[Swift-devel] can we disable the gridftp authentication for swift on BGP?

[Mihael Hategan]

On Fri, 2008-12-19 at 12:40 -0600, Zhao Zhang wrote:
> Hi,
> 
> I started gridftp on one IO nodes with this command: 
> 
> bash-3.1$ ./globus-gridftp-server -auth-level 0
> Server listening at ion-12.surveyor.alcf.anl.gov:59829
> 
> Then I modified sites.xml, invoked swift for a sample test, but the 
> following message required authentication.
> Is there any switch in configuration file that we could switch this off?

Have you tried -nosec when starting the server?

> 
> The log file is here at 
> http://www.ci.uchicago.edu/~zzhang/first-20081219-1233-m233r976.log
> 
> best wishes
> zhangzhao
> 
> 
> 
> 
> zzhang at login6.surveyor:~/swift/test> swift -sites.file ./sites.xml 
> -tc.file ./tc.data first.swift
> Swift svn swift-r2334 (Swift modified locally) cog-r2216
> 
> RunID: 20081219-1233-m233r976
> Progress:
> echo started
> Sorted: [bgp000:1,000.000(98.545):0/789 overload: 0]
> Sorted: [bgp000:999.590(98.544):0/789 overload: 0]
> Sorted: [bgp000:999.180(98.544):0/789 overload: 0]
> echo failed
> Execution failed:
>         Could not initialize shared directory on bgp000
> Caused by:
>         org.globus.cog.abstraction.impl.file.FileResourceException: 
> Error communicating with the GridFTP server
> Caused by:
>         Server refused performing the request. Custom message: Server 
> refused GSSAPI authentication. (error code 1) [Nested exception 
> message:  Custom message: Unexpected reply: 530-globus_xio: Server side 
> credential failure
> 530-globus_gsi_gssapi: Error with gss credential handle
> 530-globus_credential: Valid credentials could not be found in any of 
> the possible locations specified by the credential search order.
> 530-Valid credentials could not be found in any of the possible 
> locations specified by the credential search order.
> 530-
> 530-Attempt 1
> 530-
> 530-globus_credential: Error reading host credential
> 530-globus_sysconfig: Could not find a valid certificate file: The host 
> cert could not be found in:
> 530-1) env. var. X509_USER_CERT
> 530-2) /etc/grid-security/hostcert.pem
> 530-3) $GLOBUS_LOCATION/etc/hostcert.pem
> 530-4) $HOME/.globus/hostcert.pem
> 530-
> 530-The host key could not be found in:
> 530-1) env. var. X509_USER_KEY
> 530-2) /etc/grid-security/hostkey.pem
> 530-3) $GLOBUS_LOCATION/etc/hostkey.pem
> 530-4) $HOME/.globus/hostkey.pem
> 530-
> 530-
> 530-
> 530-Attempt 2
> 530-
> 530-globus_credential: Error reading proxy credential
> 530-globus_sysconfig: Could not find a valid proxy certificate file location
> 530-globus_sysconfig: Error with key filename
> 530-globus_sysconfig: File does not exist: /tmp/x509up_u3850 is not a 
> valid file
> 530-
> 530-Attempt 3
> 530-
> 530-globus_credential: Error reading user credential
> 530-globus_credential: Key is password protected: GSI does not currently 
> support password protected private keys.
> 530-OpenSSL Error: pem_lib.c:401: in library: PEM routines, function 
> PEM_do_header: bad password read
> 530-
> 530 End.]
> 
> _______________________________________________
> Swift-devel mailing list
> Swift-devel at ci.uchicago.edu
> http://mail.ci.uchicago.edu/mailman/listinfo/swift-devel