Testbed Support for GridPP member institutes [mailto:TB-
> [log in to unmask]] On Behalf Of Ewan MacMahon said:
> Well if the tools already do this, why are people finding that
> they're getting non-VOMSified proxies?
Which people? It's always possible that something is broken or misconfigured on a WMS.
> Could someone just outline how this is supposed to work? Which
> component renews which proxy when, and how does that make it to
> the CE and then on to the WN?
The WMS includes a proxy renewal daemon - the documentation is here although it isn't very substantial:
http://egee.cesnet.cz/cvsweb/PR/proxyrenew_AG.pdf
Basically it checks the proxy expiry time, and when it sees it getting close to expiry it tries to retrieve a new one from myproxy, and if that works it goes through the VOMS credentials in the original proxy and contacts the VOMS server(s) to renew those too. The WMS then sends the new proxy to any CEs with jobs for that user - I don't know exactly how it gets to the WN. Some more info here:
http://wiki.italiangrid.it/twiki/bin/view/CREAM/GliteCeProxyRenewMan
Stephen
|