Hi,
could it be
https://ggus.eu/tech/ticket_show.php?ticket=77256
?
Cheers,
Mischa
On Thu, Feb 28, 2013 at 12:43:42PM +0000, Gonçalo Borges wrote:
> Dear All...
>
> A user is not being authorized in my WMS (WMProxy Version: 3.3.5).
> However, myself under the same VO is fine. Moreover, the user in
> other WMS (WMProxy Version: 3.3.1) is also fine.
>
> Here is one the comparison between the information showed in
> wmproxy.log between the users submission and my submission. The
> obvious differences that I see is that the user info shows
>
> ---*---
> Remote GRST CRED: Not Available
> (...)
> 28 Feb, 10:45:01 -E- PID: 21913 - "WMPAuthorizer::authorize": Cannot
> extract fqan from gridsite
> ---*---
>
> While in my case I have
>
> ---*---
> Remote GRST CRED: VOMS 1362049626 0 0
> /phys.vo.ibergrid.eu/Role=NULL/Capability=NULL
> ---*---
>
> ================== Incoming Request ==================
> 28 Feb, 10:45:01 -I- PID: 21913 - "wmpcommon::initWMProxyOperation":
> Called Operation: getProxyReq
> 28 Feb, 10:45:01 -I- PID: 21913 - "wmpcommon::initWMProxyOperation":
> Remote Host Name: buxus.man.poznan.pl
> 28 Feb, 10:45:01 -I- PID: 21913 - "wmpcommon::initWMProxyOperation":
> Remote CLIENT S DN: /C=PL/O=GRID/O=PSNC/CN=Marcin
> Plociennik/CN=proxy
> 28 Feb, 10:45:01 -I- PID: 21913 - "wmpcommon::initWMProxyOperation":
> Remote GRST CRED: Not Available
> 28 Feb, 10:45:01 -I- PID: 21913 - "wmpcommon::initWMProxyOperation":
> Service GRST PROXY LIMIT: 6
> 28 Feb, 10:45:01 -I- PID: 21913 - "wmpcommon::initWMProxyOperation":
> WMProxy instance serving core request N.: 42
> 28 Feb, 10:45:01 -E- PID: 21913 - "WMPAuthorizer::authorize": Cannot
> extract fqan from gridsite
>
>
> ================== Incoming Request ==================
> 28 Feb, 11:07:55 -I- PID: 5260 - "wmpcommon::initWMProxyOperation":
> Called Operation: jobStart
> 28 Feb, 11:07:55 -I- PID: 5260 - "wmpcommon::initWMProxyOperation":
> Remote Host Name: ui6.ncg.ingrid.pt
> 28 Feb, 11:07:55 -I- PID: 5260 - "wmpcommon::initWMProxyOperation":
> Remote CLIENT S DN: /C=PT/O=LIPCA/O=LIP/OU=Lisboa/CN=Goncalo
> Borges/CN=proxy
> 28 Feb, 11:07:55 -I- PID: 5260 - "wmpcommon::initWMProxyOperation":
> Remote GRST CRED: VOMS 1362049626 0 0
> /phys.vo.ibergrid.eu/Role=NULL/Capability=NULL
> 28 Feb, 11:07:55 -I- PID: 5260 - "wmpcommon::initWMProxyOperation":
> Service GRST PROXY LIMIT: 6
> 28 Feb, 11:07:55 -I- PID: 5260 - "wmpcommon::initWMProxyOperation":
> WMProxy instance serving core request N.: 34
> 28 Feb, 11:07:56 -I- PID: 5260 - "wmpcommon::getType": JDL Type: job
>
> A more detailed log for the user submission than the previous one is
> attached.
>
> For me, the million dolar question is why the user is getting
> *Remote GRST CRED: Not Available*
>
>
> GGUS Reference: https://ggus.eu/ws/ticket_info.php?ticket=91860
>
> Thank You
> Goncalo
> 28 Feb, 12:11:00 -I- PID: 4032 - "wmpcommon::initWMProxyOperation": ================== Incoming Request ==================
> 28 Feb, 12:11:00 -I- PID: 4032 - "wmpcommon::initWMProxyOperation": Called Operation: getProxyReq
> 28 Feb, 12:11:00 -D- PID: 4032 - "wmpcommon::initWMProxyOperation": Remote Host Address: 150.254.148.59:60275
> 28 Feb, 12:11:00 -I- PID: 4032 - "wmpcommon::initWMProxyOperation": Remote Host Name: buxus.man.poznan.pl
> 28 Feb, 12:11:00 -I- PID: 4032 - "wmpcommon::initWMProxyOperation": Remote CLIENT S DN: /C=PL/O=GRID/O=PSNC/CN=Marcin Plociennik/CN=proxy
> 28 Feb, 12:11:00 -I- PID: 4032 - "wmpcommon::initWMProxyOperation": Remote GRST CRED: Not Available
> 28 Feb, 12:11:00 -I- PID: 4032 - "wmpcommon::initWMProxyOperation": Service GRST PROXY LIMIT: 6
> 28 Feb, 12:11:00 -I- PID: 4032 - "wmpcommon::initWMProxyOperation": WMProxy instance serving core request N.: 22
> 28 Feb, 12:11:00 -D- PID: 4032 - "wmpcommon::setGlobalSandboxDir": Sandbox directory: SandboxDir
> 28 Feb, 12:11:00 -D- PID: 4032 - "wmpoperations::getProxyReq": Authorizing user...
