Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[PM-1173] cleanup jobs failing against Titan gridftp server due to RFC 2818 compliance #1287

Closed
mayani opened this issue Dec 14, 2024 · 2 comments
Assignees
Labels
affects-4.7.4 Minor release after 4.7.3 affects-master Current Trunk Version CLI: pegasus-gridftp GridFTP client that supports listing and removing remote files CLI: pegasus-transfer fix-4.7.5 Minor release after 4.7.4 fix-4.8.0 Major release after 4.7.0 fix-master Current Trunk Version major Major loss of function. sync-from-jira Synced from Jira

Comments

@mayani
Copy link
Member

mayani commented Dec 14, 2024

Cleanup jobs are failing while connecting to the titan gridftp server.

Unable to connect to gridftp.ccs.ornl.gov:2811
Authentication failed [Caused by: Operation unauthorized (Mechanism level: [JGLOBUS-56] Authorization failed. Expected "/CN=host/dtn18.ccs.ornl.gov&quot ; target but received "/DC=org/DC=opensciencegrid/O=Open Science Grid/OU=Services/CN=dtn.ccs.ornl.gov")]
Operation unauthorized (Mechanism level: [JGLOBUS-56] Authorization failed.
Expected "/CN=host/dtn18.ccs.ornl.gov" target but received "/DC=org/DC=opensciencegrid/O=Open Science Grid/OU=Services/CN=dtn.ccs.ornl.gov")

Reporter: @scallag
Resolution: Fixed
Watchers:
@rynge
@vahi

@mayani
Copy link
Member Author

mayani commented Dec 14, 2024

Author: @vahi

we looked at it, and Mats is right.

This is being triggered because we think JGlobus ( what pegasus-gridftp uses) is not compliant with

https://docs.globus.org/security-bulletins/2015-12-strict-mode/

It does appear that Titan has reissued the host certificates correctly in compliance with the above bulletin.
However, JGlobus has not been updated. There is an open bug in JGlobus since last year that has not been resolved
jglobus/JGlobus#159

Looks like JGlobus is no longer maintained with last release in 2014.

We decided to revert back to using g-u-c for removing files by transferring a zero byte file for 4.7.5. pegasus-transfer will fall back on g-u-c if pegasus-gridftp fails.

For 4.8.0 we will remove pegasus-gridftp all together and explore some other client like GFAL2 that pegasus-transfer already uses for xrootd and SRM

@mayani
Copy link
Member Author

mayani commented Dec 14, 2024

Author: @rynge

Fix has been committed which uses globus-url-copy for all gridftp operations.

@mayani mayani added sync-from-jira Synced from Jira CLI: pegasus-gridftp GridFTP client that supports listing and removing remote files labels Dec 14, 2024
@mayani mayani changed the title PM-1173 [PM-1173] cleanup jobs failing against Titan gridftp server due to RFC 2818 compliance Dec 14, 2024
@mayani mayani added affects-4.7.4 Minor release after 4.7.3 fix-master Current Trunk Version fix-4.8.0 Major release after 4.7.0 fix-4.7.5 Minor release after 4.7.4 major Major loss of function. labels Dec 14, 2024
@mayani mayani closed this as completed Dec 14, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
affects-4.7.4 Minor release after 4.7.3 affects-master Current Trunk Version CLI: pegasus-gridftp GridFTP client that supports listing and removing remote files CLI: pegasus-transfer fix-4.7.5 Minor release after 4.7.4 fix-4.8.0 Major release after 4.7.0 fix-master Current Trunk Version major Major loss of function. sync-from-jira Synced from Jira
Projects
None yet
Development

No branches or pull requests

2 participants