I've installed Globus Toolkit 4 in the step:
2.3. Setting up security on your first machine
in QuickStart Documentation
and have the following error:

Help me, please!
Thank you!

[root@dhcppc0 gt4.0.5-x86_rhas_4-installer]# export GLOBUS_LOCATION=/usr/local/globus-4.0.5
[root@dhcppc0 gt4.0.5-x86_rhas_4-installer]# source $GLOBUS_LOCATION/etc/globus-user-env.sh
[root@dhcppc0 gt4.0.5-x86_rhas_4-installer]# $GLOBUS_LOCATION/setup/globus/setup-simple-ca

WARNING: GPT_LOCATION not set, assuming:
GPT_LOCATION=/usr/local/globus-4.0.5



C e r t i f i c a t e A u t h o r i t y S e t u p

This script will setup a Certificate Authority for signing Globus
users certificates. It will also generate a simple CA package
that can be distributed to the users of the CA.

The CA information about the certificates it distributes will
be kept in:

/root/.globus/simpleCA/

The unique subject name for this CA is:

cn=Globus Simple CA, ou=simpleCA-dhcppc0, ou=GlobusTest, o=Grid

Do you want to keep this as the CA subject (y/n) [y]:y

Enter the email of the CA (this is the email where certificate
requests will be sent to be signed by the CA):root@dhcppc0

The CA certificate has an expiration date. Keep in mind that
once the CA certificate has expired, all the certificates
signed by that CA become invalid. A CA should regenerate
the CA certificate and start re-issuing ca-setup packages
before the actual CA certificate expires. This can be done
by re-running this setup script. Enter the number of DAYS
the CA certificate should last before it expires.
[default: 5 years (1825 days)]:RETURN

Error number 127 was returned by
/usr/local/globus-4.0.5/bin/openssl

Two ways I think:
- Check if you already have OpenSSL installed. Generate certificate manually using the script provided (somewhere in /usr/share/openssl*) and move to where the application expects it.
- If you have OpenSSL installed locally, what happens if you edit the script and change "/usr/local/globus-4.0.5/bin/openssl" for the binary (with path prefixed) of your locally installed version of OpenSSL?

If that doesn't work you could get more details by running 'setup-simple-ca' as 'sh -x setup-simple-ca', save exact errors to a file and post it to their mailing list.

I checked OpenSSL and I've passed setup-simple-ca. Thank unSpawn!
I went to the step:
2.6. Configuring RFT

root@choate:~# vim /var/lib/postgres/postmaster.conf
root@choate:~# grep POSTMASTER /var/lib/postgres/postmaster.conf
POSTMASTER_OPTIONS="-i"
root@choate:~# vim /var/lib/postgres/data/pg_hba.conf
root@choate:~# grep rftDatabase /etc/postgresql/pg_hba.conf
host rftDatabase "globus" "192.168.1.37" 255.255.255.255 md5
root@choate:~# /etc/init.d/postgresql restart
Stopping PostgreSQL database server: [FAIL]
Initializing PostgreSQL database server: [FAIL}
Starting PostgreSQL database server: [FAIL]
root@choate:~# su postgres -c "createuser -P globus"
Enter password for new user: *****
Enter it again: *****
Shall the new role be allowed to create databases? (y/n) y
Shall the new role be allowed to create more new users? (y/n) n
Cannot create new role.

*Note: RedHat Enterprise Linux 5.
Please help me!

Have problem:

running /usr/local/globus-4.0.5//setup/globus/setup-globus-rls-server..[ Changing to /usr/local/globus-4.0.5/setup/globus ]
WARNING: More than one globus_database_sqliteodbc package found. You may need to adjust the driver settings in /usr/local/globus-4.0.5//var/odbc.ini
.creating SXXrls
creating globus-rls-server.conf
creating rls-ldif.conf
creating odbc.ini
/usr/local/globus-4.0.5//bin/sqlite3: error while loading shared libraries: libsqlite3_gcc32pthr.so.0: cannot open shared object file: No such file or directory
/usr/local/globus-4.0.5//bin/sqlite3: error while loading shared libraries: libsqlite3_gcc32pthr.so.0: cannot open shared object file: No such file or directoryDone
..Done
running /usr/local/globus-4.0.5//setup/globus/setup-globus-scheduler-provider-fork..[ Changing to /usr/local/globus-4.0.5/setup/globus ]

Please help me!

hi

i am using fedora 5 and installing globus 4.0.5
i am getting the same error which u got

C e r t i f i c a t e A u t h o r i t y S e t u p
This script will setup a Certificate Authority for signing Globus
users certificates. It will also generate a simple CA package
that can be distributed to the users of the CA.
The CA information about the certificates it distributes will
be kept in:

/root/.globus/simpleCA/

The unique subject name for this CA is:

cn=Globus Simple CA, ou=simpleCA-dhcppc0, ou=GlobusTest, o=Grid

Do you want to keep this as the CA subject (y/n) [y]:y

Enter the email of the CA (this is the email where certificate
requests will be sent to be signed by the CA):root@dhcppc0

The CA certificate has an expiration date. Keep in mind that
once the CA certificate has expired, all the certificates
signed by that CA become invalid. A CA should regenerate
the CA certificate and start re-issuing ca-setup packages
before the actual CA certificate expires. This can be done
by re-running this setup script. Enter the number of DAYS
the CA certificate should last before it expires.
[default: 5 years (1825 days)]:RETURN

Error number 127 was returned by
/usr/local/globus-4.0.5/bin/openssl

how did u overcome this error ?? plz help me

I think the problem is with openssl installed by globus. try cpoying the default openssl installed by linux distribution into $GLOBUS_LOCATION/bin & run the CA setup again....let me this works or not.

hi syberguyy

i copied openssl from /usr/bin and placed in GLOBUS_LOCATION/bin
and it worked ..

i have one more doubt
from root can v run the command $GLOBUS_LOCATION/setup/globus/setup-simple-ca
or only from globus should v do it ??

fine....

Both are possible....

If you want to generate & issue certificates as 'root' user, then you can go ahead & run the setup-ca as root user....or If you think you need seperate login for CA, then better you run the command as 'globus' user...

Which ever user you may choose, after running setup-ca ..followed by post-install, check for .globus folder in that user's home directory.....

e.g /home/globus/.globus/simpleCA