containercert’s owner settings
Teldemokles says: “If you always check the containercert’s files’ owner and permissions, then you can start the globus’ container!”.
Permissions for containercert (644) and containerkey (600) files in /etc/grid-security must be set to globus:globus, respectively to your globus admin user! Else you get the following error:
Failed to start container: Failed to initialize 'ReliableFileTransferFactoryService' service [Caused by: [SEC] Service credentials not configured and was not able to obtain container credentials.; nested exception is: org.globus.wsrf.security.SecurityException: [SEC] Error obtaining container credentials; nested exception is: org.globus.wsrf.config.ConfigException: Failed to initialize container security config [Caused by: [Caused by: Failed to load credentials. [Caused by: /etc/grid-security/containerkey.pem (Permission denied)]]]]
Huh!