Line: 1 to 1 | ||||||||
---|---|---|---|---|---|---|---|---|
Verifying ICE's proxy renewalThis page will guide you through the path of verification of ICE's proxy renewal mechanism.Prerequisites | ||||||||
Line: 16 to 16 | ||||||||
At a certain point you will have to see a log message like this... | ||||||||
Deleted: | ||||||||
< < | 2012-07-05 15:34:03,627 DEBUG - iceCommandDelegationRenewal::renewAllDelegations() - Executing command [export X509_USER_CERT=/var/glite/wms.proxy; export X509_USER_KEY=/var/glite/wms.proxy; /usr/bin/glite-wms-ice-proxy-renew -s cream-44.pd.infn.it -p /var/ice/persist_dir/02DCBA19CA35649ED9E8626E56AF6406D6448863.betterproxy -o /var/ice/persist_dir/02DCBA19CA35649ED9E8626E56AF6406D6448863.betterproxy.renewed]... | |||||||
2012-07-05 15:34:05,048 DEBUG - iceCommandDelegationRenewal::renewAllDelegations() - Command output is [/var/ice/persist_dir/02DCBA19CA35649ED9E8626E56AF6406D6448863.betterproxy.voms.D3sBb2 2012-07-05 15:34:05,048 DEBUG - iceCommandDelegationRenewal::renewAllDelegations() - Proxy renewal successful for DN=[/C=IT/O=INFN/OU=Personal Certificate/L=Padova/CN=Alvise Dorigo-/dteam/Role=NULL/Capability=NULL] MyProxyURL=[cream-44.pd.infn.it]: new proxy is [/var/ice/persist_dir/02DCBA19CA35649ED9E8626E56AF6406D6448863.betterproxy.renewed]. It will overwrite the better one... |
Line: 1 to 1 | ||||||||
---|---|---|---|---|---|---|---|---|
Changed: | ||||||||
< < | TODO | |||||||
> > | Verifying ICE's proxy renewalThis page will guide you through the path of verification of ICE's proxy renewal mechanism.Prerequisites
TestLog as root into the WMS machine; make sure ICE is running and change directory to/var/ice/persist_dir . Make sure there is not any proxy file in the current directory (a proxy file held by ICE has a name like this: 02DCBA19CA35649ED9E8626E56AF6406D6448863.betterproxy ). If some file is present, it is better you scratch ICE by stopping it (/etc/init.d/glite-wms-ice stop ), removing everything from the directory /var/ice/persist_dir and restart ICE (/etc/init.d/glite-wms-ice start ). | |||||||
Added: | ||||||||
> > | Swith to the UI console and create a voms proxy lasting 30 minutes with the command: voms-proxy-init -voms . Then submit your JDL to the WMS. Switch to the console connected to the WMS machine. A proxy file should be present now (or in few seconds) in the current directory (/var/ice/persist_dir ). You can verify its validity with the command voms-proxy-info -all -file proxyfile . The validity should be few less than 30 minutes. If the validity is about 12 hours, it means that your credentials have been previously registered in the proxy renewal daemon running in the WMS machine. In this case you have to switch off the proxy renewal daemon (/etc/init.d/glite-proxy-renewald stop ), remove any proxy file from its cache directory (\rm /var/glite/spool/glite-renewd/* ) and restart it (/etc/init.d/glite-proxy-renewald start ) and repeat everything since the ICE's scratch. Then recreate a 30 minutes voms proxy and submit your JDL again. Just after verification of the proxy lifetime (that must be about 30 minutes), execute the command
tail -f /var/log/wms/ice.log|grep DelegationRenewal | |||||||
Added: | ||||||||
> > | At a certain point you will have to see a log message like this...
2012-07-05 15:34:03,627 DEBUG - iceCommandDelegationRenewal::renewAllDelegations() - Executing command [export X509_USER_CERT=/var/glite/wms.proxy; export X509_USER_KEY=/var/glite/wms.proxy; /usr/bin/glite-wms-ice-proxy-renew -s cream-44.pd.infn.it -p /var/ice/persist_dir/02DCBA19CA35649ED9E8626E56AF6406D6448863.betterproxy -o /var/ice/persist_dir/02DCBA19CA35649ED9E8626E56AF6406D6448863.betterproxy.renewed]... 2012-07-05 15:34:05,048 DEBUG - iceCommandDelegationRenewal::renewAllDelegations() - Command output is [/var/ice/persist_dir/02DCBA19CA35649ED9E8626E56AF6406D6448863.betterproxy.voms.D3sBb2 2012-07-05 15:34:05,048 DEBUG - iceCommandDelegationRenewal::renewAllDelegations() - Proxy renewal successful for DN=[/C=IT/O=INFN/OU=Personal Certificate/L=Padova/CN=Alvise Dorigo-/dteam/Role=NULL/Capability=NULL] MyProxyURL=[cream-44.pd.infn.it]: new proxy is [/var/ice/persist_dir/02DCBA19CA35649ED9E8626E56AF6406D6448863.betterproxy.renewed]. It will overwrite the better one...Kill the tail and check again the proxy file held by ICE in its directory /var/ice/persist_dir ; now the timelft shoud be about 12 hours. | |||||||
-- AlviseDorigo - 2012-07-05 |
Line: 1 to 1 | ||||||||
---|---|---|---|---|---|---|---|---|
Added: | ||||||||
> > | TODO -- AlviseDorigo - 2012-07-05 |