[Swift-devel] can we disable the gridftp authentication for swift on BGP?

[Zhao Zhang]

Hi, Mihael

There is no such option -nosec. The "-auth-level 0" Disables all 
authorization checks.

zhao

Mihael Hategan wrote:
> On Fri, 2008-12-19 at 12:40 -0600, Zhao Zhang wrote:
>   
>> Hi,
>>
>> I started gridftp on one IO nodes with this command: 
>>
>> bash-3.1$ ./globus-gridftp-server -auth-level 0
>> Server listening at ion-12.surveyor.alcf.anl.gov:59829
>>
>> Then I modified sites.xml, invoked swift for a sample test, but the 
>> following message required authentication.
>> Is there any switch in configuration file that we could switch this off?
>>     
>
> Have you tried -nosec when starting the server?
>
>   
>> The log file is here at 
>> http://www.ci.uchicago.edu/~zzhang/first-20081219-1233-m233r976.log
>>
>> best wishes
>> zhangzhao
>>
>>
>>
>>
>> zzhang at login6.surveyor:~/swift/test> swift -sites.file ./sites.xml 
>> -tc.file ./tc.data first.swift
>> Swift svn swift-r2334 (Swift modified locally) cog-r2216
>>
>> RunID: 20081219-1233-m233r976
>> Progress:
>> echo started
>> Sorted: [bgp000:1,000.000(98.545):0/789 overload: 0]
>> Sorted: [bgp000:999.590(98.544):0/789 overload: 0]
>> Sorted: [bgp000:999.180(98.544):0/789 overload: 0]
>> echo failed
>> Execution failed:
>>         Could not initialize shared directory on bgp000
>> Caused by:
>>         org.globus.cog.abstraction.impl.file.FileResourceException: 
>> Error communicating with the GridFTP server
>> Caused by:
>>         Server refused performing the request. Custom message: Server 
>> refused GSSAPI authentication. (error code 1) [Nested exception 
>> message:  Custom message: Unexpected reply: 530-globus_xio: Server side 
>> credential failure
>> 530-globus_gsi_gssapi: Error with gss credential handle
>> 530-globus_credential: Valid credentials could not be found in any of 
>> the possible locations specified by the credential search order.
>> 530-Valid credentials could not be found in any of the possible 
>> locations specified by the credential search order.
>> 530-
>> 530-Attempt 1
>> 530-
>> 530-globus_credential: Error reading host credential
>> 530-globus_sysconfig: Could not find a valid certificate file: The host 
>> cert could not be found in:
>> 530-1) env. var. X509_USER_CERT
>> 530-2) /etc/grid-security/hostcert.pem
>> 530-3) $GLOBUS_LOCATION/etc/hostcert.pem
>> 530-4) $HOME/.globus/hostcert.pem
>> 530-
>> 530-The host key could not be found in:
>> 530-1) env. var. X509_USER_KEY
>> 530-2) /etc/grid-security/hostkey.pem
>> 530-3) $GLOBUS_LOCATION/etc/hostkey.pem
>> 530-4) $HOME/.globus/hostkey.pem
>> 530-
>> 530-
>> 530-
>> 530-Attempt 2
>> 530-
>> 530-globus_credential: Error reading proxy credential
>> 530-globus_sysconfig: Could not find a valid proxy certificate file location
>> 530-globus_sysconfig: Error with key filename
>> 530-globus_sysconfig: File does not exist: /tmp/x509up_u3850 is not a 
>> valid file
>> 530-
>> 530-Attempt 3
>> 530-
>> 530-globus_credential: Error reading user credential
>> 530-globus_credential: Key is password protected: GSI does not currently 
>> support password protected private keys.
>> 530-OpenSSL Error: pem_lib.c:401: in library: PEM routines, function 
>> PEM_do_header: bad password read
>> 530-
>> 530 End.]
>>
>> _______________________________________________
>> Swift-devel mailing list
>> Swift-devel at ci.uchicago.edu
>> http://mail.ci.uchicago.edu/mailman/listinfo/swift-devel
>>     
>
>
>