ä¸çŸ¥é“為什麼,工作ä¸çš„ GridFTP server 被è¨å®šåŽ»å– CAS (Community Authorization Service) 的授權 (authorization) 資料來æºäº†ã€‚
在 globus.org 3.2 documentation CAS System Administrator's Guide 裡的 CAS-enabled GridFTP Server 一節裡有æ到,GridFTP server æœƒè®€å– '/etc/grid-security' 下 'gsi-authz.conf' å’Œ 'gsi-gaa.conf' 兩個檔案裡的è¨å®šï¼Œä¾†æ±ºå®šå¦‚何進行授權與å°æ‡‰çš„工作。這兩個檔案在我原本的 GT 3.2.1 installation 裡並沒有出ç¾ï¼Œå¯èƒ½æ˜¯æˆ‘在把 GT 3.2.1 佈署到 Tomcat4.1.30 時,'ant -Dtomcat.dir=../tomcat4 deployTomcat' å¹«æˆ‘åŠ é€²åŽ»çš„ (這åªæ˜¯å¯èƒ½ï¼Œæˆ‘還沒有é‡è¤‡æ¸¬è©¦éŽä¾†ç¢ºå®šé€™ä¸€é»ž)。
å› ç‚ºé€™å…©å€‹æª”æ¡ˆçš„å˜åœ¨ (我還ä¸æ¸…楚其語法與é‹ä½œæ©Ÿåˆ¶),GridFTP 跑去抓 CAS 的資料,而無法從 '/etc/grid-security/grid-mapfile' 來å–得憑è‰èˆ‡ä½¿ç”¨è€…çš„å°æ‡‰è³‡æ–™::
$ globus-url-copy gsiftp://localhost/tmp/test1 file:///tmp/test2
error: globus_ftp_client: the server responded with an error
530 No local mapping for Globus ID
在 'globus-url-copy' å¾ŒåŠ ä¸Š '-dbg',å¯ä»¥æŠŠå•é¡Œçœ‹å¾—更清楚::
$ globus-url-copy -dbg gsiftp://localhost/tmp/test1 file:///tmp/test2
debug: starting to get gsiftp://localhost/tmp/test1
debug: connecting to gsiftp://localhost/tmp/test1
debug: response from gsiftp://localhost/tmp/test1:
220 some.domain.name GridFTP Server 1.17 CAS/SAML
enabled GSSAPI type Globus/GSI wu-2.6.2 (gcc32dbg, 1083879869-52) ready.
debug: authenticating with gsiftp://localhost/tmp/test1
debug: response from gsiftp://localhost/tmp/test1:
530 No local mapping for Globus ID
debug: fault on connection to gsiftp://localhost/tmp/test1
debug: data callback, error globus_ftp_client: the server responded
with an error, buffer 0x404b1008, length 0, offset=0, eof=true
debug: operation complete
error: globus_ftp_client: the server responded with an error
530 No local mapping for Globus ID
在 CAS System Administrator's Guide çš„ Installation Guide 有æ到:使用 tomcat 作為 globus çš„ container 的話,"in which case the GT3.2 Core and the CAS service **needs** to be deployed"。所以的確很å¯èƒ½æ˜¯ 'ant -Dtomcat.dir=../tomcat4 deployTomcat' 作了這個修改。改回ä¸ä½¿ç”¨ CAS çš„çµ„æ…‹ï¼Œæœƒæœ‰ä½•ç¨®å½±éŸ¿å°šå¾…æ·±å…¥ç ”ç©¶ã€‚
Globus çš„å•é¡ŒçœŸä¸å°‘,è¦èŠ±åœ¨ç ”究測試上的時間還需è¦å¾ˆå¤šã€‚
在 globus.org 3.2 documentation CAS System Administrator's Guide 裡的 CAS-enabled GridFTP Server 一節裡有æ到,GridFTP server æœƒè®€å– '/etc/grid-security' 下 'gsi-authz.conf' å’Œ 'gsi-gaa.conf' 兩個檔案裡的è¨å®šï¼Œä¾†æ±ºå®šå¦‚何進行授權與å°æ‡‰çš„工作。這兩個檔案在我原本的 GT 3.2.1 installation 裡並沒有出ç¾ï¼Œå¯èƒ½æ˜¯æˆ‘在把 GT 3.2.1 佈署到 Tomcat4.1.30 時,'ant -Dtomcat.dir=../tomcat4 deployTomcat' å¹«æˆ‘åŠ é€²åŽ»çš„ (這åªæ˜¯å¯èƒ½ï¼Œæˆ‘還沒有é‡è¤‡æ¸¬è©¦éŽä¾†ç¢ºå®šé€™ä¸€é»ž)。
å› ç‚ºé€™å…©å€‹æª”æ¡ˆçš„å˜åœ¨ (我還ä¸æ¸…楚其語法與é‹ä½œæ©Ÿåˆ¶),GridFTP 跑去抓 CAS 的資料,而無法從 '/etc/grid-security/grid-mapfile' 來å–得憑è‰èˆ‡ä½¿ç”¨è€…çš„å°æ‡‰è³‡æ–™::
$ globus-url-copy gsiftp://localhost/tmp/test1 file:///tmp/test2
error: globus_ftp_client: the server responded with an error
530 No local mapping for Globus ID
在 'globus-url-copy' å¾ŒåŠ ä¸Š '-dbg',å¯ä»¥æŠŠå•é¡Œçœ‹å¾—更清楚::
$ globus-url-copy -dbg gsiftp://localhost/tmp/test1 file:///tmp/test2
debug: starting to get gsiftp://localhost/tmp/test1
debug: connecting to gsiftp://localhost/tmp/test1
debug: response from gsiftp://localhost/tmp/test1:
220 some.domain.name GridFTP Server 1.17 CAS/SAML
enabled GSSAPI type Globus/GSI wu-2.6.2 (gcc32dbg, 1083879869-52) ready.
debug: authenticating with gsiftp://localhost/tmp/test1
debug: response from gsiftp://localhost/tmp/test1:
530 No local mapping for Globus ID
debug: fault on connection to gsiftp://localhost/tmp/test1
debug: data callback, error globus_ftp_client: the server responded
with an error, buffer 0x404b1008, length 0, offset=0, eof=true
debug: operation complete
error: globus_ftp_client: the server responded with an error
530 No local mapping for Globus ID
在 CAS System Administrator's Guide çš„ Installation Guide 有æ到:使用 tomcat 作為 globus çš„ container 的話,"in which case the GT3.2 Core and the CAS service **needs** to be deployed"。所以的確很å¯èƒ½æ˜¯ 'ant -Dtomcat.dir=../tomcat4 deployTomcat' 作了這個修改。改回ä¸ä½¿ç”¨ CAS çš„çµ„æ…‹ï¼Œæœƒæœ‰ä½•ç¨®å½±éŸ¿å°šå¾…æ·±å…¥ç ”ç©¶ã€‚
Globus çš„å•é¡ŒçœŸä¸å°‘,è¦èŠ±åœ¨ç ”究測試上的時間還需è¦å¾ˆå¤šã€‚
Posted by yungyuc
at 17:11,
0 comment,
0 trackback.