Difference: NotesAboutInstallationAndConfigurationOfMyproxy (3 vs. 4)

Revision 42011-12-29 - PaoloVeronesi

Line: 1 to 1
 
META TOPICPARENT name="WebHome"
Changed:
<
<

Notes about Installation and Configuration of myproxy (DRAFT)

>
>

Notes about Installation and Configuration of myproxy

 
  • These notes are provided by site admins on a best effort base as a contribution to the IGI communities and MUST not be considered as a subsitute of the Official IGI documentation.
  • This document is addressed to site administrators responsible for middleware installation and configuration.
  • The goal of this page is to provide some hints and examples on how to install and configure an IGI myproxy service based on UMD middleware.
Line: 56 to 56
 sl-contrib.repo sl-fastbugs.repo sl-security.repo sl-testing.repo sl-debuginfo.repo sl.repo sl-srpms.repo
Changed:
<
<

Update host and perform the installation of package(s) (DRAFT)

>
>

Update host and perform the installation of package(s)

 
# yum clean all
Loaded plugins: downloadonly, kernel-module, priorities, protect-packages, protectbase, security, verify, versionlock
Line: 366 to 366
 
  • DN list of trusted retrievers (nagios)
Changed:
<
<
cat << EOF > site-info.def SITE_NAME=emitb
>
>
# cp -vr /opt/glite/yaim/examples/siteinfo /root/ `/opt/glite/yaim/examples/siteinfo' -> `/root/siteinfo' `/opt/glite/yaim/examples/siteinfo/site-info.def' -> `/root/siteinfo/site-info.def' `/opt/glite/yaim/examples/siteinfo/services' -> `/root/siteinfo/services' `/opt/glite/yaim/examples/siteinfo/services/glite-px' -> `/root/siteinfo/services/glite-px' `/opt/glite/yaim/examples/siteinfo/services/glite-bdii_site' -> `/root/siteinfo/services/glite-bdii_site'