> 28 Feb, 12:11:00 -D- PID: 4032 - "wmputils::getUserDN": Getting user DN...
> 28 Feb, 12:11:00 -D- PID: 4032 - "wmputils::convertDNEMailAddress": Converted DN: /C=PL/O=GRID/O=PSNC/CN=Marcin Plociennik
> 28 Feb, 12:11:00 -D- PID: 4032 - "wmputils::getUserDN": User DN: /C=PL/O=GRID/O=PSNC/CN=Marcin Plociennik
> 28 Feb, 12:11:00 -E- PID: 4032 - "WMPAuthorizer::authorize": Cannot extract fqan from gridsite
> 28 Feb, 12:11:00 -D- PID: 4032 - "WMPAuthorizer::authorize": Delegated Proxy FQAN:
> 28 Feb, 12:11:00 -D- PID: 4032 - "WMPAuthorizer::authorize": Request's Proxy FQAN:
> 28 Feb, 12:11:00 -D- PID: 4032 - "wmputils::getUserDN": Getting user DN...
> 28 Feb, 12:11:00 -D- PID: 4032 - "wmputils::convertDNEMailAddress": Converted DN: /C=PL/O=GRID/O=PSNC/CN=Marcin Plociennik
> 28 Feb, 12:11:00 -D- PID: 4032 - "wmputils::getUserDN": User DN: /C=PL/O=GRID/O=PSNC/CN=Marcin Plociennik
> 28 Feb, 12:11:00 -D- PID: 4032 - "wmputils::convertDNEMailAddress": Converted DN: /C=PL/O=GRID/O=PSNC/CN=Marcin Plociennik
> 28 Feb, 12:11:00 -D- PID: 4032 - "GaclManager::gaclExists": checking file gacl existence
> 28 Feb, 12:11:00 -D- PID: 4032 - "GaclManager::loadFromFile": loading gacl from file : [/etc/glite-wms/glite_wms_wmproxy.gacl]
> 28 Feb, 12:11:00 -D- PID: 4032 - "WMPAuthorizer::checkGaclUserAuthZ": Checking gacl file entries...
> 28 Feb, 12:11:00 -D- PID: 4032 - "WMPAuthorizer::checkGaclUserAuthZ": VOMS credential type present
> 28 Feb, 12:11:00 -D- PID: 4032 - "wmpgsoapoperations::delegationns__getProxyReq": ------------------------------- Fault Description --------------------------------
> 28 Feb, 12:11:00 -D- PID: 4032 - "wmpgsoapoperations::delegationns__getProxyReq": Method: getProxyReq
> 28 Feb, 12:11:00 -D- PID: 4032 - "wmpgsoapoperations::delegationns__getProxyReq": Code: 59
> 28 Feb, 12:11:00 -D- PID: 4032 - "wmpgsoapoperations::delegationns__getProxyReq": Description: Authorization error: user not authorized
> 28 Feb, 12:11:00 -D- PID: 4032 - "wmpgsoapoperations::delegationns__getProxyReq": Stack:
> 28 Feb, 12:11:00 -D- PID: 4032 - "wmpgsoapoperations::delegationns__getProxyReq": AuthorizationException: Authorization error: user not authorized
> at checkGaclUserAuthZ()[/home/condor/execute/dir_2494/userdir/emi.wms.wmproxy/build/../src/authorizer/wmpauthorizer.cpp:416]
> at checkGaclUserAuthZ()[/home/condor/execute/dir_2494/userdir/emi.wms.wmproxy/build/../src/authorizer/wmpauthorizer.cpp:281]
> at authorize()[/home/condor/execute/dir_2494/userdir/emi.wms.wmproxy/build/../src/authorizer/wmpauthorizer.cpp:149]
> at getProxyReq()[/home/condor/execute/dir_2494/userdir/emi.wms.wmproxy/build/../src/server/wmpoperations.cpp:627]
>
> 28 Feb, 12:11:00 -D- PID: 4032 - "wmpgsoapoperations::delegationns__getProxyReq": ----------------------------------------------------------------------------------
--
Nikhef Room H155
Science Park 105 Tel. +31-20-592 5102
1098 XG Amsterdam Fax +31-20-592 5155
The Netherlands Email [log in to unmask]
__ .. ... _._. .... ._ ... ._ ._.. ._.. .._..
|