 |
 |
Hi Di, On Thu, 30 Oct 2008, Di Qing wrote: > problems when it tried to renew voms extension by contacting VOMS server. > Probably the voms configurations are not correct under /opt/glite/etc/vomses/ Thanks, there was a typo indeed in the voms DN. I corrected it, and now: 1. There is only one successful renewal from the WMS in the MyProxy logs, at the expected time. No more traces of renewals every five minutes 2. There are no 'VOMS_Contact() failed' messages anymore in the WMS logs. 3. The job still dies shortly after proxy expiry :( Cheers, Szabolcs > on WMS. > > Di > > Hernath Szabolcs wrote: >> Dear List, >> >> I have a problem with the (supposedly) automatic proxyrenewal feature of >> our new glite-WMS service. Since I did not find any hints in GocWiki or >> elsewhere, I am posting here. The situation is as follows: >> >> 1. MyProxy is running fine. It recognizes the WMS as an authorized >> renewer. >> >> 2. WMS is running fine (including glite-proxy-renewd) >> >> 3. Longterm proxy is created with 'myproxy-init -d -n' >> >> 4. VOMS proxy is created with '-valid=1:30' option >> >> 5. Job is submitted with 'glite-wms-job-submit -a'. The JDL contains the >> MyProxyServer directive, and the job needs a lot more than 90 minutes to >> execute >> >> 6. The job fails sortly after the original VOMS proxy expires :( >> >> >> I can see in the MyProxy logs: >> >> ----------------------------------------------------------------- >> Oct 29 12:09:07 grid153 myproxy-server[16118]: Authenticated client >> /C=HU/O=KFKI RMKI CA/OU=KFKI RMKI/CN=host/grid150.kfki.hu >> Oct 29 12:09:07 grid153 myproxy-server[16118]: applying >> trusted_retrievers policy >> Oct 29 12:09:07 grid153 myproxy-server[16118]: applying >> authorized_retrievers policy >> Oct 29 12:09:07 grid153 myproxy-server[16118]: applying >> authorized_renewers policy >> Oct 29 12:09:07 grid153 myproxy-server[16118]: sending >> MYPROXY_AUTHORIZATION_RESPONSE >> Oct 29 12:09:07 grid153 myproxy-server[16118]: client chose >> X509_certificate >> Oct 29 12:09:07 grid153 myproxy-server[16118]: renewal authentication >> succeeded >> Oct 29 12:09:07 grid153 myproxy-server[16118]: Received GET request from >> /C=HU/O=KFKI RMKI CA/OU=KFKI RMKI/CN=host/grid150.kfki.hu >> Oct 29 12:09:07 grid153 myproxy-server[16118]: >> Owner: /C=HU/O=KFKI RMKI CA/OU=KFKI RMKI/CN=Hernath Szabolcs HUNGRID >> Oct 29 12:09:07 grid153 myproxy-server[16118]: >> Username: /C=HU/O=KFKI RMKI CA/OU=KFKI RMKI/CN=Hernath Szabolcs HUNGRID >> Oct 29 12:09:07 grid153 myproxy-server[16118]: Location: >> /var/myproxy/e4f867e5831db0fc543bec66c5d23334.creds >> Oct 29 12:09:07 grid153 myproxy-server[16118]: Requested lifetime: >> 36000 seconds >> Oct 29 12:09:07 grid153 myproxy-server[16118]: Max. delegation lifetime: >> 43200 seconds >> Oct 29 12:09:07 grid153 myproxy-server[16118]: Sending OK response to >> client /C=HU/O=KFKI RMKI CA/OU=KFKI RMKI/CN=host/grid150.kfki.hu >> Oct 29 12:09:07 grid153 myproxy-server[16118]: retrieving proxy >> Oct 29 12:09:08 grid153 myproxy-server[16118]: Delegating credentials for >> /C=HU/O=KFKI RMKI CA/OU=KFKI RMKI/CN=Hernath Szabolcs HUNGRID >> lifetime=36000 >> Oct 29 12:09:08 grid153 myproxy-server[16118]: Sending OK response to >> client /C=HU/O=KFKI RMKI CA/OU=KFKI RMKI/CN=host/grid150.kfki.hu >> Oct 29 12:09:08 grid153 myproxy-server[16118]: Client >> /C=HU/O=KFKI RMKI CA/OU=KFKI RMKI/CN=host/grid150.kfki.hu disconnected >> -------------------------------------------------------------------------- >> >> every 5(!) minutes during the jobs lifecycle... >> >> From the WMS logs I have (at corresponding times): >> >> -------------------------------------------------------------------------- >> Oct 29 11:54:01 grid150 glite-proxy-renewd[15693]: VOMS_Contact() failed >> -------------------------------------------------------------------------- >> >> And after 3 or 4 instances, this message extends to: >> >> -------------------------------------------------------------------------- >> Oct 29 12:09:04 grid150 glite-proxy-renewd[13435]: VOMS_Contact() failed >> Oct 29 12:09:04 grid150 glite-proxy-renewd[15692]: Remaining proxy >> lifetime fell below the value of the Condor limit! >> -------------------------------------------------------------------------- >> >> I assume, the renewal process runs OK from the MyProxy point of view, but >> somehow does not satisfy the WMS... >> >> What am I missing? Any help is appreciated, >> Cheers >> >> Szabolcs >