4.5,
>>>>> and this is the repository that I used. I hope will be helpfully
>>>>> for you
>>>>>
>>>>> [glite-MON]
>>>>> name=gLite 3.1 Monbox
>>>>> baseurl=http://linuxsoft.cern.ch/EGEE/gLite/R3.1/glite-MON/sl4/$basearch/
>>>>> enable=1
>>>>>
>>>>>
>>>>> cheers!
>>>>>
>>>>> On Wed, Apr 16, 2008 at 9:43 AM, Raúl Sampedro Martín <[log in to unmask]
>>>>> <mailto:[log in to unmask]>> wrote:
>>>>>
>>>>>
>>>>>
>>>>> On Wed, Apr 16, 2008 at 9:25 AM, Christian Neissner
>>>>> <[log in to unmask] <mailto:[log in to unmask]>> wrote:
>>>>>
>>>>> Hi Eduard,
>>>>>
>>>>> and as I wrote as well in the mail it it's a pre-production
>>>>> repo. At the time I wrote the mail the glite-MON 3.1 has not
>>>>> yet been in production. Sorry for causing confusion.
>>>>>
>>>>> Regards,
>>>>> Christian.
>>>>>
>>>>> Eduard Pauna wrote:
>>>>>
>>>>> Hi Maarten,
>>>>>
>>>>> The repository for the MON I got it because I tried to
>>>>> install a MON on slc4 and the only reference I found was
>>>>> here in the ROLLOUT. An e-mail from Christian Neissner
>>>>> wrote:
>>>>>
>>>>> Raul Sampedro wrote:
>>>>>
>>>>> Hello,
>>>>>
>>>>> Anyone knows what are the repositories to get
>>>>> glite-MON for SL4 using yum??
>>>>>
>>>>> thanks in advance.
>>>>>
>>>>> AFAIK this service is still in SA3 certification,
>>>>> isn't it?
>>>>>
>>>>> Sorry, I was wrong, it is in pre-production, e.g.
>>>>> http://grid-deployment.we.cern.ch/grid-deployment/glite/pps/3.1/generic/sl4/i386
>>>>> works.
>>>>>
>>>>> Don't know if the repos from CNAF are available as
>>>>> well...
>>>>> On 16.04.2008, at 01:00, Maarten Litmaath wrote:
>>>>> No I changed the repository for MON also. Now I am
>>>>> doing a
>>>>> reconfiguration and hope it will work.
>>>>> Cheers,Eduard
>>>>>
>>>>> On Tue, 15 Apr 2008, Maarten Litmaath wrote:
>>>>>
>>>>> Hi Eduard,
>>>>> you have rpms installed that were not yet
>>>>> released
>>>>> to production:
>>>>>
>>>>> glite-yaim-lcg-ce-4.0.4-2
>>>>> lcg-extra-jobmanagers-1.1.13-3
>>>>> vdt_globus_jobmanager_common-
>>>>> VDT1.6.0x86_rhas_4_LCG-1
>>>>>
>>>>> We need to find which of your yum repositories
>>>>> provided these
>>>>> and either remove it from the list, or fix its
>>>>> contents.
>>>>>
>>>>> This mixture is sufficient to cause all job
>>>>> submission to fail!
>>>>>
>>>>>
>>>>> The guilty party is:
>>>>>
>>>>>
>>>>> -----------------------------------------------------------------------------
>>>>> -rw-r--r-- 1 root root 357 Mar 13 08:54
>>>>> /etc/yum.repos.d/glite-MON.repo
>>>>>
>>>>> -----------------------------------------------------------------------------
>>>>>
>>>>> It contains:
>>>>>
>>>>>
>>>>> -----------------------------------------------------------------------------
>>>>> # This is the official YUM repository string for the
>>>>> glite 3.1 BDII
>>>>> # Fetched from:
>>>>> http://grid-deployment.web.cern.ch/grid-deployment/yaim/repos/glite-BDII.repo
>>>>> # Place it to /etc/yum.repos.d/ and run 'yum update'
>>>>>
>>>>> [glite-MON]
>>>>> name=gLite 3.1 MON service
>>>>> baseurl=http://grid-deployment.web.cern.ch/grid-deployment/glite/pps/3.1/generic/sl4/i386/
>>>>> enabled=1
>>>>>
>>>>> -----------------------------------------------------------------------------
>>>>>
>>>>> It looks like someone put in the wrong URL, or
>>>>> forgot
>>>>> to update it.
>>>>> How did you get that file? Probably not from the
>>>>> commented URL!
>>>>>
>>>>> In fact, there is not even a glite-MON.repo there...
>>>>>
>>>>> I will look further into the matter. In the
>>>>> meantime,
>>>>> please correct it:
>>>>>
>>>>>
>>>>> -----------------------------------------------------------------------------
>>>>> baseurl=http://linuxsoft.cern.ch/EGEE/gLite/R3.1/glite-MON/sl4/i386/
>>>>>
>>>>> -----------------------------------------------------------------------------
>>>>>
>>>>> Then you need to adjust the middleware rpms to those
>>>>> in the latest lcg-CE
>>>>> release:
>>>>>
>>>>> http://glite.web.cern.ch/glite/packages/R3.1/deployment/lcg-CE/lcg-CE.asp
>>>>>
>>>>> A reconfiguration is recommended as well.
>>>>>
>>>>>
>>>>>
>>>>>
>>>
>>>
>
>
> --
> Dr. Alessandro Paolini
> INFN - CNAF
> Viale Berti Pichat 6/2
> 40127 Bologna
> Italy
> tel: +39 051 6092723
> fax: +39 051 6092746
> ICQ: 192172027
> skype: alex.paolini
> **********************
> "credo nel potere del riso e delle lacrime"
> "come antidoto all'odio ed al terrore"
> "un giorno senza un sorriso"
> "è un giorno perso" >>> Charlie Chaplin
|
