Identity set does not map to a vaild username

[Rob Dunne]

Hi All,
I want to download some data from a link in a github page 
https://github.com/ramanathanlab/genslm

the link is
https://app.globus.org/file-manager?origin_id=25918ad0-2a4e-4f37-bcfc-8183b19c3150&origin_path=%2F

I have an institutional account with globus and can log in. I can go to the collection "genslm-data" but then I get a message

"Identity set contains an identity from an allowed domain, but it does not map to a valid username for this connector"

I was able to download data from this collection before, without any problems. So it was working

I can get a more detailed error message

{ "code": "ExternalError.DirListingFailed.LoginFailed", "message": "Command Failed: Error (login)\nEndpoint: genslm-data (25918ad0-2a4e-4f37-bcfc-8183b19c3150)\nServer: 140.221.68.244:443\nMessage: Login Failed\n---\nDetails: 530-Login incorrect. : Mapping collection to specified ID failed.\\r\\n530-GlobusError: v=1 c=LOGIN_DENIED\\r\\n530-GridFTP-Message: Identity set contains an identity from an allowed domain, but it does not map to a valid username for this connector\\r\\n530-GridFTP-JSON-Result: {\"DATA_TYPE\": \"result#1.1.0\", \"code\": \"permission_denied\", \"detail\": {\"DATA_TYPE\": \"invalid_user#1.0.0\", \"usernames\": [\"arvind\"]}, \"has_next_page\": false, \"http_response_code\": 403, \"message\": \"Identity set contains an identity from an allowed domain, but it does not map to a valid username for this connector\"}\\r\\n530 End.\\r\\n\n", "request_id": "sBwxHN0S8", "resource": "/operation/endpoint/25918ad0-2a4e-4f37-bcfc-8183b19c3150/ls" }

any advice gratefully received 

Bye

R

[Karl Kornel]

Hi Rob,

Thanks for posting the link directly!  By going to the Collections tab on the Globus web site, entering the UUID (25918ad0-2a4e-4f37-bcfc-8183b19c3150) returns one result, the "genslm-data" Guest Collection (https://app.globus.org/file-manager/collections/25918ad0-2a4e-4f37-bcfc-8183b19c3150/overview), hosted on ALCF Eagle.

The error message is one I’ve seen before.  The error occurs when someone tries to access a Collection with a Globus Identity whose domain is accepted by the Collection, but the Collection is unable to translate the person’s Globus Identity into a local username.  This often happens when the person is from the correct institution, but the person does not have an account on the local compute/storage/HPC environment.

Since this is a Guest Collection, you are not authenticating to ALCF Eagle as yourself, you are acting as a guest of the Guest Collection’s owner.  This means that the Guest Collection’s owner used to have an account on ALCF Eagle, but their account no longer exists (or has been disabled).

So, what to do?  Well, the first thing I’d do is create a GitHub issue on their repo.  And I see you’ve already done that!

The next thing you could do is reach out to the contact email address on the Guest Collection listing, raman...@anl.gov.

Making your post here is also good.  Maybe some Argonne-related folks watch this list and could pass the word on to other Argonne-related folks, who could help figure this out.  You never know, though… :)

 

~ Karl

To unsubscribe from this group and stop receiving emails from it, send an email to discuss+u...@globus.org.

[Rob Dunne]

Hi Karl,
that is indeed what the problem was. I emailed the contact for the collection and they are in the process of archiving the project. It should be back on a globus endpoint in a week. 
Thanks for explaining where the problem lay

Bye
R