[gridftp-user] Possible bug with accessing files in GridFTP

[Kevin Flasch]

On Mon, 3 Apr 2006, Mike Link wrote:

> Kevin,
> You're hitting a bug with the server where it doesn't
> initialze the authenticated user's secondary groups.  It is
> fixed in the upcoming 4.0.2 release, or you can install
> this updated package:
> http://www-unix.mcs.anl.gov/~mlink/globus_gridftp_server-2.2.tar.gz
>
> Just install it with the instructions given at
> http://www.globus.org/toolkit/advisories.html
>
> Let me know if that doesn't work out for you.

Thanks Mike,

I installed the update with no perceptible errors, but now I have a new error:

Verbose error follows:
an end-of-file was reached
globus_xio_system_select.c:globus_l_xio_system_try_read:1082:
An end of file occurred

I believe we've had this error before. When we upgraded the machine our
gridftp server is running to an Opteron running a 64-bit kernel, we had
problems running our gridftp client accessing other sites due to (I 
didn't investigate this myself, but was told) an end-of-file error. 
globus-url-copy seemed to access other sites' data fine.

Now however, where globus-url-copy accessed data fine through our server
on the 64-bit machine (minus the group membership bug), it does not anymore
and responds with the above error.

Note that all binaries are of the 32-bit flavors.

Do you know anything about this issue? I'm guessing I may have more luck if I
have 64-bit binaries of the globus tools, but haven't had the chance to test
this yet.

Cheers & Thanks,

Kevin

>
> Mike
>
> --- Kevin Flasch <kflasch at gravity.phys.uwm.edu> wrote:
>
>> Hello,
>>
>> I work with the LIGO project on LDR which utilizies
>> GridFTP. At my site, I'm
>> running version 2.1 of globus_gridftp_server in daemon
>> mode (running as root).
>> I have an issue where I cannot access data that I think I
>> should be able to.
>>
>> I have various users mapped in my gridmap file. These
>> users can access the
>> data with no problem locally (on the same machien the
>> server is running).
>> When I access the server with one of their certs, it
>> appear to correctly
>> map to the correct user (confirmed by watching who owns
>> the child processes
>> in top). However, it gives me the message "Permission
>> denied." This is via
>> globus-url-copy 3.6, by the way:
>>
>> Verbose error follows:
>>
> globus_ftp_client_state.c:globus_i_ftp_client_response_callback:2952:
>> the server responded with an error
>> 500 500-Command failed. : globus_l_gfs_file_open failed.
>> 500-globus_xio: Unable to open file
>>
> /data/gsiftp_root/cluster_storage/data/s280/S5/H1_RDS_C01_LX/H/820903000-820912999/H-H1_RDS_C01_LX-820907475-128.gwf
>> 500-globus_xio: System error in open: Permission denied
>> 500-globus_xio: A system call failed: Permission denied
>> 500 End.
>>
>> The data I am trying to access is not owned by the user,
>> but is owned by a group
>> that the user is a part of (which may be related to the
>> problem, if my curosy glance
>> at some of the previous bug reports proves correct -
>> though I did not find one
>> specific to this). When I map a cert to the user that
>> owns the data (the same
>> user that owns the globus_gridftp_server binary) I have
>> no problem.
>>
>> Has this problem cropped up before? Is there a solution?
>> If you want any more
>> information or testing, please let me know.
>>
>> Many thanks in advance!
>>
>> Cheers,
>>
>> Kevin Flasch
>>
>>
>