Security system errors and workarounds

From GridPP Wiki
Revision as of 12:22, 5 November 2015 by Lewis Jones 3e79c9a325 (Talk | contribs)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

Security system errors and workarounds. === Error in OLD GAA code: Could not get policy info: Minor status=201 =

Users at various sites have experienced strange error when using voms proxies to access grid services. The error manifests itself with the following message:

ERROR: initializing context: GSS Error: GSS Major Status: Authentication Failed, MECH Error: GSS Minor Status Error 
Chain:, globus_gsi_gssapi: SSLv3 handshake problems, globus_gsi_callback_module: Could not verify 
credential, globus_gsi_callback_module: Error with signing policy, globus_gsi_callback_module: Error in OLD GAA code: 
Could not get policy info: Minor status=201 

Possible causes are suspected to include:

  • A bug in the globus_sgi_callback parser.
  • Clashes when GSS and CertWizard work with each other.
  • Non-standard shared directories and defaults

A workaround exists for this condition. On the user's system, check whether the user's ~/.globus directory is cluttered with various extraneous items. If so, strip back the content to usercert.* and userkey.* and try the operation again.