[Ibergrid-support] [IBERGRID-SUPPORT #832] VOMS web server

[sse@iaa.es via IBERGRID-RT]

<URL: https://rt-ngi.rediris.es/Ticket/Display.html?id=832 >

I can not create the proxy. Here you can see the output (debug mode):


[amiga4gas_1 at srv-prj-wsamiga-grid ~]$ voms-proxy-init --cert
~/.globus/robot/usercert.pem -k ~/.globus/robot/userkey.pem --debug --voms
phys.vo.ibergrid.eu
Looking for VOMS AA certificates in /etc/grid-security/vomsdir...
Looking for LSC information in
/etc/grid-security/vomsdir/phys.vo.ibergrid.eu...
Loaded LSC information from file /etc/grid-security/vomsdir/
phys.vo.ibergrid.eu/ibergrid-voms.ifca.es.lsc: LSCFile
[filename=/etc/grid-security/vomsdir/
phys.vo.ibergrid.eu/ibergrid-voms.ifca.es.lsc, vo=phys.vo.ibergrid.eu,
hostname=ibergrid-voms.ifca.es,
certChainDescription=[/DC=es/DC=irisgrid/O=ifca/CN=host/
ibergrid-voms.ifca.es, /DC=es/DC=irisgrid/CN=IRISGridCA]]
Loaded LSC information from file /etc/grid-security/vomsdir/
phys.vo.ibergrid.eu/voms01.ncg.ingrid.pt.lsc: LSCFile
[filename=/etc/grid-security/vomsdir/
phys.vo.ibergrid.eu/voms01.ncg.ingrid.pt.lsc, vo=phys.vo.ibergrid.eu,
hostname=voms01.ncg.ingrid.pt,
certChainDescription=[/C=PT/O=LIPCA/O=LIP/OU=Lisboa/CN=voms01.ncg.ingrid.pt,
/C=PT/O=LIPCA/CN=LIP Certification Authority]]
Looking for VOMS AA certificates in
/etc/grid-security/vomsdir/phys.vo.ibergrid.eu...
Looking for user credentials in
[/home/amiga4gas/amiga4gas_1/.globus/robot/userkey.pem,
/home/amiga4gas/amiga4gas_1/.globus/robot/usercert.pem]...
Enter GRID pass phrase for this identity:
Credentials loaded successfully
[/home/amiga4gas/amiga4gas_1/.globus/robot/userkey.pem,
/home/amiga4gas/amiga4gas_1/.globus/robot/usercert.pem]
Loading CA Certificate /etc/grid-security/certificates/9dd23746.0.
Loading CRL /etc/grid-security/certificates/9dd23746.r0.
Loading CRL /etc/grid-security/certificates/9dd23746.r0.
Loading EACL namespace (signing_policy)
/etc/grid-security/certificates/9dd23746.signing_policy.
Looking for VOMSES information in /etc/vomses...
Loaded vomses information 'VOMSServerInfo [alias=phys.vo.ibergrid.eu,
voName=phys.vo.ibergrid.eu, URL=voms://voms01.ncg.ingrid.pt:40007,
vomsServerDN=/C=PT/O=LIPCA/O=LIP/OU=Lisboa/CN=voms01.ncg.ingrid.pt]' from
/etc/vomses.
Contacting voms01.ncg.ingrid.pt:40007 [/C=PT/O=LIPCA/O=LIP/OU=Lisboa/CN=
voms01.ncg.ingrid.pt] "phys.vo.ibergrid.eu"...
Sent HTTP request for
https://voms01.ncg.ingrid.pt:40007/generate-ac?fqans=/phys.vo.ibergrid.eu&lifetime=43200
Loading CA Certificate /etc/grid-security/certificates/11b4a5a2.0.
Loading CRL /etc/grid-security/certificates/11b4a5a2.r0.
Loading CRL /etc/grid-security/certificates/11b4a5a2.r0.
Loading EACL namespace (signing_policy)
/etc/grid-security/certificates/11b4a5a2.signing_policy.
Received VOMS response:

<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<voms>
<error>
<code>NoSuchUser</code>
<message>phys.vo.ibergrid.eu: User unknown to this VO.</message>
</error>
</voms>

Remote VOMS server contacted succesfully.

VOMS server voms01.ncg.ingrid.pt:40007 returned the following errors:
phys.vo.ibergrid.eu: User unknown to this VO.
User's request for VOMS attributes could not be fulfilled.
org.italiangrid.voms.VOMSError: User's request for VOMS attributes could
not be fulfilled.
    at
org.italiangrid.voms.clients.impl.DefaultVOMSProxyInitBehaviour.getAttributeCertificates(DefaultVOMSProxyInitBehaviour.java:467)
    at
org.italiangrid.voms.clients.impl.DefaultVOMSProxyInitBehaviour.initProxy(DefaultVOMSProxyInitBehaviour.java:169)
    at
org.italiangrid.voms.clients.VomsProxyInit.execute(VomsProxyInit.java:263)
    at
org.italiangrid.voms.clients.VomsProxyInit.<init>(VomsProxyInit.java:55)
    at
org.italiangrid.voms.clients.VomsProxyInit.main(VomsProxyInit.java:40)


2014-10-09 11:39 GMT+02:00 Pablo Orviz Fernandez via IBERGRID-RT <
helpdesk-ibergrid at rediris.es>:

> Sorry for the delay. This DN was not registered in the DB so I've just
> manually
> created it. Could you check if you can create a proxy?
>



-- 
Susana Sánchez Expósito

Instituto de Astrofísica de Andalucía   IAA (CSIC)
Camino Bajo de Huétor, 50. Granada E-18008
Tel:(+34) 958 121 311 / (+34) 958 230 618
Fax:(+34) 958 814 530
e-mail: sse at iaa.es