[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Condor-users] Default area for globus certificates

Is there anywhere, hardwired in Condor, where it is looking
for Certificate Authority certificates?

When I initially installed condor on one of my machines, the
certificates were in /etc/grid-security/certificates. They have now expired. A later reinstallation of the globus toolkit moved them to $GLOBUS_LOCATION/share/certificates. Now we face the problem that
outbound globus-job-run from this machine is OK but
outbound condor_submit to other condor_g resources is not OK, failing
to submit.

Error in condor log is:

000 (1045.000.000) 02/13 16:51:33 Job submitted from host: <

020 (1045.000.000) 02/13 16:51:41 Detected Down Globus Resource
    RM-Contact: fngp-osg.fnal.gov/jobmanager-condor

and on remote host gatekeeper says:

Feb 13 16:51:37 fngp-osg GRAM gatekeeper[2786]: GSS failed Major:01090000 Minor:00000000 Token:00000003

Could it be that condor is somehow wired to look at /etc/grid-security/certificates?
I don't see anyplace in the condor config file where it would say
where to get them from.

Steve Timm

Steven C. Timm, Ph.D  (630) 840-8525  timm@xxxxxxxx  http://home.fnal.gov/~timm/
Fermilab Computing Div/Core Support Services Dept./Scientific Computing Section
Assistant Group Leader, Farms and Clustered Systems Group
Lead of Computing Farms Team