[gt-user] JGlobus Authentication Problem

[Engin Arslan]

Hi,

I am trying to connect GridFTP server in XSEDE end points via
JGlobus-GridFTP 2.0 APIs. Though it works fine for some end points, it
fails in authenticating with Stampede (TACC). Though I'm not really sure
the cause, I have seen similar problem previously which was related to
RFC-compliancy of CA signing policies. Tried to connect Stampede but it
sounds more like Globus issue rather.

Here is the code piece where the authentication throws an error




*GridFTPControlChannel gc = new GridFTPControlChannel(u.host,
u.port);gc.open();if (u.cred != null) { gc.authenticate(u.cred,
u.user);*

And this is the full error message it prints:

Authentication failed. Caused by Failure unspecified at GSS-API level.
Caused by Invalid name provided. Caused by
java.lang.IllegalArgumentException: improperly specified input name: CN=
data3.stampede.tacc.utexas.edu,OU=TACC - Texas Advanced Computing
Center,O=The University of Texas at Austin,STREET=1 University
Station,L=Austin,ST=TX,PostalCode=78711,C=US,DC=incommon,DC=org
at javax.security.auth.x500.X500Principal.<init>(X500Principal.java:150)
at javax.security.auth.x500.X500Principal.<init>(X500Principal.java:102)
at
org.globus.gsi.util.CertificateUtil.toPrincipal(CertificateUtil.java:589)
at org.globus.gsi.gssapi.GlobusGSSName.<init>(GlobusGSSName.java:81)
at
org.globus.gsi.gssapi.GlobusGSSContextImpl.initSecContext(GlobusGSSContextImpl.java:1039)
at
org.globus.ftp.extended.GridFTPControlChannel.authenticate(GridFTPControlChannel.java:209)
at
stork.module.CooperativeModule$ControlChannel.<init>(CooperativeModule.java:214)
at
stork.module.CooperativeModule$ChannelPair.<init>(CooperativeModule.java:376)
at
stork.module.CooperativeModule$StorkFTPClient.<init>(CooperativeModule.java:771)
at
stork.module.CooperativeModule$GridFTPTransfer.process(CooperativeModule.java:1181)
at
stork.module.CooperativeModule$GridFTPTransfer.run(CooperativeModule.java:1550)
at java.lang.Thread.run(Thread.java:695)
Caused by: java.io.IOException: Invalid keyword "POSTALCODE"
at sun.security.x509.AVAKeyword.getOID(AVA.java:1261)
at sun.security.x509.AVA.<init>(AVA.java:175)
at sun.security.x509.AVA.<init>(AVA.java:128)
at sun.security.x509.RDN.<init>(RDN.java:134)
at sun.security.x509.X500Name.parseDN(X500Name.java:901)
at sun.security.x509.X500Name.<init>(X500Name.java:148)
at javax.security.auth.x500.X500Principal.<init>(X500Principal.java:148)
... 11 more
java.lang.Exception: error connecting:
org.globus.common.ChainedIOException: Authentication failed [Caused by:
Failure unspecified at GSS-API level [Caused by: Invalid name provided
[Caused by: improperly specified input name: CN=
data3.stampede.tacc.utexas.edu,OU=TACC - Texas Advanced Computing
Center,O=The University of Texas at Austin,STREET=1 University
Station,L=Austin,ST=TX,PostalCode=78711,C=US,DC=incommon,DC=org]]]
at
stork.module.CooperativeModule$GridFTPTransfer.fatal(CooperativeModule.java:1560)
at
stork.module.CooperativeModule$GridFTPTransfer.process(CooperativeModule.java:1184)
at
stork.module.CooperativeModule$GridFTPTransfer.run(CooperativeModule.java:1550)
at java.lang.Thread.run(Thread.java:695)
Exception in thread "main" java.lang.NullPointerException
at
didclab.cse.buffalo.CooperativeChannels.main(CooperativeChannels.java:55)

Thanks
Engin