[AG-TECH] certificate woes ...

[Steve Gallo]

We had a user on a PIG having problems with his certificates.
Initially we thought he had forgotten the passphrase so he
requested another cert, but we still had the same problem.
What I found was that there were no Trusted CA certificates
installed on his node.  I exported them from mine and once imported
he was able to use his certificate.  We also made sure to delete
his extra identity cert.  Since I installed his node myself, I
know that there were no errors during the initial installation.

It does seem like it's not trying to authenticate on subsequent
tries, but to could be caching information after the first try.

Steve


> -----Original Message-----
> From: owner-ag-tech at mcs.anl.gov [mailto:owner-ag-tech at mcs.anl.gov]On
> Behalf Of Darran Edmundson
> Sent: Tuesday, May 04, 2004 10:10 AM
> To: ag-tech at mcs.anl.gov
> Subject: [AG-TECH] certificate woes ...
> 
> 
> 
> I've been struggling to resurrect AG2 on our node
> since the combination of upgrading to XP *and*
> having our April 2003 certificates expire.  I've
> requested and tried to import a new certificate on
> three occassions but each time I've been hit with
> "invalid passphrase".  The first two times I attributed
> to remnants of the AGToolkit/Globus hanging around.
> This last time though I removed all traces of the AGT,
> cleared out the appropriate "Application Data" folders,
> scanned the registry, etc - still the "invalid
> passphrase".  I'm at a loss and would greatly
> appreciate any ideas ...
> 
> Cheers,
> Darran.
> 
> P.S.  Isn't it bizarre how it takes a few seconds
> to fail to authenticate initially whereas retries
> of the passphrase are rejected immediately?  I'm
> dubious that the retries are actually happening.
> 
> 
> 
> -- 
> Darran Edmundson (darran.edmundson at anu.edu.au)
> ANU Supercomputer Facility Vizlab
> Australian National University, Canberra, ACT 2600
> tel: +61 2 6125-0517  fax: +61 2 6125-5088
> 
>