So now what's the error message from glite-wms-job-status or
glite-wms-log-info? If you can log into the WN where the job is running,
you can check if the renewed proxy is propagated there.
Di
Hernath Szabolcs wrote:
> Hi Di,
>
>
> On Thu, 30 Oct 2008, Di Qing wrote:
>> problems when it tried to renew voms extension by contacting VOMS
>> server. Probably the voms configurations are not correct under
>> /opt/glite/etc/vomses/
>
> Thanks, there was a typo indeed in the voms DN. I corrected it, and now:
>
> 1. There is only one successful renewal from the WMS in the MyProxy
> logs, at the expected time. No more traces of renewals every five minutes
>
> 2. There are no 'VOMS_Contact() failed' messages anymore in the WMS logs.
>
> 3. The job still dies shortly after proxy expiry :(
>
>
> Cheers,
>
> Szabolcs
>
>
>
>
>
>> on WMS.
>>
>> Di
>>
>> Hernath Szabolcs wrote:
>>> Dear List,
>>>
>>> I have a problem with the (supposedly) automatic proxyrenewal
>>> feature of
>>> our new glite-WMS service. Since I did not find any hints in GocWiki or
>>> elsewhere, I am posting here. The situation is as follows:
>>>
>>> 1. MyProxy is running fine. It recognizes the WMS as an authorized
>>> renewer.
>>>
>>> 2. WMS is running fine (including glite-proxy-renewd)
>>>
>>> 3. Longterm proxy is created with 'myproxy-init -d -n'
>>>
>>> 4. VOMS proxy is created with '-valid=1:30' option
>>>
>>> 5. Job is submitted with 'glite-wms-job-submit -a'. The JDL contains
>>> the
>>> MyProxyServer directive, and the job needs a lot more than 90
>>> minutes to
>>> execute
>>>
>>> 6. The job fails sortly after the original VOMS proxy expires :(
>>>
>>>
>>> I can see in the MyProxy logs:
>>>
>>> -----------------------------------------------------------------
>>> Oct 29 12:09:07 grid153 myproxy-server[16118]: Authenticated client
>>> /C=HU/O=KFKI RMKI CA/OU=KFKI RMKI/CN=host/grid150.kfki.hu
>>> Oct 29 12:09:07 grid153 myproxy-server[16118]: applying
>>> trusted_retrievers policy
>>> Oct 29 12:09:07 grid153 myproxy-server[16118]: applying
>>> authorized_retrievers policy
>>> Oct 29 12:09:07 grid153 myproxy-server[16118]: applying
>>> authorized_renewers policy
>>> Oct 29 12:09:07 grid153 myproxy-server[16118]: sending
>>> MYPROXY_AUTHORIZATION_RESPONSE
>>> Oct 29 12:09:07 grid153 myproxy-server[16118]: client chose
>>> X509_certificate
>>> Oct 29 12:09:07 grid153 myproxy-server[16118]: renewal authentication
>>> succeeded
>>> Oct 29 12:09:07 grid153 myproxy-server[16118]: Received GET request
>>> from
>>> /C=HU/O=KFKI RMKI CA/OU=KFKI RMKI/CN=host/grid150.kfki.hu
>>> Oct 29 12:09:07 grid153 myproxy-server[16118]:
>>> Owner: /C=HU/O=KFKI RMKI CA/OU=KFKI RMKI/CN=Hernath Szabolcs HUNGRID
>>> Oct 29 12:09:07 grid153 myproxy-server[16118]:
>>> Username: /C=HU/O=KFKI RMKI CA/OU=KFKI RMKI/CN=Hernath Szabolcs HUNGRID
>>> Oct 29 12:09:07 grid153 myproxy-server[16118]: Location:
>>> /var/myproxy/e4f867e5831db0fc543bec66c5d23334.creds
>>> Oct 29 12:09:07 grid153 myproxy-server[16118]: Requested lifetime:
>>> 36000 seconds
>>> Oct 29 12:09:07 grid153 myproxy-server[16118]: Max. delegation
>>> lifetime:
>>> 43200 seconds
>>> Oct 29 12:09:07 grid153 myproxy-server[16118]: Sending OK response to
>>> client /C=HU/O=KFKI RMKI CA/OU=KFKI RMKI/CN=host/grid150.kfki.hu
>>> Oct 29 12:09:07 grid153 myproxy-server[16118]: retrieving proxy
>>> Oct 29 12:09:08 grid153 myproxy-server[16118]: Delegating
>>> credentials for
>>> /C=HU/O=KFKI RMKI CA/OU=KFKI RMKI/CN=Hernath Szabolcs HUNGRID
>>> lifetime=36000
>>> Oct 29 12:09:08 grid153 myproxy-server[16118]: Sending OK response to
>>> client /C=HU/O=KFKI RMKI CA/OU=KFKI RMKI/CN=host/grid150.kfki.hu
>>> Oct 29 12:09:08 grid153 myproxy-server[16118]: Client
>>> /C=HU/O=KFKI RMKI CA/OU=KFKI RMKI/CN=host/grid150.kfki.hu disconnected
>>> --------------------------------------------------------------------------
>>>
>>>
>>> every 5(!) minutes during the jobs lifecycle...
>>>
>>> From the WMS logs I have (at corresponding times):
>>>
>>> --------------------------------------------------------------------------
>>>
>>> Oct 29 11:54:01 grid150 glite-proxy-renewd[15693]: VOMS_Contact()
>>> failed
>>> --------------------------------------------------------------------------
>>>
>>>
>>> And after 3 or 4 instances, this message extends to:
>>>
>>> --------------------------------------------------------------------------
>>>
>>> Oct 29 12:09:04 grid150 glite-proxy-renewd[13435]: VOMS_Contact()
>>> failed
>>> Oct 29 12:09:04 grid150 glite-proxy-renewd[15692]: Remaining proxy
>>> lifetime fell below the value of the Condor limit!
>>> --------------------------------------------------------------------------
>>>
>>>
>>> I assume, the renewal process runs OK from the MyProxy point of
>>> view, but
>>> somehow does not satisfy the WMS...
>>>
>>> What am I missing? Any help is appreciated,
>>> Cheers
>>>
>>> Szabolcs
>>
|