Project

General

Profile

Forums » User questions »

bad VO in VOMS jsaga-context-init

Added by Gay Pierre almost 15 years ago

Hi,

I encounter the following error with jsaga-0.9.8:

I modified universe file (see attachment) to fit my VO and jsaga-context-init.sh gives the error message a the end of the post.

What confuses me is that the exception seems to have the correct VO parameter while VOMS server (which is the same for (vo.mcia.fr and vo.iscpif.fr) returns bad user for another VO.

Thanks

Pierre

============================================================
error message follows ============================================================
$ jsaga-context-init.sh VOMS
Enter UserPass for security context: VOMS

[2010-06-23 17:52:01,443] ERROR org.glite.voms.contact.VOMSProxyInit : Got error response from VOMS server [vo=vo.mcia.fr,host=grid12.lal.in2p3.fr,port=20013,hostDN=/O=GRID-FR/C=FR/O=CNRS/OU=LAL/CN=grid12.lal.in2p3.fr,globusVersion=null]
[2010-06-23 17:52:01,445] ERROR org.glite.voms.contact.VOMSProxyInit : voms error 1001: vo.iscpif.fr: User unknown to this VO.
Exception in thread "main" NoSuccess: BadParameter: The lifetime may be too long
at fr.in2p3.jsaga.adaptor.security.VOMSSecurityAdaptorBuilder.createSecurityAdaptor(VOMSSecurityAdaptorBuilder.java:170)
at fr.in2p3.jsaga.impl.context.ContextImpl.getAdaptor(ContextImpl.java:249)
at fr.in2p3.jsaga.impl.context.ContextImpl.getAttribute(ContextImpl.java:80)
at fr.in2p3.jsaga.command.ContextInit.main(ContextInit.java:75)
Caused by: BadParameter: The lifetime may be too long
at fr.in2p3.jsaga.adaptor.security.VOMSProxyFactory.createProxy(VOMSProxyFactory.java:149)
at fr.in2p3.jsaga.adaptor.security.VOMSSecurityAdaptorBuilder.createSecurityAdaptor(VOMSSecurityAdaptorBuilder.java:146)
... 3 more
Caused by: java.lang.IllegalArgumentException: Error parsing VOMS extension in certificate issued to CN=proxy,CN=Pierre Gay,OU=DRIMM,O=BORDEAUXI,C=FR,O=GRID-FRerror was:null
at org.glite.voms.VOMSValidator.parse(VOMSValidator.java:329)
at fr.in2p3.jsaga.adaptor.security.VOMSProxyFactory.createProxy(VOMSProxyFactory.java:141)
... 4 more

jsaga-universe.xml (667 Bytes) jsaga-universe.xml

Replies (3)

RE: bad VO in VOMS jsaga-context-init - Added by Reynaud Sylvain almost 15 years ago

Hi Pierre,

Port 20013 is for vo.iscpif.fr.
For vo.mcia.fr, you should use port 20017 instead (see https://cic.gridops.org/).

I have also noticed that you use attribute names USERCERT and USERKEY instead of UserCert and UserKey.
This works because your certificate files are available at the default location, but if you move them you will have to use the right attribute names to set the new path.

Cheers,
Sylvain

RE: bad VO in VOMS jsaga-context-init - Added by Gay Pierre almost 15 years ago

I didn't notice the port difference.

I found USERCERT and USERKEY from JSAGA Wiki. I fixed in the corresponding page: JSAGA_Use_Command_Line_on_EGEE

Thanks for your help.

Cheers,

Pierre

RE: bad VO in VOMS jsaga-context-init - Added by Reynaud Sylvain almost 15 years ago

Thanks for the fix in the wiki.

Cheers,
Sylvain

    (1-3/3)