Project

General

Profile

Forums » User questions »

Problem with gsi

Added by Rotondo Riccardo over 11 years ago

Dear JSaga Developer,

I'm using jsaga version 0.9.17 to develop some liferay services. We are currently using jsaga to access grid storages. At the first deploy the web applications works properly. However if we deploy the web application again (without stopping the server), we get this error (attached you'll find the entire log):

Caused by: org.globus.common.ChainedIOException: Authentication failed [Caused by: PEMFilebasedKeyStore not found]
    at org.globus.gsi.gssapi.net.GssSocket.startHandshake(GssSocket.java:149)
    at org.globus.gsi.gssapi.net.GssSocket.getOutputStream(GssSocket.java:165)
    at org.apache.axis.transport.http.HTTPSender.writeToSocket(HTTPSender.java:440)
    at org.apache.axis.transport.http.HTTPSender.invoke(HTTPSender.java:138)
    ... 208 more
Caused by: GSSException: PEMFilebasedKeyStore not found
    at org.globus.gsi.gssapi.GlobusGSSContextImpl.init(GlobusGSSContextImpl.java:1298)
    at org.globus.gsi.gssapi.GlobusGSSContextImpl.initSecContext(GlobusGSSContextImpl.java:948)
    at org.globus.gsi.gssapi.net.GssSocket.authenticateClient(GssSocket.java:106)
    at org.globus.gsi.gssapi.net.GssSocket.startHandshake(GssSocket.java:144)
    ... 211 more
Caused by: java.security.KeyStoreException: PEMFilebasedKeyStore not found
    at java.security.KeyStore.getInstance(KeyStore.java:664)
    at org.globus.gsi.stores.Stores.getTrustStore(Stores.java:55)
    at org.globus.gsi.stores.Stores.getDefaultTrustStore(Stores.java:46)
    at org.globus.gsi.gssapi.GlobusGSSContextImpl.init(GlobusGSSContextImpl.java:1281)
    ... 214 more

After investigation, we think it is related to the following library gss-2.0-Beta6-20130507.113759-31.jar
The current released version is the 2.0.6 and it seems they have strongly modified the portion of the code that throws our exception. We tried to replace it but there are too many dependencies problems.
Could you verify and in case substitute it in the newer version in the next jsaga snapshot?
If you need further information regarding the code or the methods we used just let me know.

Thanks in advance you for your support.

Riccardo

server.log (62.5 KB) server.log Full error log

Replies (3)

RE: Problem with gsi - Added by Schwarz Lionel over 11 years ago

Hi Riccardo,
This is indeed planned to upgrade to 2.0.6 from central Maven repo, but as you noticed, there are changes in API so we have to rewrite portions of code. It will not be done very soon then.
Unfortunately I have no idea how to work around your issue.
Regards
Lionel

RE: Problem with gsi - Added by Schwarz Lionel over 11 years ago

Hi Riccardo,
At the moment it is impossible to move to the standard JGlobus lib 2.0.6 as the original lib has been patched and these modifications are not yet merged. The patch was done by an external contributor, who maintains its fork against the main GIT branch, so you can consider to have an up-to-date JGlobus library.
cf: https://github.com/jrevillard/JGlobus/tree/develop

About your issue, I suspect something wrong in the security layer when running on a web application framework. It seems the default algorithm for KeyStore is "PEMFilebasedKeyStore" which does not exist in your environment.

I opened a ticket for this issue.
https://forge.in2p3.fr/issues/5531

Lionel

RE: Problem with gsi - Added by Rotondo Riccardo over 11 years ago

Ciao Lionel,
thank you for your reply. Right now this is not a blocking issue. In case we find the time we can have a look at the newest Globus version to perform some tests.

Cheers,

Riccardo

    (1-3/3)