Credential Manager setup

View: New views
3 Messages — Rating Filter:   Alert me  

Credential Manager setup

by Gayathri Namala-2 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Hello,

I am trying to setup the Credential Manager portal as a part of building a job submission portal. When I try to use myproxy-init from the portal I get the following error.

7917:ERROR:(MyProxyResource.
java:retrieveCredential:190)
< Error retrieving Globus proxy with MyProxy client >

MyProxy get failed.
 Caused by
org.globus.gsi.gssapi.auth.AuthorizationException: Mutual authentication failed
  Expected target subject name="/CN=host/proxy01.hpc.lsu.edu"
  Target returned subject name="/C=US/O=Louisiana Optical Network Initiative/OU=loni.org/OU=sys.loni.org/CN=myproxy.loni.org"

        at org.globus.gsi.gssapi.auth.Authorization.generateAuthorizationException(Authorization.java:49)
        at org.globus.gsi.gssapi.auth.HostAuthorization.authorize(HostAuthorization.java:92)
        at org.globus.myproxy.MyProxyServerAuthorization.authorize(MyProxyServerAuthorization.java:51)
        at org.globus.gsi.gssapi.net.GssSocket.startHandshake(GssSocket.java:151)
        at org.globus.gsi.gssapi.net.GssSocket.getOutputStream(GssSocket.java:161)
        at org.globus.myproxy.MyProxy.get(MyProxy.java:822)
        at org.globus.myproxy.MyProxy.get(MyProxy.java:777)
        at org.globus.myproxy.MyProxy.get(MyProxy.java:744).....

I changed Resources.xml and saw that it has Myproxy.loni.org as its default host name. I pasted my resources.xml below. I can activate my credential successfully from the commandline. But I get the above problem as I try to activate it from the portal.

Resources.xml
<grid-resources>

    <!-- Leave this resource definition. -->
    <hardware-resource label="Gayathri's Portal"
                       description="Hosts the GridSphere Portlet Container"
                       hostname="eric2.loni.org">
        <!-- Secure directory resource -->
        <localhost-resource/>

    </hardware-resource>

    <hardware-resource
            hostname="myproxy.loni.org"
            label="LONI MyProxy Service">
            <myproxy-resource
                    portalProxyFile="" port="7512"
                    description="MyProxy Credential Repository for LONI"
                    portalCertFile=""
                    portalKeyFile=""
                    usePortalCredential="false"/>
    </hardware-resource>

        <hardware-resource label="Queenbee"
                       description="LONI Linux"
                       hostname="qb1.loni.org">
        <gram-resource/>
        <gridftp-resource/>
    </hardware-resource>

     <hardware-resource label="Eric"
                       description="LONI Linux"
                       hostname="eric1.loni.org">
        <gram-resource/>
        <gridftp-resource/>
    </hardware-resource>


</grid-resources>



Please let me know of any obvious errors that I am making

Thanks

Gayathri

_______________________________________________
Gridsphere-users mailing list
Gridsphere-users@...
http://lists.gridsphere.org/mailman/listinfo/gridsphere-users

Re: Credential Manager setup

by rmanansa :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Please try putting an entry of your MyProxy host name and its ip in you /etc/hosts file. Please let us know if this helps or not so that other people will know.
Cheers,
-RAmil




On Sep 17, 2009, at 4:03 PM, Gayathri Namala wrote:

Hello,

I am trying to setup the Credential Manager portal as a part of building a job submission portal. When I try to use myproxy-init from the portal I get the following error.

7917:ERROR:(MyProxyResource.
java:retrieveCredential:190)
< Error retrieving Globus proxy with MyProxy client >

MyProxy get failed.
 Caused by
org.globus.gsi.gssapi.auth.AuthorizationException: Mutual authentication failed
  Expected target subject name="/CN=host/proxy01.hpc.lsu.edu"
  Target returned subject name="/C=US/O=Louisiana Optical Network Initiative/OU=loni.org/OU=sys.loni.org/CN=myproxy.loni.org"

        at org.globus.gsi.gssapi.auth.Authorization.generateAuthorizationException(Authorization.java:49)
        at org.globus.gsi.gssapi.auth.HostAuthorization.authorize(HostAuthorization.java:92)
        at org.globus.myproxy.MyProxyServerAuthorization.authorize(MyProxyServerAuthorization.java:51)
        at org.globus.gsi.gssapi.net.GssSocket.startHandshake(GssSocket.java:151)
        at org.globus.gsi.gssapi.net.GssSocket.getOutputStream(GssSocket.java:161)
        at org.globus.myproxy.MyProxy.get(MyProxy.java:822)
        at org.globus.myproxy.MyProxy.get(MyProxy.java:777)
        at org.globus.myproxy.MyProxy.get(MyProxy.java:744).....

I changed Resources.xml and saw that it has Myproxy.loni.org as its default host name. I pasted my resources.xml below. I can activate my credential successfully from the commandline. But I get the above problem as I try to activate it from the portal.

