Testbed Support for GridPP member institutes [mailto:TB-
> [log in to unmask]] On Behalf Of Daniela Bauer said:
> Ok, just to reiterate, here is the sequence of events as I understand
> it:
>
> source /vols/grid/glite/ui/3.2.10-1/external/etc/profile.d/grid-env.sh
> voms-proxy-init -valid 24:00 --voms vo.londongrid.ac.uk
If you're using proxy renewal you don't need to ask for a 24-hour proxy, the default 12 hours should be fine - I think problems only set in if the remaining lifetime is much less than an hour, then it could expire before the renewal has a chance to happen.
> myproxy-init -n -d
Yes, but the order you give possibly suggests a misconception: voms-proxy-init and myproxy-init are independent commands, you aren't uploading your voms proxy to myproxy, just a plain proxy with a long lifetime.
> glite-wms-job-submit -a -o mastercodegrid.log glite-run.imperial.jdl
>
> yes ?
Yes, although if you're submitting lots of jobs it's better to delegate a proxy once and use the delegation ID rather than -a because the delegation has an overhead. Anyway I seem to remember there is no particular guarantee that a job will get the specific proxy you submitted it with if the WMS has several with the same attributes.
> The UI will default to lcgrbp01.gridpp.rl.ac.uk, but I just added
> MyProxyServer = "lcgrbp01.gridpp.rl.ac.uk";
> (I assume this machine know how to deal with londongrid ?) in the jdl
> file for good measure.
The myproxy itself can store proxies from anyone. The constraints are that the WMS needs to support the VO and the myproxy has to trust the WMS. An additional point is that the JDL can only specify one myproxy so if it were down or unreachable it could cause problems, but in practice they seem to be rather stable. Also I think the WMS will keep trying to renew if it fails.
> Can I just renew this proxy periodically ? Not a cron job, but let's
> say, I come in every morning , check out last nights crop and then run
> the above commands again ?
The default lifetime for myproxy-init is a week, and you can make it longer, so e.g. uploading a new one on Monday mornings should be enough. You'll still need the voms-proxy-init every day as usual to use local commands.
Stephen
|