# PP to Jasmin: \[FAIL\] Bad optional configuration key(s): archer2

**URL:** <https://cms-helpdesk.ncas.ac.uk/t/pp-to-jasmin-fail-bad-optional-configuration-key-s-archer2/918>\
**Category:** Uncategorized\
**Tags:** ARCHER2\
**Created:** [17 February 2023 09:06 UTC](https://cms-helpdesk.ncas.ac.uk/t/pp-to-jasmin-fail-bad-optional-configuration-key-s-archer2/918 "2023-02-17T09:06:49Z")\
**Posts on this page:** 20\
**Page:** 3

<div class="post-metadata">

**Author:** ![grenville](https://dub1.discourse-cdn.com/flex013/user_avatar/cms-helpdesk.ncas.ac.uk/grenville/32/29_2.png) [@grenville](https://cms-helpdesk.ncas.ac.uk/u/grenville)\
**Post date:** [9 May 2023 15:41 UTC](https://cms-helpdesk.ncas.ac.uk/t/pp-to-jasmin-fail-bad-optional-configuration-key-s-archer2/918/42 "2023-05-09T15:41:30Z")

</div>

James

Did you not get the gridftp sorted out with JASMIN?

Grenville

---

<div class="post-metadata">

**Author:** ![James\_Weber](https://avatars.discourse-cdn.com/v4/letter/j/e495f1/32.png) [@James\_Weber](https://cms-helpdesk.ncas.ac.uk/u/James_Weber)\
**Post date:** [9 May 2023 15:58 UTC](https://cms-helpdesk.ncas.ac.uk/t/pp-to-jasmin-fail-bad-optional-configuration-key-s-archer2/918/43 "2023-05-09T15:58:07Z")

</div>

Hi Grenville,

I think Matt from Jasmin looked into it but wasn’t able to see anything wrong.

Best,

James

---

<div class="post-metadata">

**Author:** ![grenville](https://dub1.discourse-cdn.com/flex013/user_avatar/cms-helpdesk.ncas.ac.uk/grenville/32/29_2.png) [@grenville](https://cms-helpdesk.ncas.ac.uk/u/grenville)\
**Post date:** [9 May 2023 16:58 UTC](https://cms-helpdesk.ncas.ac.uk/t/pp-to-jasmin-fail-bad-optional-configuration-key-s-archer2/918/44 "2023-05-09T16:58:19Z")

</div>

Hi James

Please can you generate a new credential and try the command line tests that Ros showed earlier.

If the problem persists, let’s try creating a new ARCHER2 account & try again - that may eliminate ARCHER2 as a possible source.

Grenville

---

<div class="post-metadata">

**Author:** ![James\_Weber](https://avatars.discourse-cdn.com/v4/letter/j/e495f1/32.png) [@James\_Weber](https://cms-helpdesk.ncas.ac.uk/u/James_Weber)\
**Post date:** [10 May 2023 20:01 UTC](https://cms-helpdesk.ncas.ac.uk/t/pp-to-jasmin-fail-bad-optional-configuration-key-s-archer2/918/45 "2023-05-10T20:01:03Z")

</div>

Hi Grenville,

I generated a new credential and tried running a suite with pptransfer on but that task failed with the same error as I had had previously.

In terms of making a new Archer2 account, is it possible to hold onto my current one as well since that works well aside from the pptransfer issue?

Thanks,

James

---

<div class="post-metadata">

**Author:** ![grenville](https://dub1.discourse-cdn.com/flex013/user_avatar/cms-helpdesk.ncas.ac.uk/grenville/32/29_2.png) [@grenville](https://cms-helpdesk.ncas.ac.uk/u/grenville)\
**Post date:** [11 May 2023 07:12 UTC](https://cms-helpdesk.ncas.ac.uk/t/pp-to-jasmin-fail-bad-optional-configuration-key-s-archer2/918/46 "2023-05-11T07:12:07Z")

</div>

James

Yes that’s OK - create another one for testing through SAFE.

