biolocal:Certdeleg
From Wiki CEINGE
(Difference between revisions)
| Revision as of 10:58, 6 August 2009 (edit) Mauro (Talk | contribs) ← Previous diff |
Revision as of 11:06, 6 August 2009 (edit) (undo) Mauro (Talk | contribs) Next diff → |
||
| Line 1: | Line 1: | ||
| This is the procedure for the create, store and automatic renewing long-term proxy certificates (or simply a proxies): | This is the procedure for the create, store and automatic renewing long-term proxy certificates (or simply a proxies): | ||
| - | + | === Access to VO=== | |
| - | + | :In order to access to VO unina.it, you must generate and sign a proxy, which is used for the actual authentication to Grid services and does not need a password. From the UI, launch the command: | |
| <pre>voms-proxy-init --voms unina.it [-hours 12] [-valid 12:00] </pre> | <pre>voms-proxy-init --voms unina.it [-hours 12] [-valid 12:00] </pre> | ||
| - | + | === Create a long-term proxy === | |
| + | :If you want create, store and automatic renewing a long-term proxy, after the previous command, you must do: | ||
| <pre>myproxy-init -n -d -l mauro [-t 168] [-c 12] </pre> | <pre>myproxy-init -n -d -l mauro [-t 168] [-c 12] </pre> | ||
| where -l is a username that specifies the MyProxy account under which the credential should be stored. It can be used for the following step of delegation. | where -l is a username that specifies the MyProxy account under which the credential should be stored. It can be used for the following step of delegation. | ||
| - | + | === Delegation to WMProxy === | |
| - | + | :Each job submitted to the gLite WMS must be associated to a proxy credential previously delegated by the owner of the job to the WMProxy server. This proxy is then used any time WMProxy needs to interact with other services for job related operations. If you want to delegate | |
| your credentials to WMProxy, you have to submit the job with the following command: | your credentials to WMProxy, you have to submit the job with the following command: | ||
| <pre>glite-wms-job-submit -d mauro test.jdl</pre> | <pre>glite-wms-job-submit -d mauro test.jdl</pre> | ||
| - | + | === Check long-term proxy time-life === | |
| + | :In order to check your proxy time-life: | ||
| <pre>myproxy-info -d</pre> | <pre>myproxy-info -d</pre> | ||
Revision as of 11:06, 6 August 2009
This is the procedure for the create, store and automatic renewing long-term proxy certificates (or simply a proxies):
Contents |
Access to VO
- In order to access to VO unina.it, you must generate and sign a proxy, which is used for the actual authentication to Grid services and does not need a password. From the UI, launch the command:
voms-proxy-init --voms unina.it [-hours 12] [-valid 12:00]
Create a long-term proxy
- If you want create, store and automatic renewing a long-term proxy, after the previous command, you must do:
myproxy-init -n -d -l mauro [-t 168] [-c 12]
where -l is a username that specifies the MyProxy account under which the credential should be stored. It can be used for the following step of delegation.
Delegation to WMProxy
- Each job submitted to the gLite WMS must be associated to a proxy credential previously delegated by the owner of the job to the WMProxy server. This proxy is then used any time WMProxy needs to interact with other services for job related operations. If you want to delegate
your credentials to WMProxy, you have to submit the job with the following command:
glite-wms-job-submit -d mauro test.jdl
Check long-term proxy time-life
- In order to check your proxy time-life:
myproxy-info -d
- IMPORTANT
After max 24 hours (12 as default), your proxy on the UI expires, bu your long term proxy and delegation are still alive. You have only to launch again voms-proxy-init command, in order to access to VO unina.it. If you create a new long-term proxy by using myproxy-init with the same parameters as previously done, you will override the previous one and all running jobs will abort!
Documentation
For more details, visit
