Re: [gt-user] MyProxy problems

[Jim Basney <jbasney@xxxxxxxxxxxxx>]

Upon further investigation, it appears the incompatibility isn't fixed.
I'm working on it.  Currently, MyProxy's VOMS support will only work
with "legacy globus proxy" credentials, not "Proxy draft (pre-RFC)
compliant" or "RFC 3820 compliant" proxy credentials.  The "legacy
globus proxy" credentials can be created by:

  env GT_PROXY_MODE=old myproxy-init

or

  grid-proxy-init -old

or

  voms-proxy-init -proxyver 2

To track my progress on fixing this bug, you can add yourself to the CC
list at <http://bugzilla.ncsa.uiuc.edu/show_bug.cgi?id=345>.

Jim Basney <jbasney@xxxxxxxxxxxxx> wrote:
> I believe the problem is an incompatibility between GT4 and VOMS which
> is fixed in VOMS 1.7.1.
>
> Håkon Sagehaug <hsagehaug@xxxxxxxxx> wrote:
> > Hi
> >
> > I updated to the latest myProxy on my Globus4.0.3 instalation to get the use
> > of voms, and ran into some problems when wanting to use myproxy. It worked
> > fine before.
> > The problem I get when I run  myproxy-init -a -s host.uib.no is:
> >
> > Enter GRID pass phrase for this identity:
> > Creating proxy
> > ....................................................................................................
> > ................................ Done
> > Proxy Verify OK
> > Your proxy is valid until: Fri Oct  6 13:40:59 2006
> > Enter MyProxy pass phrase:
> > Verifying - Enter MyProxy pass phrase:
> > Error authenticating: GSS Major Status: General failure
> > GSS Minor Status Error Chain:
> > globus_gsi_gssapi: Error with GSI credential
> > globus_gsi_gssapi: Error with GSI credential
> > globus_credential: Error with credential's certificate
> > globus_cert_utils: Proxy does not comply with proxy certificate
> > standardError determining certificate type: Can't c onvert DER encoded
> > PROXYCERTINFO extension to internal form
> >
> > If I don't use the myProxy and just get a certificate a can do gridftp etc,
> > so can anyone help me
> >
> > Håkon