[gin-auth] RE: tests

[Cindy Zheng]

Thanks, Oscar, for your help!
I'm setting up a PRAGMA CA under the direction of
APGRID PMA. We plan to get PRAGMA CA approved for
IGTF by end of this year. Then I can use PRAGMA CA
for GIN.
Meanwhile, what does it take to make the tests work?
Just to save everyone from looking far down the email
stack, I append the tests output right below.
Thanks for any help in advance,  ...Cindy

-----Original Message-----
From: Cindy Zheng [mailto:zhengc at sdsc.edu] 
Sent: Thursday, August 31, 2006 11:09 PM
To: 'Erwin Laure'; 'o.van-der-aa at imperial.ac.uk'; 'David Colling'
Cc: 'somsak_sr at thaigrid.net'; 'Sugree Phatanapherom';
'parzberg at ucsd.edu'; 'phil at sdsc.edu'
Subject: RE: tests

Thanks, Erwin! I installed all IGTF accredited Cas.
But still getting errors. The Ukescience certificate
files are appended after the test output. Please
check and let me know if I missed something. Thanks!

[zhengc at rocks-52 ~]$ voms-proxy-info
subject   : /C=US/O=SDSC/OU=SDSC/CN=Cindy Zheng/USERID=zhengc/CN=proxy
issuer    : /C=US/O=SDSC/OU=SDSC/CN=Cindy Zheng/USERID=zhengc
identity  : /C=US/O=SDSC/OU=SDSC/CN=Cindy Zheng/USERID=zhengc
type      : proxy
strength  : 512 bits
path      : /home/zhengc/.globus/.proxy
timeleft  : 6:05:56
[zhengc at rocks-52 ~]$ globusrun -a -r gw39.hep.ph.ic.ac.uk

GRAM Authentication test failure: connecting to the job manager failed.
Possible reasons: job terminated, invalid job contact, network problems,
...
[zhengc at rocks-52 ~]$ globus-job-run
gw39.hep.ph.ic.ac.uk:2119/jobmanager-lcgpbs date
GRAM Job submission failed because the connection to the server failed
(check host and port) (error code 12)
[zhengc at rocks-52 ~]$ globus-url-copy file:///export/home/zhengc/test.txt
gsiftp://cmsdsk00.hep.ph.ic.ac.uk/tmp/cindy-test.txt

error: globus_ftp_client: the server responded with an error
535 Authentication failed: GSSException: Failure unspecified at GSS-API
level [Caused by: Unknown CA]
[zhengc at rocks-52 ~]$ cat /etc/grid-security/certificates/adc*
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
http://ca.grid-support.ac.uk/pub/crl/escience-ca-crl.crl
#
# @(#)$Id: adcbc9ef.info,v 1.1 2006/07/19 15:09:40 pmacvsdg Exp $
# Information for CA UKeScience eScience subordinate CA
#
alias = UKeScienceCA
url = http://www.grid-support.ac.uk/ca/
crl_url = http://ca.grid-support.ac.uk/pub/crl/escience-ca-crl.crl
email = support at grid-support.ac.uk
status = accredited:classic
version = 1.8
sha1fp.0 = 0A:E0:5B:0C:64:99:18:2B:4F:FB:15:33:6F:77:33:F9:8E:F2:6D:C7
 # Signing policy for UK e-Science CA
 # This file should be installed in
 # /etc/grid-security/certificates
 # as <hash>.signing_policy along with
 # the CA certificate as <hash>.<digit>
 # -- here <hash> is the output of
 # openssl x509 -hash -noout -in <certificate>
 # and <digit> is the lowest single (decimal)
 # digit that makes the file unique (in case
 # you have other CA certificates that hash to
 # the same value)
 access_id_CA      X509         '/C=UK/O=eScienceCA/OU=Authority/CN=CA'
 pos_rights        globus        CA:sign
 cond_subjects     globus     '"/C=UK/O=eScience/*"'