• I forgot my password. What do I do?
• Why can't I use ssh, kerberos FTP, X11, etc. on NCSA's machines?
• What does it mean when the command uberftp or mssftp fails with a Invalid CRL: The available CRL has expired error message?

I forgot my password. What do I do?

Send email to help@ncsa.uiuc.edu, asking that the password be reset to the default. If you no longer have the sheet with the default password, send email to allocations@ncsa.uiuc.edu and ask that the password be mailed or faxed to you. (We cannot send passwords via email due to security reasons.)

Why can't I use ssh, kerberos FTP, X11, etc. on NCSA's machines?

You may have a firewall installed at your home site. See the Firewalls web page for instructions on how to configure your firewall to allow ssh and kerberos to work properly.

What does it mean when the command uberftp or mssftp fails with a "Invalid CRL: The available CRL has expired" error message?

This error is usually caused by the presences of old(expired) *.r0 files(dot R zero) in "$HOME/.globus/certificates/" directory. The full error message would look something like...


   Failed to init security context
   GSS Major Status: Authentication Failed

   GSS Minor Status Error Chain:
   globus_gsi_gssapi: SSLv3 handshake problems
   globus_gsi_callback_module: Could not verify credential
   globus_gsi_callback_module: Could not verify credential
   globus_gsi_callback_module: Invalid CRL: The available CRL has expired


To fix the issue, move or delete your "certificates" directory in "$HOME/.globus/" and then try your mssftp or uberftp command again. If you are running these commands on NCSA production resources and if the error message remains after you have moved/deleted your "certificates" directory, please notify the Consulting Group.