Grenville

---

<div class="post-metadata">

**Author:** ![James\_Weber](https://avatars.discourse-cdn.com/v4/letter/j/e495f1/32.png) [@James\_Weber](https://cms-helpdesk.ncas.ac.uk/u/James_Weber)\
**Post date:** [11 May 2023 14:49 UTC](https://cms-helpdesk.ncas.ac.uk/t/pp-to-jasmin-fail-bad-optional-configuration-key-s-archer2/918/47 "2023-05-11T14:49:21Z")

</div>

Thanks, Grenville. I’ve made another account using my personal email address rather than my Sheffield address, requested access to the n02 project and a username of jweber\_test.

I’ve got a screen saying:

"New Account requested

Your account [jweber\_test@archer2](https://safe.epcc.ed.ac.uk/TransitionServlet/User/119369) has been requested, the project’s principal investigator or a project manager will be informed of your request and you will be contacted once your machine account has been activated."

Is the correct approach?

Best,

James

---

<div class="post-metadata">

**Author:** ![James\_Weber](https://avatars.discourse-cdn.com/v4/letter/j/e495f1/32.png) [@James\_Weber](https://cms-helpdesk.ncas.ac.uk/u/James_Weber)\
**Post date:** [11 May 2023 14:53 UTC](https://cms-helpdesk.ncas.ac.uk/t/pp-to-jasmin-fail-bad-optional-configuration-key-s-archer2/918/48 "2023-05-11T14:53:30Z")

</div>

Just had an email confirming approval thank. When I try to ssh into Archer2 using my new test account my ssh passphrase is fine but I’m not sure which password it is asking for. Is it the password of my new Archer2 account (i.e that registered my personal email)?

Thanks,

James

---

<div class="post-metadata">

**Author:** ![James\_Weber](https://avatars.discourse-cdn.com/v4/letter/j/e495f1/32.png) [@James\_Weber](https://cms-helpdesk.ncas.ac.uk/u/James_Weber)\
**Post date:** [11 May 2023 14:59 UTC](https://cms-helpdesk.ncas.ac.uk/t/pp-to-jasmin-fail-bad-optional-configuration-key-s-archer2/918/49 "2023-05-11T14:59:40Z")

</div>

Sorry, just seen the extra guidance re default password. I have used that and switched it to a new one and can now login in to Archer2.

James

---

<div class="post-metadata">

**Author:** ![grenville](https://dub1.discourse-cdn.com/flex013/user_avatar/cms-helpdesk.ncas.ac.uk/grenville/32/29_2.png) [@grenville](https://cms-helpdesk.ncas.ac.uk/u/grenville)\
**Post date:** [12 May 2023 11:33 UTC](https://cms-helpdesk.ncas.ac.uk/t/pp-to-jasmin-fail-bad-optional-configuration-key-s-archer2/918/50 "2023-05-12T11:33:32Z")

</div>

Any luck with gridftp?

---

<div class="post-metadata">

**Author:** ![James\_Weber](https://avatars.discourse-cdn.com/v4/letter/j/e495f1/32.png) [@James\_Weber](https://cms-helpdesk.ncas.ac.uk/u/James_Weber)\
**Post date:** [12 May 2023 11:57 UTC](https://cms-helpdesk.ncas.ac.uk/t/pp-to-jasmin-fail-bad-optional-configuration-key-s-archer2/918/51 "2023-05-12T11:57:15Z")

</div>

Hi Grenville,

I made a new suite, u-cw947 (copy of u-cu408 which runs) and changed the username to jweber\_test and archer archive location to /work/n02/n02/jweber\_test/archive but I’m getting the below error message when trying to run it.

