On 06/03/2014 08:28 PM, Maarten Litmaath wrote:
> Hi Adrian,
Hi Maarten!
>> Hi everyone! We recently got a message about the $subj error received at
>> the time of sending a job to our cream from auger vo.. the error is :
>>
>> Status info for the Job :
>> https://lb1.grid.cesnet.cz:9000/6kj8MQZsEI6zszcB0hwsug
>> Current Status: Aborted
>> Logged Reason(s):
>> - Transfer to CREAM failed due to exception: Failed to create a
>> delegation id for job
>> https://lb1.grid.cesnet.cz:9000/6kj8MQZsEI6zszcB0hwsug: reason is
>> Connection to service
>> [https://grid05.spacescience.ro:8443/ce-cream/services/gridsite-delegation]
>>
>> failed: FaultString=[SSL error] - FaultCode=[SOAP-ENV:Client] -
>> FaultSubCode=[SOAP-ENV:Client] - FaultDetail=[SSL authentication failed
>> in tcp_connect(): check password, key file, and ca file.]
>>
>> the thing is that the normal ops tests look ok and uberftp coonection to
>> our cream is ok..
>>
>> Does anyone have an idea about the root of the problem?
>
> Are the CAs and CRLs OK on your CE?
they are ok
> It could easily be due to an issue on the client side, here a WMS.
>
> As an example, when X509_CERT_DIR is made to point to a directory that
> has a copy of /etc/grid-security/certificates without the Romanian CA:
>
> $ X509_CERT_DIR=/tmp/foo-10239/certificates glite-ce-job-submit -a -r \
> grid05.spacescience.ro:8443/cream-pbs-ops jdl/cream.jdl
> 2014-06-03 19:19:43,135 FATAL - Connection to service
> [https://grid05.spacescience.ro:8443/ce-cream/services/gridsite-delegation]
> failed: FaultString=[SSL error] - FaultCode=[SOAP-ENV:Client] -
> FaultSubCode=[SOAP-ENV:Client] - FaultDetail=[SSL authentication failed in
> tcp_connect(): check password, key file, and ca file.]
>
> A similar error may occur when the client has an expired Romanian CRL.
i was assured that there is no problem on their side ..
the ticket is
https://ggus.eu/index.php?mode=ticket_info&ticket_id=105962
do you have an idea what expert should we get involved?
because of this problem the AUGER guys cannot use our resources...
(and we cannot test the problem as we (the admins) we are not part of
the VO)
Thanks a lot!
Adrian
--
----------------------------------------------
Adrian Sevcenco, Ph.D. |
Institute of Space Science - ISS, Romania |
adrian.sevcenco at {cern.ch,spacescience.ro} |
----------------------------------------------
|