globus-url-copy出错时的常见问题

1.
zhong@node1:/home/globus> globus-url-copy gsiftp://node1.xxx.edu/tmp/from-node2 gsiftp://node2.xxx.edu/tmp/reply-from-node2

error: globus_ftp_control: gss_init_sec_context failed
globus_gsi_gssapi: Error with GSI credential
globus_gsi_gssapi: Error with gss credential handle
globus_credential: Error with credential: The proxy credential: /tmp/x509up_u1001
with subject: /O=Grid/OU=GlobusTest/OU=simpleCA-node1.xxx.edu/OU=xxx.edu/CN=Jason Zhong/CN=1755581723
expired 12022 minutes ago.

这是由于还没有对用户进行验证，使用如下命令（默认的话，24小时后过期）
zhong@node1:/home/globus> grid-proxy-init -debug -verify

User Cert File: /home/zhong/.globus/usercert.pem
User Key File: /home/zhong/.globus/userkey.pem

Trusted CA Cert Dir: /etc/grid-security/certificates

Output File: /tmp/x509up_u1001
Your identity: /O=Grid/OU=GlobusTest/OU=simpleCA-node1.xxx.edu/OU=xxx.edu/CN=Jason Zhong
Enter GRID pass phrase for this identity:
Creating proxy .............................++++++++++++
.............++++++++++++
Done
Proxy Verify OK
Your proxy is valid until: Fri Jun 13 05:30:09 2008

2.
zhong@node1:/home/globus> globus-url-copy gsiftp://node1.xxx.edu/tmp/from-node2 gsiftp://node2.xxx.edu/tmp/reply-from-node2

error: globus_ftp_control: gss_init_sec_context failed
GSS Major Status: Unexpected Gatekeeper or Service Name
globus_gsi_gssapi: Authorization denied: The name of the remote host (node2.xxx.edu), and the expected name for the remote host (node2.xxx.edu) do not match. This happens when the name in the host certificate does not match the information obtained from DNS and is often a DNS configuration problem.

这是由于DNS解析机器名时出现了问题，可以自己编辑/etc/hosts文件，直接指定好IP和对应的机器名即可。