biolocal:Certdeleg
From Wiki CEINGE
Revision as of 11:08, 6 August 2009 (edit) Mauro (Talk | contribs) (→Proxies and delegation) ← Previous diff |
Revision as of 17:01, 6 August 2009 (edit) (undo) Mauro (Talk | contribs) Next diff → |
||
Line 9: | Line 9: | ||
=== Create a long-term proxy === | === Create a long-term proxy === | ||
:If you want create, store and automatic renewing a long-term proxy, after the previous command, you must do: | :If you want create, store and automatic renewing a long-term proxy, after the previous command, you must do: | ||
- | <pre>myproxy-init -n -d -l | + | <pre>myproxy-init -n -d -l ''username'' [-t 168] [-c 12] </pre> |
- | where | + | where ''username'' is a username that specifies the MyProxy account under which the credential should be stored. It can be used for the following step of delegation. |
=== Delegation to WMProxy === | === Delegation to WMProxy === | ||
:Each job submitted to the gLite WMS must be associated to a proxy credential previously delegated by the owner of the job to the WMProxy server. This proxy is then used any time WMProxy needs to interact with other services for job related operations. If you want to delegate | :Each job submitted to the gLite WMS must be associated to a proxy credential previously delegated by the owner of the job to the WMProxy server. This proxy is then used any time WMProxy needs to interact with other services for job related operations. If you want to delegate | ||
- | your credentials to WMProxy, you have to | + | your credentials to WMProxy, you have to use the following command: |
+ | <pre>glite-wms-job-delegate-proxy -d delegID</pre> | ||
+ | where delegID is a string chosen by the user. Usually we use the same of string previously defined as ''username'' when launching myproxy-init. | ||
+ | |||
+ | === Submitting with delegation === | ||
+ | After the delegation step described above, in order to submit you have to use the following command: | ||
<pre>glite-wms-job-submit -d mauro test.jdl</pre> | <pre>glite-wms-job-submit -d mauro test.jdl</pre> | ||
Line 23: | Line 28: | ||
<pre>myproxy-info -d</pre> | <pre>myproxy-info -d</pre> | ||
- | + | === Important notes === | |
- | After max 24 hours (12 as default), your proxy on the UI expires, bu your long term proxy and delegation are still alive. You have only to launch again ''voms-proxy-init'' command, in order to access to VO unina.it. If you create a new long-term proxy by using ''myproxy-init'' with the same parameters as previously done, you will override the previous one and all running jobs will abort! | + | After max 24 hours (12 as default), your proxy on the UI expires, bu your long term proxy and delegation are still alive. You have only to launch again ''voms-proxy-init'' command, in order to access to VO unina.it and optionally also ''glite-wms-job-delegate-proxy''. If you create a new long-term proxy by using ''myproxy-init'' with the same parameters as previously done, you will override the previous one and all running jobs will abort! |
=== Documentation === | === Documentation === |
Revision as of 17:01, 6 August 2009
Contents |
Intro
This is a very quick guide about the procedure for the create, store and automatic renewing long-term proxy certificates (or simply a proxies).
Access to VO
- In order to access to VO unina.it, you must generate and sign a proxy, which is used for the actual authentication to Grid services and does not need a password. From the UI, launch the command:
voms-proxy-init --voms unina.it [-hours 12] [-valid 12:00]
Create a long-term proxy
- If you want create, store and automatic renewing a long-term proxy, after the previous command, you must do:
myproxy-init -n -d -l ''username'' [-t 168] [-c 12]
where username is a username that specifies the MyProxy account under which the credential should be stored. It can be used for the following step of delegation.
Delegation to WMProxy
- Each job submitted to the gLite WMS must be associated to a proxy credential previously delegated by the owner of the job to the WMProxy server. This proxy is then used any time WMProxy needs to interact with other services for job related operations. If you want to delegate
your credentials to WMProxy, you have to use the following command:
glite-wms-job-delegate-proxy -d delegID
where delegID is a string chosen by the user. Usually we use the same of string previously defined as username when launching myproxy-init.
Submitting with delegation
After the delegation step described above, in order to submit you have to use the following command:
glite-wms-job-submit -d mauro test.jdl
Check long-term proxy time-life
- In order to check your proxy time-life:
myproxy-info -d
Important notes
After max 24 hours (12 as default), your proxy on the UI expires, bu your long term proxy and delegation are still alive. You have only to launch again voms-proxy-init command, in order to access to VO unina.it and optionally also glite-wms-job-delegate-proxy. If you create a new long-term proxy by using myproxy-init with the same parameters as previously done, you will override the previous one and all running jobs will abort!
Documentation
For more details, visit