# cat /root/siteinfo/site-info.def SITE_NAME=INFN-CNAF

 PX_HOST=`hostname -f`
Added:
>
>
# cat siteinfo/services/glite-px ############################################################################## # Copyright (c) Members of the EGEE Collaboration. 2004. # See http://www.eu-egee.org/partners/ for details on the copyright # holders. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS # OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. ############################################################################## # # NAME : glite-px # # DESCRIPTION : This configuration file contains the list of variables needed # to configure Myproxy together with site-info.def. # # AUTHORS : yaim-contact@cern.ch # # NOTES : # # YAIM MODULE: glite-yaim-myproxy # ##############################################################################
 GRID_AUTHORIZED_RETRIEVERS="\*"
Added:
>
>
 GRID_AUTHORIZED_RENEWERS="
Changed:
<
<
'/DC=org/DC=terena/DC=tcs/C=CZ/O=Masaryk University/CN=emitb2.ics.muni.cz' '/DC=ch/DC=cern/OU=computers/CN=cvitbrcnagios.cern.ch' '/DC=ch/DC=cern/OU=computers/CN=lxbra2302.cern.ch' '/C=CH/O=CERN/OU=GRID/CN=host/lxbra2302.cern.ch' '/C=CH/O=CERN/OU=GRID/CN=host/cvitbrcnagios.cern.ch'
>
>
'/C=IT/O=INFN/OU=Host/L=CNAF/CN=gridit-wms-01.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=egee-wms-01.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=Ferrara/CN=gridrb.fe.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=egee-rb-01.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=egee-rb-02.cnaf.infn.it' '/C=IT/O=INFN/OU=grid014.ct.infn.it/L=Catania/CN=grid014.ct.infn.it/emailAddress=giuseppe.platania@ct.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=gridit-cert-rb.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=eumed-rb-1.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=euchina-rb-1.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=egee-rb-03.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=egee-rb-04.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=egee-rb-05.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=egee-rb-06.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=gridit-rb-01.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=Padova/CN=egrid-rb-01.pd.infn.it' '/C=IT/O=INFN/OU=Host/L=Padova/CN=prod-rb-01.pd.infn.it' '/C=IT/O=INFN/OU=Host/L=Padova/CN=prod-rb-02.pd.infn.it' '/C=IT/O=INFN/OU=Host/L=Padova/CN=prod-wms-01.pd.infn.it' '/C=IT/O=INFN/OU=Host/L=Padova/CN=eu-india-02.pd.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=sc2.cr.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=Bari/CN=wms1.ba.infn.it' '/C=IT/O=INFN/OU=Host/L=Bari/CN=wms2.ba.infn.it' '/C=IT/O=INFN/OU=Host/L=Bari/CN=wms3.ba.infn.it' '/C=CH/O=CERN/OU=GRID/CN=host/lxn1185.cern.ch' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=egee-rb-07.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=egee-rb-08.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=egee-rb-09.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=cert-rb-06.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=glite-rb-00.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=glite-rb-01.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=devel07.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=devel09.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=devel10.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=devel11.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=devel12.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=devel14.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=devel18.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=devel19.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=devel20.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=Padova/CN=cream-06.pd.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=wms001.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=wms002.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=wms003.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=wms004.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=wms005.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=wms006.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=wms007.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=wms008.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=wms009.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=wms011.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=wms012.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=wms013.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=wms014.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=wms015.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=wms016.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=wms017.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=cert-02.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=pps-fts.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=tigerman.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=Milano/CN=egee-rb-01.mi.infn.it' '/C=IT/O=INFN/OU=Host/L=CIRMMP/CN=wms-enmr.cerm.unifi.it' '/DC=ch/DC=cern/OU=computers/CN=wms101.cern.ch' '/DC=ch/DC=cern/OU=computers/CN=wms102.cern.ch' '/DC=ch/DC=cern/OU=computers/CN=wms103.cern.ch' '/DC=ch/DC=cern/OU=computers/CN=wms104.cern.ch' '/DC=ch/DC=cern/OU=computers/CN=wms105.cern.ch' '/DC=ch/DC=cern/OU=computers/CN=wms106.cern.ch' '/DC=ch/DC=cern/OU=computers/CN=wms107.cern.ch' '/DC=ch/DC=cern/OU=computers/CN=wms108.cern.ch' '/DC=ch/DC=cern/OU=computers/CN=wms109.cern.ch' '/DC=ch/DC=cern/OU=computers/CN=wms110.cern.ch' '/DC=ch/DC=cern/OU=computers/CN=wms111.cern.ch' '/DC=ch/DC=cern/OU=computers/CN=wms112.cern.ch' '/DC=ch/DC=cern/OU=computers/CN=wms113.cern.ch' '/DC=ch/DC=cern/OU=computers/CN=wms114.cern.ch' '/DC=ch/DC=cern/OU=computers/CN=wms115.cern.ch' '/DC=ch/DC=cern/OU=computers/CN=wms116.cern.ch' '/DC=ch/DC=cern/OU=computers/CN=wms117.cern.ch' '/DC=ch/DC=cern/OU=computers/CN=wms118.cern.ch' '/DC=ch/DC=cern/OU=computers/CN=wms119.cern.ch' '/DC=ch/DC=cern/OU=computers/CN=wms121.cern.ch' '/DC=ch/DC=cern/OU=computers/CN=wms122.cern.ch' '/DC=ch/DC=cern/OU=computers/CN=wms123.cern.ch' '/DC=ch/DC=cern/OU=computers/CN=wms124.cern.ch' '/DC=ch/DC=cern/OU=computers/CN=wms125.cern.ch' '/DC=ch/DC=cern/OU=computers/CN=wms126.cern.ch' '/O=dutchgrid/O=hosts/OU=nikhef.nl/CN=graszode.nikhef.nl' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=mon-it.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=mon-cnaf.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=bbrbuild01.cr.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=bbr-serv09.cr.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=egee017.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=sb-serv01.cr.cnaf.infn.it'
 "
Added:
>
>
GRID_AUTHORIZED_RETRIEVERS="*"
 GRID_TRUSTED_RETRIEVERS="
Changed:
<
<
'/DC=ch/DC=cern/OU=computers/CN=cvitbrcnagios.cern.ch' '/C=CH/O=CERN/OU=GRID/CN=host/cvitbrcnagios.cern.ch'
>
>
'/C=IT/O=INFN/OU=Host/L=CNAF/CN=mon-it.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=mon-cnaf.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=bbrbuild01.cr.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=bbr-serv09.cr.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=egee017.cnaf.infn.it' '/C=IT/O=INFN/OU=Host/L=CNAF/CN=sb-serv01.cr.cnaf.infn.it'
 "
Changed:
<
<

host certificate required

>
>

host certificate required

# ll /etc/grid-security/host*
-rw-r--r-- 1 root root 1440 Dec 29 09:30 /etc/grid-security/hostcert.pem
-r-------- 1 root root  887 Dec 29 09:30 /etc/grid-security/hostkey.pem
 

YAIM check

#  chmod -R 600 /root/siteinfo
Changed:
<
<
# /opt/glite/yaim/bin/yaim -v -s /root/siteinfo/site-info.def -n ?????? /opt/glite/yaim/bin/yaim -c -s ./site-info.def -n glite-PX
>
>
# /opt/glite/yaim/bin/yaim -v -s /root/siteinfo/site-info.def -n glite-PX
INFO
Using site configuration file: /root/siteinfo/site-info.def
INFO
Sourcing service specific configuration file: /root/siteinfo/services/glite-px
INFO
###################################################################

. /'.-. ') . yA,-"-,( ,m,:/ ) .oo. oo o ooo o. .oo . / .-Y a a Y-. 8. .8' 8'8. 8 8b d'8 . / ~ ~ / 8' .8oo88. 8 8 8' 8 . (_/ '====' 8 .8' 8. 8 8 Y 8 . Y,-''-,Yy,-.,/ o8o o8o o88o o8o o8o o8o . I_))_) I_))_)

current working directory: /root site-info.def date: Dec 29 09:36 /root/siteinfo/site-info.def yaim command: -v -s /root/siteinfo/site-info.def -n glite-PX log file: /opt/glite/yaim/bin/../log/yaimlog Thu Dec 29 09:44:38 CET 2011 : /opt/glite/yaim/bin/yaim

Installed YAIM versions: glite-px-myproxy-yaim - glite-yaim-bdii 4.3.4-1 glite-yaim-core 5.0.2-1

####################################################################

INFO
The default location of the grid-env.(c)sh files will be: /usr/libexec
INFO
Sourcing the utilities in /opt/glite/yaim/functions/utils
INFO
Detecting environment
INFO
Executing function: config_host_certs_check
INFO
Executing function: config_edgusers_check
INFO
Executing function: config_proxy_server_check
INFO
Executing function: config_bdii_5.2_check
INFO
Executing function: config_info_service_px_check
INFO
Checking is done.
INFO
All the necessary variables to configure PX are defined in your configuration files.
INFO
Please, bear in mind that YAIM only guarantees the definition of variables
INFO
controlled in the _check functions.
INFO
YAIM terminated succesfully.
 
Deleted:
<
<

Know Issue and Workaround

 

YAIM config

Please use the debug flag ( "-d 6") to configure the services in order to have detailed information. For your convenience yo can save all the configuration information in a log file you can look at any time, separated from the yaimlog defulat one.
Changed:
<
<
# /opt/glite/yaim/bin/yaim -c -d 6 -s /root/siteinfo/site-info.def -n ?????? /opt/glite/yaim/bin/yaim -c -s ./site-info.def -n glite-PX
>
>
# /opt/glite/yaim/bin/yaim -c -d 6 -s /root/siteinfo/site-info.def -n glite-PX
DEBUG
Checking siteinfo dir is not world readable
DEBUG
Checking site-info.def is syntactically correct
DEBUG
Sourcing /opt/glite/yaim/bin/../defaults/site-info.pre
DEBUG
Sourcing /opt/glite/yaim/bin/../defaults/glite-px.pre
INFO
Using site configuration file: /root/siteinfo/site-info.def
DEBUG
Sourcing site-info.def file: /root/siteinfo/site-info.def
INFO
Sourcing service specific configuration file: /root/siteinfo/services/glite-px
DEBUG
Sourcing /opt/glite/yaim/bin/../defaults/site-info.post
DEBUG
Sourcing /opt/glite/yaim/bin/../defaults/mapping
INFO
###################################################################

. /'.-. ') . yA,-"-,( ,m,:/ ) .oo. oo o ooo o. .oo . / .-Y a a Y-. 8. .8' 8'8. 8 8b d'8 . / ~ ~ / 8' .8oo88. 8 8 8' 8 . (_/ '====' 8 .8' 8. 8 8 Y 8 . Y,-''-,Yy,-.,/ o8o o8o o88o o8o o8o o8o . I_))_) I_))_)

current working directory: /root site-info.def date: Dec 29 09:36 /root/siteinfo/site-info.def yaim command: -c -d 6 -s /root/siteinfo/site-info.def -n glite-PX log file: /opt/glite/yaim/bin/../log/yaimlog Thu Dec 29 09:45:30 CET 2011 : /opt/glite/yaim/bin/yaim

Installed YAIM versions: glite-px-myproxy-yaim - glite-yaim-bdii 4.3.4-1 glite-yaim-core 5.0.2-1

####################################################################

INFO
The default location of the grid-env.(c)sh files will be: /usr/libexec
INFO
Sourcing the utilities in /opt/glite/yaim/functions/utils
INFO
Detecting environment
DEBUG
Detect platform: OS flavour detected is: emi
DEBUG
Detected architecture is 64BIT
DEBUG
Detect platform: OS type detected: sl5
DEBUG
Resulted NODE_TYPE_LIST is : PX
DEBUG
Setting environment variable GRID_ENV_LOCATION, to value "/usr/libexec".
DEBUG
Unset environment variable GRID_ENV_LOCATION.
DEBUG
Setting environment variable LCG_LOCATION, to value "/usr".
DEBUG
Unset environment variable LCG_LOCATION.
DEBUG
Setting environment variable GLITE_LOCATION, to value "/usr".
DEBUG
Unset environment variable GLITE_LOCATION.
DEBUG
Setting environment variable GLITE_LOCATION_VAR, to value "/var".
DEBUG
Unset environment variable GLITE_LOCATION_VAR.
DEBUG
Appending value "/bin" to environment variable PATH.
DEBUG
Deleting value "/bin" from environment variable PATH.
DEBUG
Appending value "/opt/glite/share/man" to environment variable MANPATH.
DEBUG
Deleting value "/opt/glite/share/man" from environment variable MANPATH.
DEBUG
Sourcing node definition file: /opt/glite/yaim/bin/../node-info.d/glite-px
DEBUG
Skipping function: config_crl_check because it is not defined
INFO
Executing function: config_host_certs_check
INFO
Executing function: config_edgusers_check
INFO
Executing function: config_proxy_server_check
INFO
Executing function: config_bdii_5.2_check
INFO
Executing function: config_info_service_px_check
DEBUG
Skipping function: config_crl_setenv because it is not defined
INFO
Executing function: config_crl
INFO
Now updating the CRLs - this may take a few minutes...
Enabling periodic fetch-crl: [ OK ]
DEBUG
fetch-crl cron enabled
DEBUG
Skipping function: config_host_certs_setenv because it is not defined
INFO
Executing function: config_host_certs
DEBUG
Skipping function: config_edgusers_setenv because it is not defined
INFO
Executing function: config_edgusers
DEBUG
Creating user edguser...
DEBUG
User edguser doesn't exist
DEBUG
YAIM is going to add user edguser
DEBUG
HOME directory ${EDG_HOME_DIR} is specified for the user
DEBUG
Checking whether the group edguser infosys for user edguser already exist...
DEBUG
Group edguser added
DEBUG
Group infosys added
DEBUG
User edguser added
DEBUG
Creating user edginfo...
DEBUG
User edginfo doesn't exist
DEBUG
YAIM is going to add user edginfo
DEBUG
HOME directory ${EDGINFO_HOME_DIR} is specified for the user
DEBUG
Checking whether the group edginfo infosys for user edginfo already exist...
DEBUG
Group edginfo added
DEBUG
Group infosys added
DEBUG
User edginfo added
DEBUG
Creating user glite...
DEBUG
User glite doesn't exist
DEBUG
YAIM is going to add user glite
DEBUG
HOME directory ${GLITE_HOME_DIR} is specified for the user
DEBUG
Checking whether the group glite for user glite already exist...
DEBUG
Group glite added
DEBUG
User glite added
DEBUG
Creating user edguser...
DEBUG
Skipping user edguser since it already exists...
INFO
Executing function: config_proxy_server_setenv
DEBUG
Setting environment variable GLITE_PX_LOCATION, to value "/usr".
DEBUG
Unset environment variable GLITE_PX_LOCATION.
DEBUG
Setting environment variable GLITE_PX_LOCATION_ETC, to value "/etc".
DEBUG
Unset environment variable GLITE_PX_LOCATION_ETC.
DEBUG
Setting environment variable GLITE_PX_LOCATION_VAR, to value "/var/glite".
DEBUG
Unset environment variable GLITE_PX_LOCATION_VAR.
INFO
Executing function: config_proxy_server
DEBUG
Creating Minimal myproxy configuration.
INFO
Reloading MyProxy server
INFO
MyProxy server not running so starting
Starting myproxy-server: [ OK ]
DEBUG
Skipping function: config_bdii_5.2_setenv because it is not defined
INFO
Executing function: config_bdii_5.2
Stopping BDII: BDII already stopped Starting BDII slapd: [ OK ] Starting BDII update process: [ OK ]
INFO
Executing function: config_info_service_px_setenv
DEBUG
This function currently doesn't set any environment variables.
INFO
Executing function: config_info_service_px
DEBUG
Delete a previous version of the *.conf if it exists
DEBUG
Create the configuration files out of the template file
DEBUG
Delete a previous version of the glite-info-provider-service-myproxy-wrapper if it exists
DEBUG
Create the /var/lib/bdii/gip/provider in case it doesn't exist
DEBUG
Create the glite-info-provider-service-myproxy-wrapper file
INFO
Configuration Complete. [ OK ]
INFO
YAIM terminated succesfully.
 
