On 18/11/11 12:12, Stephen Burke wrote:
>
> The myproxy itself can store proxies from anyone. The constraints are that the WMS needs to support the VO and the myproxy has to trust the WMS. An additional point is that the JDL can only specify one myproxy so if it were down or unreachable it could cause problems, but in practice they seem to be rather stable. Also I think the WMS will keep trying to renew if it fails.
Just to confirm my understanding of this.
In addition to requiring the WMS is trusted by the myproxy server, can
you confirm that the wms must present a valid proxy that it is trying to
renew.
>> Can I just renew this proxy periodically ? Not a cron job, but let's
>> say, I come in every morning , check out last nights crop and then run
>> the above commands again ?
>
> The default lifetime for myproxy-init is a week,
Pity that wasn't one week and one day (ie 8 days). Just as your
certificate lasts 13 months (so you can renew it at the same time every
year - give or take a few days).
> and you can make it longer, so e.g. uploading a
> new one on Monday mornings should be enough.
Except that even if you renewed religiously at 9am on Monday, you'd have
a gap where your jobs wouldn't start because of the need for the proxy
to last at least half an hour (or whatever it was).
> You'll still need the voms-proxy-init every day as usual to use local commands.
Chris
|