we are currently facing an issue when trying to submit a job to a gLite VO. Upon submission we receive the following error in the logs:
-+--------- addVomsAndDelegateProxy - start - delegationId: 15167 proxy:/opt/guse/apache-tomcat-6.0.39/temp/dci_bridge/authenticationcache/httpsportal.verce.euwspgrade15167gliteverce.eu
-rem.life: 359970
-certDir:/opt/guse/apache-tomcat-6.0.39/temp/dci_bridge/authenticationcache/httpsportal.verce.euwspgrade15167gliteverce.eu_tmpdir cmd:voms-proxy-init -ignorewarn -timeout 30 -voms verce.eu: -noregen -out x509up
-voms-proxy-init -ignorewarn -timeout 30 -voms verce.eu: -noregen -out x509up
-Contacting verce-voms.scai.fraunhofer.de:15000 [/C=DE/O=GermanGrid/OU=Fraunhofer SCAI/CN=verce-voms.scai.fraunhofer.de] "verce.eu"...
-Error contacting verce-voms.scai.fraunhofer.de:15000 for VO verce.eu: Received fatal alert: unknown_ca
-Error contacting verce-voms.scai.fraunhofer.de:15000 for VO verce.eu: peer not authenticated
-Error contacting verce-voms.scai.fraunhofer.de:15000 for VO verce.eu: REST and legacy VOMS endpoints failed.
-None of the contacted servers for verce.eu were capable of returning a valid AC for the user.
-User's request for VOMS attributes could not be fulfilled.
DEBUG [glite-DOWNLOAD/943004f0-2816-4e09-af80-9049cd238ab3] (AuthenticationService.java:162) - certfailed:{httpsportal.verce.euwspgrade15167gliteverce.eu=Add VOMS - error. The remaining lifetime of the proxy in the submission time: 99:59:27}
java.lang.Exception: Add VOMS - error. The remaining lifetime of the proxy in the submission time: 99:59:27
at hu.sztaki.lpds.submitter.grids.Grid_glite.addVomsAndDelegateProxy(Grid_glite.java:270)
at hu.sztaki.lpds.dcibridge.service.authentication.AuthenticationService.getProxy(AuthenticationService.java:155)
at hu.sztaki.lpds.dcibridge.threads.Download.run(Download.java:70)
ERROR [glite-DOWNLOAD/943004f0-2816-4e09-af80-9049cd238ab3] (AuthenticationService.java:209) - getproxy failed
java.lang.Exception: Add VOMS - error. The remaining lifetime of the proxy in the submission time: 99:59:27
at hu.sztaki.lpds.submitter.grids.Grid_glite.addVomsAndDelegateProxy(Grid_glite.java:270)
at hu.sztaki.lpds.dcibridge.service.authentication.AuthenticationService.getProxy(AuthenticationService.java:155)
at hu.sztaki.lpds.dcibridge.threads.Download.run(Download.java:70)
I have checked with a local account, there both voms-proxy-init and voms-proxy-init -noregen work without problems. Would you have any idea why the "Received fatal alert: unknown_ca" could come from? The CA certificate is installed through the EGI trustanchors release in /etc/grid-security/certificates.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Dear gUse team,
we are currently facing an issue when trying to submit a job to a gLite VO. Upon submission we receive the following error in the logs:
-+--------- addVomsAndDelegateProxy - start - delegationId: 15167 proxy:/opt/guse/apache-tomcat-6.0.39/temp/dci_bridge/authenticationcache/httpsportal.verce.euwspgrade15167gliteverce.eu
-rem.life: 359970
-certDir:/opt/guse/apache-tomcat-6.0.39/temp/dci_bridge/authenticationcache/httpsportal.verce.euwspgrade15167gliteverce.eu_tmpdir cmd:voms-proxy-init -ignorewarn -timeout 30 -voms verce.eu: -noregen -out x509up
-voms-proxy-init -ignorewarn -timeout 30 -voms verce.eu: -noregen -out x509up
-Contacting verce-voms.scai.fraunhofer.de:15000 [/C=DE/O=GermanGrid/OU=Fraunhofer SCAI/CN=verce-voms.scai.fraunhofer.de] "verce.eu"...
-Error contacting verce-voms.scai.fraunhofer.de:15000 for VO verce.eu: Received fatal alert: unknown_ca
-Error contacting verce-voms.scai.fraunhofer.de:15000 for VO verce.eu: peer not authenticated
-Error contacting verce-voms.scai.fraunhofer.de:15000 for VO verce.eu: REST and legacy VOMS endpoints failed.
-None of the contacted servers for verce.eu were capable of returning a valid AC for the user.
-User's request for VOMS attributes could not be fulfilled.
DEBUG [glite-DOWNLOAD/943004f0-2816-4e09-af80-9049cd238ab3] (AuthenticationService.java:162) - certfailed:{httpsportal.verce.euwspgrade15167gliteverce.eu=Add VOMS - error. The remaining lifetime of the proxy in the submission time: 99:59:27}
java.lang.Exception: Add VOMS - error. The remaining lifetime of the proxy in the submission time: 99:59:27
at hu.sztaki.lpds.submitter.grids.Grid_glite.addVomsAndDelegateProxy(Grid_glite.java:270)
at hu.sztaki.lpds.dcibridge.service.authentication.AuthenticationService.getProxy(AuthenticationService.java:155)
at hu.sztaki.lpds.dcibridge.threads.Download.run(Download.java:70)
ERROR [glite-DOWNLOAD/943004f0-2816-4e09-af80-9049cd238ab3] (AuthenticationService.java:209) - getproxy failed
java.lang.Exception: Add VOMS - error. The remaining lifetime of the proxy in the submission time: 99:59:27
at hu.sztaki.lpds.submitter.grids.Grid_glite.addVomsAndDelegateProxy(Grid_glite.java:270)
at hu.sztaki.lpds.dcibridge.service.authentication.AuthenticationService.getProxy(AuthenticationService.java:155)
at hu.sztaki.lpds.dcibridge.threads.Download.run(Download.java:70)
I have checked with a local account, there both voms-proxy-init and voms-proxy-init -noregen work without problems. Would you have any idea why the "Received fatal alert: unknown_ca" could come from? The CA certificate is installed through the EGI trustanchors release in /etc/grid-security/certificates.