Difference between revisions of "Tools/Manuals/TS11"
< Tools
Jump to navigation
Jump to search
(Created page with '{{TOC_right}} Category:FAQ ------ Back to Troubleshooting Guide ------ = GRAM Authentication test failure = == Full message…') |
|||
(3 intermediate revisions by 2 users not shown) | |||
Line 1: | Line 1: | ||
{{Template:Op menubar}} | |||
{{Template:Doc_menubar}} | |||
[[Category:Operations Manuals]] | |||
{{TOC_right}} | {{TOC_right}} | ||
------ | ------ | ||
Back to [[Manuals | Back to [[Tools/Manuals/SiteProblemsFollowUp|Troubleshooting Guide]] | ||
------ | ------ | ||
Line 10: | Line 13: | ||
$ globus-job-run lxn1184.cern.ch /usr/bin/env | $ globus-job-run lxn1184.cern.ch /usr/bin/env | ||
GRAM Job submission failed because the connection to the server failed (check host and port) (error code 12) | GRAM Job submission failed because the connection to the server failed | ||
(check host and port) (error code 12) | |||
$ globusrun -a -r lxn1184.cern.ch | $ globusrun -a -r lxn1184.cern.ch | ||
GRAM Authentication test failure: connecting to the job manager failed. | GRAM Authentication test failure: connecting to the job manager failed. | ||
Possible reasons: job terminated, invalid job contact, network problems, ... | |||
== Diagnosis == | == Diagnosis == | ||
Line 24: | Line 29: | ||
#Is the CA perhaps overridden by a file in your <font face="Courier New,Courier">~/.globus</font> directory? | #Is the CA perhaps overridden by a file in your <font face="Courier New,Courier">~/.globus</font> directory? | ||
#Are the certificate revocation lists (CRLs) up to date? | #Are the certificate revocation lists (CRLs) up to date? | ||
#See also [[Manuals/ | #See also [[Tools/Manuals/TS01|7_authentication_failed]] | ||
#Is the time correct on the client and the server? If the client's time is ahead of the server's time, the service might consider a fresh proxy not yet valid. | #Is the time correct on the client and the server? If the client's time is ahead of the server's time, the service might consider a fresh proxy not yet valid. |
Latest revision as of 13:25, 23 November 2012
Main | EGI.eu operations services | Support | Documentation | Tools | Activities | Performance | Technology | Catch-all Services | Resource Allocation | Security |
Documentation menu: | Home • | Manuals • | Procedures • | Training • | Other • | Contact ► | For: | VO managers • | Administrators |
Back to Troubleshooting Guide
GRAM Authentication test failure
Full message
$ globus-job-run lxn1184.cern.ch /usr/bin/env GRAM Job submission failed because the connection to the server failed (check host and port) (error code 12) $ globusrun -a -r lxn1184.cern.ch GRAM Authentication test failure: connecting to the job manager failed. Possible reasons: job terminated, invalid job contact, network problems, ...
Diagnosis
The client could not authenticate the service.
Solution
- Is the CA for the service present on the client machine?
- Is it still valid? Check with: openssl x509 -noout -text -in the_CA_file
- Check $X509_CERT_DIR (instead of /etc/grid-security/certificates) if defined.
- Is the CA perhaps overridden by a file in your ~/.globus directory?
- Are the certificate revocation lists (CRLs) up to date?
- See also 7_authentication_failed
- Is the time correct on the client and the server? If the client's time is ahead of the server's time, the service might consider a fresh proxy not yet valid.