Difference: FkwCCRC08GlideinWMS (15 vs. 16)

Revision 162008/06/03 - Main.FkW

Line: 1 to 1
 

This page describes the glideinWMS system as deployed for CCRC08.

Line: 154 to 154
 ./start_factory.sh
Added:
>
>

Location of the script that is run by glidein on worker nodes

[1012] gfactory@glidein-1 ~/glideinsubmit/glidein_CCRC08_2$ pwd
/home/gfactory/glideinsubmit/glidein_CCRC08_2
[1016] gfactory@glidein-1 ~/glideinsubmit/glidein_CCRC08_2$ less glidein_startup.sh 
 

Useful commands on glidein-1

condor_status -any -constraint 'GlideinMyType =?= "glidefactory"' -format 'Entry: %s ' EntryName -format "Site: %s " GLIDEIN_Site -format "Gatekeeper: %s\n" GLIDEIN_Gatekeeper

Line: 303 to 310
 The setprio command basically resets your effective priority to 0.5, i.e you start over near zero, as if you hadn't run here in ages. The setfactor command sets the mu;tiplier for your wallclock time to get the effective priority. This is an integer. Setting it to 1 is thus the best you can do.
Added:
>
>

Managing the certificate

To manage a long lived certificate from a crontab without breaking out a sweat, the following is useful:

  • First created a very long lived proxy:
[1600] fkw@uaf-1 ~/CMS/condor$  voms-proxy-init -hours 9876543:0 -out=/tmp/testForDave.file
Cannot find file or dir: /home/condor/execute/dir_11128/userdir/glite/etc/vomses
Enter GRID pass phrase:
Your identity: /DC=org/DC=doegrids/OU=People/CN=Frank Wuerthwein 699373
Cannot find file or dir: /home/condor/execute/dir_11128/userdir/glite/etc/vomses
Creating proxy ............................................... Done

Warning: your certificate and proxy will expire Sat Feb  7 19:51:06 2009
which is within the requested lifetime of the proxy

  • Then use that very long lived proxy to et a short lived proxy with a CMS attribute attached to it:
[1602] fkw@uaf-1 ~/CMS/condor$  voms-proxy-init -voms cms -hours 120 -valid=96:0 -cert=/tmp/testForDave.file 
Cannot find file or dir: /home/condor/execute/dir_11128/userdir/glite/etc/vomses
Your identity: /DC=org/DC=doegrids/OU=People/CN=Frank Wuerthwein 699373/CN=proxy
Cannot find file or dir: /home/condor/execute/dir_11128/userdir/glite/etc/vomses
Creating temporary proxy .................................................... Done
Contacting  voms.cern.ch:15002 [/DC=ch/DC=cern/OU=computers/CN=voms.cern.ch] "cms" Done
Creating proxy ........................................ Done
Your proxy is valid until Sat Jun  7 16:02:59 2008

  • Finally, verify that this got me a proxy with attribute that is short lived, and by default in the right place:
[1603] fkw@uaf-1 ~/CMS/condor$ voms-proxy-info -all
WARNING: Unable to verify signature! Server certificate possibly not installed.
Error: Cannot find certificate of AC issuer for vo cms
subject   : /DC=org/DC=doegrids/OU=People/CN=Frank Wuerthwein 699373/CN=proxy/CN=proxy
issuer    : /DC=org/DC=doegrids/OU=People/CN=Frank Wuerthwein 699373/CN=proxy
identity  : /DC=org/DC=doegrids/OU=People/CN=Frank Wuerthwein 699373/CN=proxy
type      : unknown
strength  : 512 bits
path      : /tmp/x509up_u10179
timeleft  : 95:59:39
=== VO cms extension information ===
VO        : cms
subject   : /DC=org/DC=doegrids/OU=People/CN=Frank Wuerthwein 699373
issuer    : /DC=ch/DC=cern/OU=computers/CN=voms.cern.ch
attribute : /cms/Role=NULL/Capability=NULL
attribute : /cms/uscms/Role=NULL/Capability=NULL
timeleft  : 95:59:39
  -- FkW - 25 Apr 2008
 
This site is powered by the TWiki collaboration platformCopyright © by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback