communicado's certs (/etc/grid-security/certificates) are out-of-date...if you copy ranger's /etc/grid-security/certificates directory to communicado and point yr X509_CERT_DIR to it you can get a job thru (a simple globus-job-run with my vaild cert fails from communicado at the moment if i don't do this). <br>
<br>i set our machines at uci to update daily...i think it's less frequently at ci...<br><br><div class="gmail_quote">On Thu, Aug 25, 2011 at 2:17 PM, Mihael Hategan <span dir="ltr"><<a href="mailto:hategan@mcs.anl.gov">hategan@mcs.anl.gov</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">Can you try a globus-url-copy to gridftp.ranger?<br>
<br>
gridftp.ranger seems to have the NCSA myproxy CA. You say you have the<br>
proper certificates dir in your X509_CERT_DIR, and that directory<br>
contains the TACC root cert. So it should work. And so should swift.<br>
<br>
Though I think that jglobus should be more clear about "Unknown ca"<br>
errors. At least the name of the unknown CA should be part of the error<br>
message.<br>
<div><div></div><div class="h5"><br>
On Thu, 2011-08-25 at 15:55 -0500, David Kelly wrote:<br>
> $ grid-proxy-info -all<br>
> subject : /C=US/O=National Center for Supercomputing Applications/CN=David Kelly<br>
> issuer : /C=US/O=National Center for Supercomputing Applications/OU=Certificate Authorities/CN=MyProxy<br>
> identity : /C=US/O=National Center for Supercomputing Applications/CN=David Kelly<br>
> type : end entity credential<br>
> strength : 1024 bits<br>
> path : /tmp/x509up_u1878<br>
> timeleft : 9:56:53<br>
><br>
><br>
> ----- Original Message -----<br>
> > From: "Mihael Hategan" <<a href="mailto:hategan@mcs.anl.gov">hategan@mcs.anl.gov</a>><br>
> > To: "David Kelly" <<a href="mailto:davidk@ci.uchicago.edu">davidk@ci.uchicago.edu</a>><br>
> > Cc: "Ketan Maheshwari" <<a href="mailto:ketancmaheshwari@gmail.com">ketancmaheshwari@gmail.com</a>>, "swift-devel Devel" <<a href="mailto:swift-devel@ci.uchicago.edu">swift-devel@ci.uchicago.edu</a>><br>
> > Sent: Thursday, August 25, 2011 3:42:57 PM<br>
> > Subject: Re: [Swift-devel] Notes from 0.93 meeting<br>
> > Odd. Can you paste the output of 'grid-proxy-info -all'?<br>
> ><br>
> > On Thu, 2011-08-25 at 15:18 -0500, David Kelly wrote:<br>
> > > Sure, here is the full log:<br>
> > ><br>
> > > <a href="http://www.ci.uchicago.edu/%7Edavidk/001-catsn-ranger-20110825-1515-5tydro91.log" target="_blank">http://www.ci.uchicago.edu/~davidk/001-catsn-ranger-20110825-1515-5tydro91.log</a><br>
> > ><br>
> > > ----- Original Message -----<br>
> > > > From: "Mihael Hategan" <<a href="mailto:hategan@mcs.anl.gov">hategan@mcs.anl.gov</a>><br>
> > > > To: "David Kelly" <<a href="mailto:davidk@ci.uchicago.edu">davidk@ci.uchicago.edu</a>><br>
> > > > Cc: "Ketan Maheshwari" <<a href="mailto:ketancmaheshwari@gmail.com">ketancmaheshwari@gmail.com</a>>, "swift-devel<br>
> > > > Devel" <<a href="mailto:swift-devel@ci.uchicago.edu">swift-devel@ci.uchicago.edu</a>><br>
> > > > Sent: Thursday, August 25, 2011 2:43:31 PM<br>
> > > > Subject: Re: [Swift-devel] Notes from 0.93 meeting<br>
> > > > It's possible that the CA dir on Ranger is not properly set up.<br>
> > > > Can<br>
> > > > you<br>
> > > > post the full log?<br>
> > > ><br>
> > > > On Thu, 2011-08-25 at 13:56 -0500, David Kelly wrote:<br>
> > > > > Those environment variables were not set up. I have them defined<br>
> > > > > now, but I'm still getting the same error.<br>
> > > > ><br>
> > > > > [davidk@communicado ranger]$ env |grep 509<br>
> > > > > X509_CERT_DIR=/opt/osg-1.2.16/globus/TRUSTED_CA<br>
> > > > > X509_CADIR=/opt/osg-1.2.16/globus/TRUSTED_CA<br>
> > > > ><br>
> > > > > [davidk@communicado ranger]$ swift -sites.file sites.xml<br>
> > > > > -tc.file<br>
> > > > > tc.data 001-catsn-ranger.swift<br>
> > > > > Swift svn swift-r4987 (swift modified locally) cog-r3229<br>
> > > > ><br>
> > > > > RunID: 20110825-1352-f1v940b4<br>
> > > > > Progress: time: Thu, 25 Aug 2011 13:52:59 -0500<br>
> > > > > Progress: time: Thu, 25 Aug 2011 13:53:00 -0500 Selecting site:7<br>
> > > > > Initializing site shared directory:3<br>
> > > > > Execution failed:<br>
> > > > > Authentication failed [Caused by: Failure unspecified at<br>
> > > > > GSS-API<br>
> > > > > level [Caused by: Unknown CA]]<br>
> > > > ><br>
> > > > ><br>
> > > > > ----- Original Message -----<br>
> > > > > > From: "Ketan Maheshwari" <<a href="mailto:ketancmaheshwari@gmail.com">ketancmaheshwari@gmail.com</a>><br>
> > > > > > To: "David Kelly" <<a href="mailto:davidk@ci.uchicago.edu">davidk@ci.uchicago.edu</a>><br>
> > > > > > Cc: "Jonathan Monette" <<a href="mailto:jonmon@mcs.anl.gov">jonmon@mcs.anl.gov</a>>, "swift-devel<br>
> > > > > > Devel"<br>
> > > > > > <<a href="mailto:swift-devel@ci.uchicago.edu">swift-devel@ci.uchicago.edu</a>><br>
> > > > > > Sent: Thursday, August 25, 2011 1:32:50 PM<br>
> > > > > > Subject: Re: [Swift-devel] Notes from 0.93 meeting<br>
> > > > > > Hi,<br>
> > > > > ><br>
> > > > > ><br>
> > > > > > Are your CADIR and CACERT env vars set up?<br>
> > > > > ><br>
> > > > > ><br>
> > > > > ><br>
> > > > > > [communicado:swiftgrid]$ echo $X509_CADIR<br>
> > > > > > /opt/osg-1.2.16/globus/TRUSTED_CA<br>
> > > > > ><br>
> > > > > ><br>
> > > > > ><br>
> > > > > > [communicado:swiftgrid]$ echo $X509_CERT_DIR<br>
> > > > > > /opt/osg-1.2.16/globus/TRUSTED_CA<br>
> > > > > ><br>
> > > > > ><br>
> > > > > ><br>
> > > > > > On Thu, Aug 25, 2011 at 1:29 PM, David Kelly <<br>
> > > > > > <a href="mailto:davidk@ci.uchicago.edu">davidk@ci.uchicago.edu</a><br>
> > > > > > > wrote:<br>
> > > > > ><br>
> > > > > ><br>
> > > > > > Thanks Jon,<br>
> > > > > ><br>
> > > > > > Here is what happens when I try this from communicado:<br>
> > > > > ><br>
> > > > > > [davidk@communicado ~]$ myproxy-logon -l dkelly -s<br>
> > > > > > <a href="http://myproxy.teragrid.org" target="_blank">myproxy.teragrid.org</a><br>
> > > > > > Enter MyProxy pass phrase:<br>
> > > > > > A credential has been received for user dkelly in<br>
> > > > > > /tmp/x509up_u1878.<br>
> > > > > ><br>
> > > > > > [davidk@communicado ranger]$ swift -sites.file sites.xml<br>
> > > > > > -tc.file<br>
> > > > > > tc.data 001-catsn-ranger.swift<br>
> > > > > > Swift svn swift-r4987 (swift modified locally) cog-r3229<br>
> > > > > ><br>
> > > > > > RunID: 20110825-1326-o3e38fe0<br>
> > > > > > Progress: time: Thu, 25 Aug 2011 13:26:43 -0500<br>
> > > > > > Progress: time: Thu, 25 Aug 2011 13:26:44 -0500 Selecting<br>
> > > > > > site:8<br>
> > > > > > Initializing site shared directory:2<br>
> > > > > > Execution failed:<br>
> > > > > > Authentication failed [Caused by: Failure unspecified at<br>
> > > > > > GSS-API<br>
> > > > > > level<br>
> > > > > > [Caused by: Unknown CA]]<br>
> > > > > ><br>
> > > > > > Any ideas?<br>
> > > > > ><br>
> > > > > > Thanks,<br>
> > > > > > David<br>
> > > > > ><br>
> > > > > ><br>
> > > > > ><br>
> > > > > > _______________________________________________<br>
> > > > > > Swift-devel mailing list<br>
> > > > > > <a href="mailto:Swift-devel@ci.uchicago.edu">Swift-devel@ci.uchicago.edu</a><br>
> > > > > > <a href="https://lists.ci.uchicago.edu/cgi-bin/mailman/listinfo/swift-devel" target="_blank">https://lists.ci.uchicago.edu/cgi-bin/mailman/listinfo/swift-devel</a><br>
> > > > > ><br>
> > > > > ><br>
> > > > > ><br>
> > > > > ><br>
> > > > > > --<br>
> > > > > > Ketan<br>
> > > > > _______________________________________________<br>
> > > > > Swift-devel mailing list<br>
> > > > > <a href="mailto:Swift-devel@ci.uchicago.edu">Swift-devel@ci.uchicago.edu</a><br>
> > > > > <a href="https://lists.ci.uchicago.edu/cgi-bin/mailman/listinfo/swift-devel" target="_blank">https://lists.ci.uchicago.edu/cgi-bin/mailman/listinfo/swift-devel</a><br>
<br>
<br>
_______________________________________________<br>
Swift-devel mailing list<br>
<a href="mailto:Swift-devel@ci.uchicago.edu">Swift-devel@ci.uchicago.edu</a><br>
<a href="https://lists.ci.uchicago.edu/cgi-bin/mailman/listinfo/swift-devel" target="_blank">https://lists.ci.uchicago.edu/cgi-bin/mailman/listinfo/swift-devel</a><br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br>Sarah Kenny<br>Programmer ~ Brain Circuits Laboratory ~ Rm 2224 Bio Sci III<br>University of California Irvine, Dept. of Neurology ~ 773-818-8300<br><br>