Bugzilla – Bug 5988
Authentication failures when monitoring RLS with MDS execution aggregator
Last modified: 2008-04-07 17:18:38
You need to log in before you can comment on or make changes to this bug.
Some missing documentation identified by user trying to configure the MDS execution aggregator that is part of the RLS. --------------------------- Silvu, It looks like the script was registered correctly with MDS4 – as far as I can tell. The problem is that the RLS is running with authentication and the script (invoked by MDS) does not have a security context. I believe you can fix this one of two ways: 1. Set the env for X509_USER_CERT and X509_USER_KEY to the container’s cert/key 2. Modify the script such that it sets them Then, make sure the container cert’s DN is in the gridmap file on the machine that the RLS is running on. I think that would resolve the issue. Rob From: Silviu Popescu [mailto:xxxxxxxxxx] Sent: Thursday, April 03, 2008 5:27 AM To: Robert Schuler Cc: GlobusUserList Subject: RE: [gt-user] register gridftp and rls to MDS4 Robert Schuler <schuler@isi.edu> wrote: The RLS provides a script for use with MDS: http://www.globus.org/toolkit/docs/4.0/data/rls/RLS_Build_Install.html#a-rls-Build_Install-mds4config And then you can see instructions from MDS on how to use such scripts: http://www.globus.org/toolkit/docs/4.0/info/index/WS_MDS_Index_HOWTO_Execution_Aggregator.html Hi, I've tried to register rls to MDS4. When I query the index I receive the following error: user@c14[/usr/local/globus4.0.6]$ wsrf-query -s https://xxxxxxxxxxxxx/wsrf/services/DefaultIndexService "//*[local-name()='rlsStats']" <rlsStats xmlns=""> <site>rls://xxxxxxxxx</site> <uptime>unknown</uptime> <error>connect(rls://xxxxxxxxx): globus_rls_client: Globus I/O error: globus_xio_gsi: gss_init_sec_context failed. </error> </rlsStats> user@c14[/usr/local/globus4.0.6]$ mds-servicegroup-add -s https://xxxxxxxxxxxx:8443/wsrf/services/DefaultIndexService etc/globus_wsrf_mds_aggregator/rls-aggregator.xml & [2] 24257 Processing configuration file... Processed 1 registration entries Successfully registered rls://xxxxxxxxx to servicegroup at https://xxxxxxxxxxx:8443/wsrf/services/DefaultIndexService Here is the registration file: user@c14[/usr/local/globus4.0.6]$ cat etc/globus_wsrf_mds_aggregator/rls-aggregator.xml <?xml version="1.0" encoding="UTF-8" ?> <ServiceGroupRegistrations xmlns="http://mds.globus.org/servicegroup/client" xmlns:sgc="http://mds.globus.org/servicegroup/client" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/03/addressing" xmlns:agg="http://mds.globus.org/aggregator/types"> <defaultServiceGroupEPR> <wsa:Address>https://xxxxxxxxxxxxxx:8443/wsrf/services/DefaultIndexService</wsa:Address> </defaultServiceGroupEPR> <defaultRegistrantEPR> <wsa:Address>rls://xxxxxxxx</wsa:Address> </defaultRegistrantEPR> <ServiceGroupRegistrationParameters xmlns="http://mds.globus.org/servicegroup/client" > <!-- Renew this registration every 600 seconds (10 minutes) --> <RefreshIntervalSecs>600</RefreshIntervalSecs> <Content xsi:type="agg:AggregatorContent" xmlns:agg="http://mds.globus.org/aggregator/types"> <agg:AggregatorConfig xsi:type="agg:AggregatorConfig"> <agg:ExecutionPollType> <!-- Run our script every 300,000 milliseconds (5 minutes) --> <agg:PollIntervalMillis>300000</agg:PollIntervalMillis> <agg:ProbeName>rls-agg</agg:ProbeName> </agg:ExecutionPollType> </agg:AggregatorConfig> <agg:AggregatorData/> </Content> </ServiceGroupRegistrationParameters> </ServiceGroupRegistrations> I'm not sure that the defaultRegistrantEPR should be set this way but I don't know how to set it. Please help. Regards, Silviu Popescu
Fixed in the 4.0 and 4.2-drafts branches.