Added:
>
>

Know Issue and Workaround

Al momento il servizio non parte al boot (baco di yaim, notificato in GGUS.
# chkconfig myproxy-server on
 

Service checks

Added:
>
>
myproxy-init
On a user interface:
# $ myproxy-info -s myproxy.cnaf.infn.it -k veronesi-test
username: veronesi
owner: /C=IT/O=INFN/OU=Personal Certificate/L=CNAF/CN=Paolo Veronesi
  name: veronesi-test
  timeleft: 167:55:38  (7.0 days)
[veronesi@ui ~]$  myproxy-init -s myproxy.cnaf.infn.it -k veronesi-test
Your identity: /C=IT/O=INFN/OU=Personal Certificate/L=CNAF/CN=Paolo Veronesi
Enter GRID pass phrase for this identity:
Creating proxy ............................................................................................ Done
Proxy Verify OK
Your proxy is valid until: Thu Jan  5 10:03:38 2012
Enter MyProxy pass phrase:
Verifying - Enter MyProxy pass phrase:
A proxy valid for 168 hours (7.0 days) for user veronesi now exists on myproxy.cnaf.infn.it.
On the MyProxy server:

# tail -f /var/log/messages
Dec 29 10:03:40 myproxy myproxy-server[9119]: Connection from 131.154.101.141
Dec 29 10:03:41 myproxy myproxy-server[9119]: Authenticated client /C=IT/O=INFN/OU=Personal Certificate/L=CNAF/CN=Paolo Veronesi
Dec 29 10:03:42 myproxy myproxy-server[9119]: Received PUT request for username veronesi
Dec 29 10:03:43 myproxy myproxy-server[9119]: Client /C=IT/O=INFN/OU=Personal Certificate/L=CNAF/CN=Paolo Veronesi disconnected

# ls -ltr /var/lib/myproxy/
total 36
-rw------- 1 myproxy myproxy   132 Dec 29 10:03 veronesi-veronesi-test.data
-rw------- 1 myproxy myproxy  5912 Dec 29 10:03 veronesi-veronesi-test.creds

myproxy-info
On a user interface:
# myproxy-info -s myproxy.cnaf.infn.it -k veronesi-test
username: veronesi
owner: /C=IT/O=INFN/OU=Personal Certificate/L=CNAF/CN=Paolo Veronesi
  name: veronesi-test
  timeleft: 167:55:38  (7.0 days)

On the MyProxy server:

# tail -f /var/log/messages
Dec 29 10:42:08 myproxy myproxy-server[9209]: Connection from 131.154.101.141
Dec 29 10:42:08 myproxy myproxy-server[9209]: Authenticated client /C=IT/O=INFN/OU=Personal Certificate/L=CNAF/CN=Paolo Veronesi
Dec 29 10:42:08 myproxy myproxy-server[9209]: Received INFO request for username veronesi
Dec 29 10:42:08 myproxy myproxy-server[9209]: Client /C=IT/O=INFN/OU=Personal Certificate/L=CNAF/CN=Paolo Veronesi disconnected

myproxy-get-delegation
On a user interface:
$ myproxy-get-delegation -s myproxy.cnaf.infn.it -k veronesi-test
Enter MyProxy pass phrase:
A credential has been received for user veronesi in /tmp/x509up_u23019.
On the MyProxy server:

# tail -f /var/log/messages
Dec 29 11:01:05 myproxy myproxy-server[31270]: Connection from 131.154.101.141
Dec 29 11:01:05 myproxy myproxy-server[31270]: Authenticated client /C=IT/O=INFN/OU=Personal Certificate/L=CNAF/CN=Paolo Veronesi
Dec 29 11:01:08 myproxy myproxy-server[31270]: Received GET request for username veronesi
Dec 29 11:01:08 myproxy myproxy-server[31270]: credential passphrase matched
Dec 29 11:01:08 myproxy myproxy-server[31270]: Delegating credentials for /C=IT/O=INFN/OU=Personal Certificate/L=CNAF/CN=Paolo Veronesi lifetime=43200
Dec 29 11:01:08 myproxy myproxy-server[31270]: Client /C=IT/O=INFN/OU=Personal Certificate/L=CNAF/CN=Paolo Veronesi disconnected
 

Additional notes

In order to make the WMS renewal function it is necessary:
 
This site is powered by the TWiki collaboration platformCopyright © 2008-2021 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback