You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 3 Next »

GridShib for Globus Toolkit Installation

A lightweight alternative to installing the full Globus Toolkit is to only install the Java WS Core component of GT4, and then install GridShib for GT on top of that. In fact, this is the only option under Windows, which does not support the full Globus Toolkit.

This page gives detailed instructions for installing Java WS Core and GridShib for GT on Windows. Software requirements include JDK 1.4.2 (or higher) and Ant 1.6 (or higher), which we assume are already installed on Windows.

  1. Install the binary version of Java WS Core 4.0.3
    1. Extract the ZIP archive to any folder on your hard drive.
    2. Open a Command Prompt window, change directory to the installation directory, and set the GLOBUS_LOCATION environment variable (which is case sensitive): 
        > set GLOBUS_LOCATION=%CD%
  > echo %GLOBUS_LOCATION%
    3. As a crude test, start the container (with transport-level security disabled): 
        > bin\globus-start-container -nosec
  Starting SOAP server at: http://141.142.251.212:8080/wsrf/services/
  With the following services:

  [1]: http://141.142.251.212:8080/wsrf/services/AdminService
  [2]: http://141.142.251.212:8080/wsrf/services/AuthzCalloutTestService
  [3]: http://141.142.251.212:8080/wsrf/services/ContainerRegistryEntryService
  [4]: http://141.142.251.212:8080/wsrf/services/ContainerRegistryService
  [5]: http://141.142.251.212:8080/wsrf/services/CounterService
  [6]: http://141.142.251.212:8080/wsrf/services/ManagementService
  [7]: http://141.142.251.212:8080/wsrf/services/NotificationConsumerFactoryService
  [8]: http://141.142.251.212:8080/wsrf/services/NotificationConsumerService
  [9]: http://141.142.251.212:8080/wsrf/services/NotificationTestService
  [10]: http://141.142.251.212:8080/wsrf/services/PersistenceTestSubscriptionManager
  [11]: http://141.142.251.212:8080/wsrf/services/SampleAuthzService
  [12]: http://141.142.251.212:8080/wsrf/services/SecureCounterService
  [13]: http://141.142.251.212:8080/wsrf/services/SecurityTestService
  [14]: http://141.142.251.212:8080/wsrf/services/ShutdownService
  [15]: http://141.142.251.212:8080/wsrf/services/SubscriptionManagerService
  [16]: http://141.142.251.212:8080/wsrf/services/TestAuthzService
  [17]: http://141.142.251.212:8080/wsrf/services/TestRPCService
  [18]: http://141.142.251.212:8080/wsrf/services/TestService
  [19]: http://141.142.251.212:8080/wsrf/services/TestServiceRequest
  [20]: http://141.142.251.212:8080/wsrf/services/TestServiceWrongWSDL
  [21]: http://141.142.251.212:8080/wsrf/services/Version
  [22]: http://141.142.251.212:8080/wsrf/services/WidgetNotificationService
  [23]: http://141.142.251.212:8080/wsrf/services/WidgetService
  [24]: http://141.142.251.212:8080/wsrf/services/gsi/AuthenticationService
      Press Ctrl-C to abort the container.
  2. Obtain a user certificate and stop the container normally
    1. In the previous Command Prompt window, start the container again: 
        > echo %GLOBUS_LOCATION%
  > bin\globus-start-container -nosec
  Starting SOAP server at: http://141.142.251.212:8080/wsrf/services/
  With the following services...
    2. Open another Command Prompt window, change directory to the installation directory, and try to stop the container: 
        > set GLOBUS_LOCATION=%CD%
  > echo %GLOBUS_LOCATION%
  > bin\globus-stop-container
  Error: ; nested exception is:
  GSSException: Defective credential detected [Caused by: 
  Proxy file (C:\DOCUME~1\TOMSCA~1\LOCALS~1\Temp\x509up_u_tom scavo) not found.]
    3. Press Ctrl-C to abort the container.
    4. Request an X.509 end-entity certificate from the GridShib CA
    5. In the first Command Prompt window, start the container as above.
    6. In the second Command Prompt window, try to stop the container again: 
        > bin\globus-stop-container
  Error: ; nested exception is:
  java.net.ConnectException: Connection refused: connect
    7. Finally, stop the container normally: 
        > bin\globus-stop-container -s http://localhost:8080/wsrf/services/ShutdownService -m msg
  3. Start and stop a secure container
    1. In a Command Prompt window, start the container: 
        > echo %GLOBUS_LOCATION%
  > bin\globus-start-container
  Starting SOAP server at: https://141.142.250.163:8443/wsrf/services/
  With the following services...
    2. In another Command Prompt window, change directory to the installation directory, and stop the container: 
        > set GLOBUS_LOCATION=%CD%
  > echo %GLOBUS_LOCATION%
  > bin\globus-stop-container
  4. Start and stop a secure service
    1. In a Command Prompt window, start the container: 
        > echo %GLOBUS_LOCATION%
  > bin\globus-start-container
  Starting SOAP server at: https://141.142.250.163:8443/wsrf/services/
  With the following services...
    2. In another Command Prompt window, change directory to the installation directory, and try to request a service: 
        > set GLOBUS_LOCATION=%CD%
  > echo %GLOBUS_LOCATION%
  > bin\counter-client -s https://localhost:8443/wsrf/services/SecureCounterService -m conv
  Error: ; nested exception is:
        javax.xml.rpc.soap.SOAPFaultException: ; nested exception is:
        org.globus.common.ChainedIOException: Authentication failed 
        [Caused by: Operation unauthorized (Mechanism level: Authorization failed.
    3. Stop the container: 
        > bin\globus-stop-container
    4. Comment out the line 
        <authz value="self"/>
      in the SecureCounterService security descriptor: 
        %GLOBUS_LOCATION%\etc\globus-wsrf_core_samples_counter\security-config.xml
    5. Start the container and request the service again: 
        > bin\counter-client -s https://localhost:8443/wsrf/services/SecureCounterService -m conv
  Error: ; nested exception is:
        javax.xml.rpc.soap.SOAPFaultException: ; nested exception is:
        org.globus.common.ChainedIOException: Authentication failed 
        [Caused by: Operation unauthorized (Mechanism level: Authorization failed.
  5. TBA

  • No labels