\nOK, authentication guru Jim Basney explained it to me and I have
\nsolved the issue.<\/p>\n
\nThe reason control channel authentication was succeeding and data
\nchannel authentication was failing was because of where Globus looks
\nfor trusted certificates for users.<\/p>\n
\nthe client is running in OGSA, so trusted certs are determined in
\ncog.properties.<\/p>\n
\nin.ftpd runs as root, and it finds trusted certificates in
\n\/etc\/grid-security\/certificates. (if I had had a
\n\/root\/.globus\/certificates directory, it would have used that).<\/p>\n
\nthen for the data channel in.ftpd does a setuid to futrelle (who I
\nmap to in the gridmap file). in that case, it found a
\n~futrelle\/.globus\/certificates directory, which I thought wouldn’t
\nmatter but it did, and I didn’t happen to have the alliance CA cert
\nin that directory. so data channel authentication failed.<\/p>\n
\n","protected":false},"excerpt":{"rendered":"
OK, authentication guru Jim Basney explained it to me and I have solved the issue. The reason control channel authentication was succeeding and data channel authentication was failing was because of where Globus looks for trusted certificates for users. the client is running in OGSA, so trusted certs are determined in cog.properties. in.ftpd runs as […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-71","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/www.dr-chuck.com\/csev-blog\/wp-json\/wp\/v2\/posts\/71","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dr-chuck.com\/csev-blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dr-chuck.com\/csev-blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dr-chuck.com\/csev-blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dr-chuck.com\/csev-blog\/wp-json\/wp\/v2\/comments?post=71"}],"version-history":[{"count":2,"href":"https:\/\/www.dr-chuck.com\/csev-blog\/wp-json\/wp\/v2\/posts\/71\/revisions"}],"predecessor-version":[{"id":2890,"href":"https:\/\/www.dr-chuck.com\/csev-blog\/wp-json\/wp\/v2\/posts\/71\/revisions\/2890"}],"wp:attachment":[{"href":"https:\/\/www.dr-chuck.com\/csev-blog\/wp-json\/wp\/v2\/media?parent=71"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dr-chuck.com\/csev-blog\/wp-json\/wp\/v2\/categories?post=71"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dr-chuck.com\/csev-blog\/wp-json\/wp\/v2\/tags?post=71"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}