Authentication is Required

[Steve Wilson]

Hi,

I have a Globus v5.4 installation and some of our users are reporting an "Authentication is Required" notification when attempting to access a path on our endpoint.  The initial path and its directory contents are displayed but any attempt to navigate from there is met with this notification.  Our connector and permissions are POSIX and the path permissions are very simple:

• none: "/"
• read: {empty}
  
• read-write: "/net"
  

When "Show Details" is clicked on, the following is displayed:

=================================================================

Command Failed: Error (login)
Endpoint: Purdue Cryo-EM Gateway (d5fad4a7-cc93-48d5-bcee-ada8c64a5110)
Server: m-f6911d.eb967.bd7c.data.globus.org:443
Message: Login Failed
---
Details: 530-Login incorrect. : GlobusError: v=1 c=LOGIN_DENIED
530-GridFTP-Message: Attempt to create a resource that already exists.
530-GridFTP-JSON-Result: { "DATA_TYPE": "result#1.0.0", "code": "exists", "detail": "[]", "has_next_page": false, "http_response_code": 409, "message": "Attempt to create a resource that already exists." }
530 End.

========================================================================

Any ideas of what's going on and how to fix it?  Should the user delete their Consent for this Web App and start again?

Thanks!

Steve

[Steve Wilson]

Still struggling with this one...

I had the users delete/rescind their Consents and then go through the process to establish their Consents again.  But we still end up with the same errors.  As they attempt to access a path in File Manager, a message appears saying "Authentication Required" and "A credential is needed to access this collection."  The detail message states, "Attempt to create a resource that already exists."

When the user chooses the Continue option they are then shown a screen with Access Credentials: their local account (that has correct POSIX permissions for the given path), the Globus Identity, and an "active" status.  All of this looks as it should.

Any ideas???

Thanks,

Steve

[Steve Wilson]

And here are some relevant log entries in gcs.log:

2021-02-19T14:58:17-0500 login: <PosixCollection d5fad4a7-cc93-48d5-bcee-ada8c64a5110> identities: [UUID('553442fc-redacted')]
2021-02-19T14:58:17-0500 Creating new credential object from {'DATA_TYPE': 'user_credential#1.0.0', 'identity_id': '553442fc-redacted', 'username': 'REDACTED', 'storage_gateway_id': 'ec8ada2c-2bfd-4d4d-8559-4540e67bd7e7'}
2021-02-19T14:58:17-0500 Creating new credential object <PosixUserCredential 39a33050-redacted>
2021-02-19T14:58:17-0500 graphql_exception: gcs_request_id=g10LTF9EI graphql_request_id=854cd542-0890-444a-bf4e-175e115b8501 error=CONFLICT message="Object 39a33050-redacted already exists."
2021-02-19T14:58:17-0500 POST: 39a33050-redacted: Object 39a33050-redacted already exists.
2021-02-19T14:58:17-0500 request_id=g10LTF9EI method=POST path=/api/private/gridftp_login/d5fad4a7-cc93-48d5-bcee-ada8c64a5110 status_code=409 client_address=127.0.0.1 authorization=unauthenticated code=exists

Steve

[Michael Link]

Hi Steve,

That suggests something got out of sync in the local configuration.

I see you're a few versions behind, and there were some fixes in prior
updates that might address that. I suggest updating, and then if the
issue persists, open a ticket with us at sup...@globus.org.

https://docs.globus.org/globus-connect-server/v5.4/#upgrading_globus_connect_server

Mike

> * none: "/"
> * read: {empty}
> * read-write: "/net"

>
> When "Show Details" is clicked on, the following is displayed:
>
> =================================================================
> Command Failed: Error (login)
> Endpoint: Purdue Cryo-EM Gateway
> (d5fad4a7-cc93-48d5-bcee-ada8c64a5110)
> Server: m-f6911d.eb967.bd7c.data.globus.org:443

> <http://m-f6911d.eb967.bd7c.data.globus.org:443>

[Steve Wilson]

That was it!  The upgrade did the trick.

Thanks!

Steve