[Swift-devel] can we disable the gridftp authentication for swift on BGP?

[Zhao Zhang]

Hi,

I started gridftp on one IO nodes with this command: 

bash-3.1$ ./globus-gridftp-server -auth-level 0
Server listening at ion-12.surveyor.alcf.anl.gov:59829

Then I modified sites.xml, invoked swift for a sample test, but the 
following message required authentication.
Is there any switch in configuration file that we could switch this off?

The log file is here at 
http://www.ci.uchicago.edu/~zzhang/first-20081219-1233-m233r976.log

best wishes
zhangzhao




zzhang at login6.surveyor:~/swift/test> swift -sites.file ./sites.xml 
-tc.file ./tc.data first.swift
Swift svn swift-r2334 (Swift modified locally) cog-r2216

RunID: 20081219-1233-m233r976
Progress:
echo started
Sorted: [bgp000:1,000.000(98.545):0/789 overload: 0]
Sorted: [bgp000:999.590(98.544):0/789 overload: 0]
Sorted: [bgp000:999.180(98.544):0/789 overload: 0]
echo failed
Execution failed:
        Could not initialize shared directory on bgp000
Caused by:
        org.globus.cog.abstraction.impl.file.FileResourceException: 
Error communicating with the GridFTP server
Caused by:
        Server refused performing the request. Custom message: Server 
refused GSSAPI authentication. (error code 1) [Nested exception 
message:  Custom message: Unexpected reply: 530-globus_xio: Server side 
credential failure
530-globus_gsi_gssapi: Error with gss credential handle
530-globus_credential: Valid credentials could not be found in any of 
the possible locations specified by the credential search order.
530-Valid credentials could not be found in any of the possible 
locations specified by the credential search order.
530-
530-Attempt 1
530-
530-globus_credential: Error reading host credential
530-globus_sysconfig: Could not find a valid certificate file: The host 
cert could not be found in:
530-1) env. var. X509_USER_CERT
530-2) /etc/grid-security/hostcert.pem
530-3) $GLOBUS_LOCATION/etc/hostcert.pem
530-4) $HOME/.globus/hostcert.pem
530-
530-The host key could not be found in:
530-1) env. var. X509_USER_KEY
530-2) /etc/grid-security/hostkey.pem
530-3) $GLOBUS_LOCATION/etc/hostkey.pem
530-4) $HOME/.globus/hostkey.pem
530-
530-
530-
530-Attempt 2
530-
530-globus_credential: Error reading proxy credential
530-globus_sysconfig: Could not find a valid proxy certificate file location
530-globus_sysconfig: Error with key filename
530-globus_sysconfig: File does not exist: /tmp/x509up_u3850 is not a 
valid file
530-
530-Attempt 3
530-
530-globus_credential: Error reading user credential
530-globus_credential: Key is password protected: GSI does not currently 
support password protected private keys.
530-OpenSSL Error: pem_lib.c:401: in library: PEM routines, function 
PEM_do_header: bad password read
530-
530 End.]