[Condor-users] Default area for globus certificates

[Steven Timm <timm@xxxxxxxx>]

Is there anywhere, hardwired in Condor, where it is looking
for Certificate Authority certificates?

When I initially installed condor on one of my machines, the
certificates were in /etc/grid-security/certificates. They have now 
expired.
A later reinstallation of the globus toolkit moved them to 
$GLOBUS_LOCATION/share/certificates.  Now we face the problem that
outbound globus-job-run from this machine is OK but
outbound condor_submit to other condor_g resources is not OK, failing
to submit.

Error in condor log is:

000 (1045.000.000) 02/13 16:51:33 Job submitted from host: 
<131.225.107.31:62037
>
...
020 (1045.000.000) 02/13 16:51:41 Detected Down Globus Resource
    RM-Contact: fngp-osg.fnal.gov/jobmanager-condor
...


and on remote host gatekeeper says:

Feb 13 16:51:37 fngp-osg GRAM gatekeeper[2786]: GSS failed Major:01090000 
Minor:00000000 Token:00000003


Could it be that condor is somehow wired to look at 
/etc/grid-security/certificates?
I don't see anyplace in the condor config file where it would say
where to get them from.

Steve Timm


--
------------------------------------------------------------------
Steven C. Timm, Ph.D  (630) 840-8525  timm@xxxxxxxx  http://home.fnal.gov/~timm/
Fermilab Computing Div/Core Support Services Dept./Scientific Computing Section
Assistant Group Leader, Farms and Clustered Systems Group
Lead of Computing Farms Team