Daily Lab / POC Activities

Extramural:

• Added user account entries to /etc/grid-security/grid-mapfile to Tarrant server

Command Used: $GLOBUS_LOCATION/sbin/grid-mapfile-add-entry \
-dn "USER DN info removed" \
-ln user_account_removed

• Added new usercert.pem to gridftp users on Tarrant server

Command Used: cp username_usercert.pem to /home/username_removed/.globus/usercert.pem

• I'm having issues with the current usercerts. The problem is the certs don't match the userkey.pem information and errors when a grid-proxy-init command is issued.

ERROR: Could not verify the signature of the generated proxy certificate
This is likely due to a non-matching user key and cert

Use -debug for further information.

• Created a start script in /etc/init.d for the globus container. Script below:

#!/bin/sh -e
case "$1" in
start)
su - globus /usr/local/globus-4.0.5/start-stop start
;;
stop)
su - globus /usr/local/globus-4.0.5/start-stop stop
;;
restart)
$0 stop
sleep 1
$0 start
;;
*)
printf "Usage: $0 {start|stop|restart}\n" >&2
exit 1
;;
esac
exit 0

• Tested gridftp from Atlanta Lab to the Tarrant server. The test failed with the following error message:

globus_xio: Unable to connect to server.name-removed.net:2811
globus_xio: Operation was canceled
globus_xio: Operation timed out

• Attempted test while connected and disconnected from VPN. I was unable to telnet to 2811 so I assume the port is being blocked by a firewall. I verified the server was listening on port 2811 using the following command:

netstat -an |grep 2811
tcp 0 0 0.0.0.0:2811 0.0.0.0:* LISTEN