[Condor-users] Condor-G + Globus proxy delegation problem ( Unknown CA )

[kschwarz@xxxxxxxxxxxxxx]

Hi all,

I am testing the Condor+Globus integration
prior to move forward with more complex runs.
I have installed Condor V7.1.3 and Globus
v4.2.1 on the same Linux machine.

I have submitted the following job using
Condor-G

        Universe  
= grid
        
        grid_resource
= gt4 pc222771 CONDOR
        
        # resolver o problema
do requisito:
        # "( TARGET.FileSystemDomain
== MY.FileSystemDomain )"
        should_transfer_files
= YES
        
        # when_to_transfer_files
é requerido quando "should_transfer_files = YES"
        when_to_transfer_output
= ON_EXIT_OR_EVICT
        
        Executable = /bin/date
        transfer_executable
= false
        Log    
   = simple-globus-date.log
        Output  
  = simple-globus-date.out
        Error    
 = simple-globus-date.err
        Queue

This job stays in the queue with status
Hold and the reason is 

000 (1625.000.000) 02/18 08:48:36 Job submitted from
host: <10.3.29.209:45027>
...
012 (1625.000.000) 02/18 08:48:54 Job was held.
        Failed to create
proxy delegation
        Code 0 Subcode
0
...

The Condor Gridmanagerlog log file has
some messages:

...
2/18 08:48:49 [4098] GAHP[4100] (stderr) -> org.globus.common.ChainedIOException:
Authentication failed [Caused by: Failure unspecified at GSS-API level
[Caused by: Unknown CA]]
...

The Globus container.log has the following
messages at the end:

...
2009-02-18T08:48:49.086-03:00 ERROR container.GSIServiceThread
[ServiceThread-65,process:142] [JWSCORE-192] Error processing requestConnection
reset by peer
2009-02-18T08:48:51.594-03:00 ERROR container.GSIServiceThread
[ServiceThread-58,process:142] [JWSCORE-192] Error processing requestConnection
reset by peer
...

Some aditional informations are as follow:

(as me)
pcd10238@pc222771:/home/pcd/10238/SD/_Globus-test/00-Simple-globus-date/02>
grid-proxy-info
subject  : /O=Grid/OU=GlobusTest/OU=simpleCA-pc222771.corp.ad.emb/OU=corp.ad.emb/CN=Klaus
Schwarzmeier/CN=765511421
issuer   : /O=Grid/OU=GlobusTest/OU=simpleCA-pc222771.corp.ad.emb/OU=corp.ad.emb/CN=Klaus
Schwarzmeier
identity : /O=Grid/OU=GlobusTest/OU=simpleCA-pc222771.corp.ad.emb/OU=corp.ad.emb/CN=Klaus
Schwarzmeier
type     : Proxy draft (pre-RFC) compliant
impersonation proxy
strength : 1024 bits
path     : /tmp/x509up_u10238
timeleft : 8:13:41

(as root)
pc222771:~ # grid-default-ca
The available CA configurations installed on this
host are:

Directory: /sandbox/globus/latest/share/certificates

1) 7a6f0f62 -  /O=Grid/OU=GlobusTest/OU=simpleCA-pc222771.corp.ad.emb/CN=Globus
Simple CA


The default CA is: /O=Grid/OU=GlobusTest/OU=simpleCA-pc222771.corp.ad.emb/CN=Globus
Simple CA
         Location: /sandbox/globus/latest/share/certificates/7a6f0f62.0


Enter the index number of the CA to set as the default
[q to quit]:1

setting the default CA to: /O=Grid/OU=GlobusTest/OU=simpleCA-pc222771.corp.ad.emb/CN=Globus
Simple CA

linking /sandbox/globus/latest/share/certificates/grid-security.conf.7a6f0f62
to
        /sandbox/globus/latest/etc/grid-security.conf

linking /sandbox/globus/latest/share/certificates/globus-host-ssl.conf.7a6f0f62
to
        /sandbox/globus/latest/etc/globus-host-ssl.conf

linking /sandbox/globus/latest/share/certificates/globus-user-ssl.conf.7a6f0f62
to
        /sandbox/globus/latest/etc/globus-user-ssl.conf


...done.

pc222771:~ #

How could I fix that problem?
I am attaching all the mentioned file
in a zip file.

Thanks, Klaus

---

This message is intended solely for the
use of its addressee and may contain privileged or confidential information.
If you are not the addressee you should not distribute, copy or file this
message. In this case, please notify the sender and destroy its contents
immediately.
Esta mensagem é para uso exclusivo de seu destinatário e pode conter informações
privilegiadas e confidenciais. Se você não é o destinatário não deve distribuir,
copiar ou arquivar a mensagem. Neste caso, por favor, notifique o remetente
da mesma e destrua imediatamente a mensagem.

Attachment: proxy-delegation-problem-log-files.zip
Description: Zip archive