Resources.xml
<grid-resources>

    <!-- Leave this resource definition. -->
    <hardware-resource label="Gayathri's Portal"
                       description="Hosts the GridSphere Portlet Container"
                       hostname="eric2.loni.org">
        <!-- Secure directory resource -->
        <localhost-resource/>

    </hardware-resource>

    <hardware-resource
            hostname="myproxy.loni.org"
            label="LONI MyProxy Service">
            <myproxy-resource
                    portalProxyFile="" port="7512"
                    description="MyProxy Credential Repository for LONI"
                    portalCertFile=""
                    portalKeyFile=""
                    usePortalCredential="false"/>
    </hardware-resource>

        <hardware-resource label="Queenbee"
                       description="LONI Linux"
                       hostname="qb1.loni.org">
        <gram-resource/>
        <gridftp-resource/>
    </hardware-resource>

     <hardware-resource label="Eric"
                       description="LONI Linux"
                       hostname="eric1.loni.org">
        <gram-resource/>
        <gridftp-resource/>
    </hardware-resource>


</grid-resources>



Please let me know of any obvious errors that I am making

Thanks

Gayathri
_______________________________________________
Gridsphere-users mailing list
Gridsphere-users@...
http://lists.gridsphere.org/mailman/listinfo/gridsphere-users


_______________________________________________
Gridsphere-users mailing list
Gridsphere-users@...
http://lists.gridsphere.org/mailman/listinfo/gridsphere-users

Re: Credential Manager setup

by Gayathri Namala-2 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

I cannot change the /etc/hosts file as I don't have the root permissions on this machine.

The following are the default environment variables.

    GLOBUS_HOSTNAME = eric1.loni.org
    GLOBUS_LOCATION = /usr/local/packages/globus/globus-4.0.8
    GLOBUS_OPTIONS = -Xmx512M
    GLOBUS_TCP_PORT_RANGE = 50000,51000
    GLOBUS_TCP_SOURCE_RANGE = 50000,51000
    INCLUDE_PATH = /usr/local/packages/globus/globus-4.0.8/include
    LD_LIBRARY_PATH = ${LD_LIBRARY_PATH}:/usr/local/packages/globus/globus-4.0.8/lib
    MANPATH = ${MANPATH}:/usr/local/packages/globus/globus-4.0.8/man
    MYPROXY_SERVER = myproxy.loni.org
    MYPROXY_SERVER_DN = "/C=US/O=Louisiana Optical Network Initiative/OU=loni.org/OU=sys.loni.org/CN=myproxy.loni.org"

    PATH = ${PATH}:/usr/local/packages/globus/globus-4.0.8/bin
    PBS_HOME = /var/spool/torque


On Thu, Sep 17, 2009 at 6:14 PM, Ramil Manansala <ramil@...> wrote:
Please try putting an entry of your MyProxy host name and its ip in you /etc/hosts file. Please let us know if this helps or not so that other people will know.
Cheers,
-RAmil




On Sep 17, 2009, at 4:03 PM, Gayathri Namala wrote:

Hello,

I am trying to setup the Credential Manager portal as a part of building a job submission portal. When I try to use myproxy-init from the portal I get the following error.

7917:ERROR:(MyProxyResource.
java:retrieveCredential:190)
< Error retrieving Globus proxy with MyProxy client >

MyProxy get failed.
 Caused by
org.globus.gsi.gssapi.auth.AuthorizationException: Mutual authentication failed
  Expected target subject name="/CN=host/proxy01.hpc.lsu.edu"
  Target returned subject name="/C=US/O=Louisiana Optical Network Initiative/OU=loni.org/OU=sys.loni.org/CN=myproxy.loni.org"

        at org.globus.gsi.gssapi.auth.Authorization.generateAuthorizationException(Authorization.java:49)
        at org.globus.gsi.gssapi.auth.HostAuthorization.authorize(HostAuthorization.java:92)
        at org.globus.myproxy.MyProxyServerAuthorization.authorize(MyProxyServerAuthorization.java:51)
        at org.globus.gsi.gssapi.net.GssSocket.startHandshake(GssSocket.java:151)
        at org.globus.gsi.gssapi.net.GssSocket.getOutputStream(GssSocket.java:161)
        at org.globus.myproxy.MyProxy.get(MyProxy.java:822)
        at org.globus.myproxy.MyProxy.get(MyProxy.java:777)
        at org.globus.myproxy.MyProxy.get(MyProxy.java:744).....

I changed Resources.xml and saw that it has Myproxy.loni.org as its default host name. I pasted my resources.xml below. I can activate my credential successfully from the commandline. But I get the above problem as I try to activate it from the portal.

Resources.xml
<grid-resources>

    <!-- Leave this resource definition. -->
    <hardware-resource label="Gayathri's Portal"
                       description="Hosts the GridSphere Portlet Container"
                       hostname="eric2.loni.org">
        <!-- Secure directory resource -->
        <localhost-resource/>

    </hardware-resource>

    <hardware-resource
            hostname="myproxy.loni.org"
            label="LONI MyProxy Service">
            <myproxy-resource
                    portalProxyFile="" port="7512"
                    description="MyProxy Credential Repository for LONI"
                    portalCertFile=""
                    portalKeyFile=""
                    usePortalCredential="false"/>
    </hardware-resource>

        <hardware-resource label="Queenbee"
                       description="LONI Linux"
                       hostname="qb1.loni.org">
        <gram-resource/>
        <gridftp-resource/>
    </hardware-resource>

     <hardware-resource label="Eric"
                       description="LONI Linux"
                       hostname="eric1.loni.org">
        <gram-resource/>
        <gridftp-resource/>
    </hardware-resource>


</grid-resources>



Please let me know of any obvious errors that I am making

Thanks

Gayathri
_______________________________________________
Gridsphere-users mailing list
Gridsphere-users@...
http://lists.gridsphere.org/mailman/listinfo/gridsphere-users


_______________________________________________
Gridsphere-users mailing list
Gridsphere-users@...
http://lists.gridsphere.org/mailman/listinfo/gridsphere-users



_______________________________________________
Gridsphere-users mailing list
Gridsphere-users@...
http://lists.gridsphere.org/mailman/listinfo/gridsphere-users