[ET Trac] [Einstein Toolkit] #381: Cannot log in to Kraken using default simfactory configuration

Einstein Toolkit trac-noreply at einsteintoolkit.org
Mon Apr 4 10:18:33 CDT 2011


#381: Cannot log in to Kraken using default simfactory configuration
------------------------+---------------------------------------------------
 Reporter:  hinder      |       Owner:  mthomas   
     Type:  defect      |      Status:  new       
 Priority:  major       |   Milestone:  ET_2011_05
Component:  SimFactory  |     Version:            
 Keywords:              |  
------------------------+---------------------------------------------------
 SimFactory uses the gsissh method to connect to Kraken.  This requires a
 "proxy" to be created locally via the myproxy-logon command.  There is
 currently logic in Perl simfactory's mdb.pm file to automatically run
 myproxy-logon and prompt for the passphrase.

 This does not work for me.  I get the error

 Failed to receive credentials.
 ERROR from myproxy-server (myproxy.teragrid.org):
 PAM authentication failed: Permission denied

 (see below for the full output).  If I remove the localsshsetup key, I can
 run the myproxy-logon command manually and then connect using simfactory.

 Looking at the full output below, it seems that it is trying to run
 myproxy-logon with my local username (ian) instead of the remote one
 (hinder).  If I replace the @USER@ in the myproxy-logon command with my
 Kraken username, everything works as expected.

 MacBook:etrelease ian$ sim login kraken
 Simulation Factory:
 Executing: {
 mkdir -p /Users/ian/Cactus/etrelease/.globus &&
 : >> /Users/ian/Cactus/etrelease/.globus/proxy-teragrid &&
 chmod go-rwx /Users/ian/Cactus/etrelease/.globus/proxy-teragrid &&
 export X509_USER_PROXY=/Users/ian/Cactus/etrelease/.globus/proxy-teragrid
 &&
 : mkdir -p /Users/ian/Cactus/etrelease/.globus/certificates-teragrid &&
 : export X509_CERT_DIR=/Users/ian/Cactus/etrelease/.globus/certificates-
 teragrid &&
 {
     {
         grid-proxy-info -issuer -file /Users/ian/Cactus/etrelease/.globus
 /proxy-teragrid 2>/dev/null | grep "^/C=US/O=National Center for
 Supercomputing Applications/" >/dev/null 2>/dev/null &&
         test $(grid-proxy-info -timeleft -file
 /Users/ian/Cactus/etrelease/.globus/proxy-teragrid 2>/dev/null) -gt 0
 2>/dev/null
     } || {
         { grid-proxy-destroy 2>/dev/null || true; } &&
         myproxy-logon -p 7514 -s myproxy.teragrid.org -T -l ian -o
 /Users/ian/Cactus/etrelease/.globus/proxy-teragrid
     }
 } &&
 { globus-update-certificate-dir > /dev/null 2>&1 || true; }; } && gsissh
 -t hinder at kraken-gsi2.nics.teragrid.org '{ source /etc/profile; } && cd
 /nics/b/home/hinder/Cactus/etrelease && $SHELL -l'
 Enter MyProxy pass phrase:
 Failed to receive credentials.
 ERROR from myproxy-server (myproxy.teragrid.org):
 PAM authentication failed: Permission denied

-- 
Ticket URL: <https://trac.einsteintoolkit.org/ticket/381>
Einstein Toolkit <http://einsteintoolkit.org>
The Einstein Toolkit


More information about the Trac mailing list