[Bug 531252] Review Request: lfc - LCG File Catalog (LFC)

[bugzilla at redhat.com]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.


https://bugzilla.redhat.com/show_bug.cgi?id=531252

--- Comment #16 from Mattias Ellert <mattias.ellert at fysast.uu.se> 2010-02-13 16:22:36 EST ---
(In reply to comment #11)
> Looking at this now again.
> 
> Having some problems using the lfc commands: e.g.
> 
> $ lfc-ls prod-lfc-shared-central.cern.ch:/grid/dteam
> send2nsd: NS002 - send error : client_establish_context: The server had a
> problem while authenticating our connection
> prod-lfc-shared-central.cern.ch:/grid/dteam: Could not secure the connection
> 
> There are some env variables to add debugging output to this but 
> I forget what they are.
> 
> I've a correct proxy and also the openssl 1.0 version of the CAs installed.
> 
> will continue to look at things anyway.    

The authentication problem is a known issue. It is due to the current
globus-gssapi-gsi package not working correctly with openssl 1.0.0.

These issues have been fixed in today's build of globus-gssapi-gsi in koji
(globus-gssapi-gsi-7.0-2). So please use this version if you are on a Fedora
release that uses openssl 1.0.0.

[ellert at ellert ~]$ rpm -q lfc-client
lfc-client-1.7.3.1-4.fc12.x86_64

[ellert at ellert ~]$ rpm -q globus-gssapi-gsi
globus-gssapi-gsi-7.0-2.fc12.x86_64

[ellert at ellert ~]$ lfc-ls lfc1.ndgf.org:/grid
atlas
ops.ndgf.org

The globus-gssapi-gsi-7.0-2 is part of the big update to Globus Toolkit 5. This
transition has been completed for the existing Globus packages in F13, with the
exception of globus-gridftp-server-control where the new version depends on the
new globus-xio-pipe-driver package submitted for review.

For F11, F12 and EPEL the GT5 update has been imported to CVS and most of the
packages have been built, but some of the builds involves requesting and
waiting for buildroot overrides. The builds are almost done - the buildroot
override I am currently waiting for is the second to last one. But of course
the new dependency on globus-xio-pipe-driver applies here too, if the update
should be really complete.

-- 
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.