**[FAIL]** ssh -oBatchMode=yes -n [jweber\_test@login.archer2.ac.uk](mailto:jweber_test@login.archer2.ac.uk) env\ ROSE\_VERSION=2019.01.3\ CYLC\_VERSION=7.8.12\ bash\ -l\ -c\ '"$0"\ "$@"'\ rose\ suite-run\ -vv\ -n\ u-cw947\ –run=run\ –remote=uuid=cb88332f-6519-4ce3-a2b1-dd0df24094e2,now-str=20230512T115336Z,root-dir='$DATADIR' # return-code=255, stderr=

**[FAIL]** Permission denied (publickey).

I haven’t done anything with my archerum key. Should I have made changes there?

Thanks,

James

---

<div class="post-metadata">

**Author:** ![grenville](https://dub1.discourse-cdn.com/flex013/user_avatar/cms-helpdesk.ncas.ac.uk/grenville/32/29_2.png) [@grenville](https://cms-helpdesk.ncas.ac.uk/u/grenville)\
**Post date:** [12 May 2023 12:33 UTC](https://cms-helpdesk.ncas.ac.uk/t/pp-to-jasmin-fail-bad-optional-configuration-key-s-archer2/918/52 "2023-05-12T12:33:36Z")

</div>

James

The plan was just to see if you could get gridftp to work - I thought you would create a credential and try the commands that you you ran on your old account. It’s not possible to submit jobs to the new ARCHER account since there is no archerum key.

Grenville

---

<div class="post-metadata">

**Author:** ![James\_Weber](https://avatars.discourse-cdn.com/v4/letter/j/e495f1/32.png) [@James\_Weber](https://cms-helpdesk.ncas.ac.uk/u/James_Weber)\
**Post date:** [12 May 2023 12:54 UTC](https://cms-helpdesk.ncas.ac.uk/t/pp-to-jasmin-fail-bad-optional-configuration-key-s-archer2/918/53 "2023-05-12T12:54:08Z")

</div>

Hi Grenville,

Sorry, my mistake I had misunderstood. I have since logged on to archer2 with my new account, navigated to /work/n02/n02/jweber\_test, and attempted the first command in [Configuring PPTransfer](https://cms.ncas.ac.uk/unified-model/pptransfer/).

However, when I ran: $UMDIR/bin/onlineca-get-trustroots-wget.sh -U [https://slcs.jasmin.ac.uk/trustroots/](https://slcs.jasmin.ac.uk/trustroots/) -b  
The result was: -bash: /bin/onlineca-get-trustroots-wget.sh: No such file or directory

Thanks,

James

---

<div class="post-metadata">

**Author:** ![grenville](https://dub1.discourse-cdn.com/flex013/user_avatar/cms-helpdesk.ncas.ac.uk/grenville/32/29_2.png) [@grenville](https://cms-helpdesk.ncas.ac.uk/u/grenville)\
**Post date:** [12 May 2023 14:14 UTC](https://cms-helpdesk.ncas.ac.uk/t/pp-to-jasmin-fail-bad-optional-configuration-key-s-archer2/918/54 "2023-05-12T14:14:55Z")

</div>

James

the new account doesn’t have the environment set, type

`/work/y07/shared/umshared/bin/on...` instead of ` $UMDIR/bin/on...`

you will also need to

`module load gct`

before trying the gridftp commands

Grenville

---

<div class="post-metadata">

**Author:** ![James\_Weber](https://avatars.discourse-cdn.com/v4/letter/j/e495f1/32.png) [@James\_Weber](https://cms-helpdesk.ncas.ac.uk/u/James_Weber)\
**Post date:** [12 May 2023 14:44 UTC](https://cms-helpdesk.ncas.ac.uk/t/pp-to-jasmin-fail-bad-optional-configuration-key-s-archer2/918/55 "2023-05-12T14:44:35Z")

</div>

Thanks, Grenville. It looks like the same issue as before is occurring. For example, when I run:

globus-url-copy -cred /work/n02/n02/jweber\_test/cred.jasmin -vb -list gsiftp://gridftp1.jasmin.ac.uk/home/users/jmw240/mass\_extracts

The correct output of “mass\_extracts” is returned.

However, when I run

globus-url-copy -cred /work/n02/n02/jweber\_test/cred.jasmin -vb -list gsiftp://gridftp1.jasmin.ac.uk/home/users/jmw240/mass\_extracts/

I get the same failure message as I did with my standard Archer2 account.

error: globus\_ftp\_client: the server responded with an error  
550 550-GlobusError: v=1 c=PATH\_NOT\_FOUND  
550-GridFTP-Errno: 2  
550-GridFTP-Reason: System error in stat  
550-GridFTP-Error-String: No such file or directory  
550 End.

Ros said both commands worked for her so it looks like the problem is on the Jasmin end.

James

---

<div class="post-metadata">

**Author:** ![grenville](https://dub1.discourse-cdn.com/flex013/user_avatar/cms-helpdesk.ncas.ac.uk/grenville/32/29_2.png) [@grenville](https://cms-helpdesk.ncas.ac.uk/u/grenville)\
**Post date:** [12 May 2023 16:22 UTC](https://cms-helpdesk.ncas.ac.uk/t/pp-to-jasmin-fail-bad-optional-configuration-key-s-archer2/918/56 "2023-05-12T16:22:30Z")

</div>

Please can you allow me read permission on your home directory

`chmod -R g+rX /home/users/jmw240`

Grenville

---

<div class="post-metadata">

**Author:** ![James\_Weber](https://avatars.discourse-cdn.com/v4/letter/j/e495f1/32.png) [@James\_Weber](https://cms-helpdesk.ncas.ac.uk/u/James_Weber)\
**Post date:** [15 May 2023 08:08 UTC](https://cms-helpdesk.ncas.ac.uk/t/pp-to-jasmin-fail-bad-optional-configuration-key-s-archer2/918/57 "2023-05-15T08:08:48Z")

</div>

Hi Grenville,

I’ve done that thanks. I’ve just started to get failures when I try to extracts from the Met Office’s MASS system onto Jasmin with the following error:

“Unable to load Moose credentials. Please check credential file permissions. Only file owner should have read and write access”

Could the permission change command have caused this?

Thanks,

James

---

<div class="post-metadata">

**Author:** ![grenville](https://dub1.discourse-cdn.com/flex013/user_avatar/cms-helpdesk.ncas.ac.uk/grenville/32/29_2.png) [@grenville](https://cms-helpdesk.ncas.ac.uk/u/grenville)\
**Post date:** [15 May 2023 08:25 UTC](https://cms-helpdesk.ncas.ac.uk/t/pp-to-jasmin-fail-bad-optional-configuration-key-s-archer2/918/58 "2023-05-15T08:25:49Z")

</div>

Hi James

Sounds likely, try changing permissions on the moose credential file.

Please retry the globus command, but on a directory that exists in your home space  
`globus-url-copy -cred /work/n02/n02/jweber_test/cred.jasmin -vb -list gsiftp://gridftp1.jasmin.ac.uk/home/users/jmw240/ **mass_extracts** /`

```auto
glister@sci2$ ls /home/users/jmw240/mass_extracts/
ls: cannot access /home/users/jmw240/mass_extracts/: No such file or directory

```

Grenville

---

<div class="post-metadata">

**Author:** ![James\_Weber](https://avatars.discourse-cdn.com/v4/letter/j/e495f1/32.png) [@James\_Weber](https://cms-helpdesk.ncas.ac.uk/u/James_Weber)\
**Post date:** [15 May 2023 09:31 UTC](https://cms-helpdesk.ncas.ac.uk/t/pp-to-jasmin-fail-bad-optional-configuration-key-s-archer2/918/59 "2023-05-15T09:31:29Z")

</div>

Hi Grenville,

Thanks, I ran “chmod 700” on my mass\_extracts file (which is my group workspace not my home) and contents. The permissions are listed as drwx–S— and -rwx------ for subdirectories and files respectively but the extract problems persists.

Am I right in saying the “chmod -R g+rX /home/users/jmw240” only targets files in my home, not my gws?

In terms of gridftp, sorry I realise I was looking at a non-existent file in my home directory last time. I used /home/users/jmw240/emissions this time which does exist and has permissions drwxr-xr-x.

When I ran:  
globus-url-copy -cred /work/n02/n02/jweber\_test/cred.jasmin -vb -list gsiftp://gridftp1.jasmin.ac.uk/home/users/jmw240/emissions

The output was:  
gsiftp://gridftp1.jasmin.ac.uk/home/users/jmw240/emissions  
emissions

But when I run

globus-url-copy -cred /work/n02/n02/jweber\_test/cred.jasmin -vb -list gsiftp://gridftp1.jasmin.ac.uk/home/users/jmw240/emissions/

The result was

gsiftp://gridftp1.jasmin.ac.uk/home/users/jmw240/emissions/

error: globus\_ftp\_client: the server responded with an error  
500 500-Command failed. : an authentication operation failed  
500-globus\_gsi\_callback\_module: Could not verify credential  
500-globus\_gsi\_callback\_module: Error with signing policy  
500-globus\_gsi\_callback\_module: Error in OLD GAA code: The subject of the certificate “/DC=uk/DC=ac/DC=jasmin/O=STFC RAL/CN=JASMIN” does not match the signing policies defined in /home/users/jmw240/.globus/certificates/7ed47087.signing\_policy  
500 End.

Not being able to do the pp transfer isn’t the end of the world as I can do a reasonably rapid scp over.

James

---

<div class="post-metadata">

**Author:** ![grenville](https://dub1.discourse-cdn.com/flex013/user_avatar/cms-helpdesk.ncas.ac.uk/grenville/32/29_2.png) [@grenville](https://cms-helpdesk.ncas.ac.uk/u/grenville)\
**Post date:** [15 May 2023 09:50 UTC](https://cms-helpdesk.ncas.ac.uk/t/pp-to-jasmin-fail-bad-optional-configuration-key-s-archer2/918/60 "2023-05-15T09:50:43Z")

</div>

Hi James

I don’t have a .globus directory on JASMIN, nor does Ros - please “mv” your .globus directory to something else & try one more time.

Grenville

---

<div class="post-metadata">

**Author:** ![James\_Weber](https://avatars.discourse-cdn.com/v4/letter/j/e495f1/32.png) [@James\_Weber](https://cms-helpdesk.ncas.ac.uk/u/James_Weber)\
**Post date:** [15 May 2023 11:01 UTC](https://cms-helpdesk.ncas.ac.uk/t/pp-to-jasmin-fail-bad-optional-configuration-key-s-archer2/918/61 "2023-05-15T11:01:59Z")

</div>

Hi Grenville,

Sorry, I think I put the .globus file there as a test a couple of months ago. I have now moved it.

Running:  
globus-url-copy -cred /work/n02/n02/jweber\_test/cred.jasmin -vb -list gsiftp://gridftp1.jasmin.ac.uk/home/users/jmw240/emissions/

returns:  
gsiftp://gridftp1.jasmin.ac.uk/home/users/jmw240/emissions/  
.ipynb\_checkpoints/  
CO\_anthropogenic\_1849\_2015\_time\_series.nc  
CO\_combined\_anthropogenic\_1985\_2015\_time\_series.nc  
Emiss\_analysis.ipynb

I think this what I should get as it matches Ros’ results. I will try to do a full pptransfer from Archer2.

Alan from Jasmin has helpfully reset the permissions on on the moose credentials.

Thank you for your help. I will let you know how the pptransfer goes.

James

[Previous page](https://cms-helpdesk.ncas.ac.uk/t/pp-to-jasmin-fail-bad-optional-configuration-key-s-archer2/918.md?page=2)

[Next page](https://cms-helpdesk.ncas.ac.uk/t/pp-to-jasmin-fail-bad-optional-configuration-key-s-archer2/918.md?page=4)
