Line: 1 to 1 | ||||||||
---|---|---|---|---|---|---|---|---|
| ||||||||
Line: 12 to 12 | ||||||||
| ||||||||
Changed: | ||||||||
< < |
| |||||||
> > |
| |||||||
| ||||||||
Line: 22 to 22 | ||||||||
Changed: | ||||||||
< < |
| |||||||
> > |
| |||||||
| ||||||||
Changed: | ||||||||
< < |
| |||||||
> > |
| |||||||
Clean installation | ||||||||
Line: 739 to 739 | ||||||||
Al the jobs abort for "proxy expired" (see bug #84155) | ||||||||
Added: | ||||||||
> > | Check Bugs (Regression tests) | |||||||
Changed: | ||||||||
< < | Known issueBug #84155: Proxy renewal fails in ICECheck BugsBugs #69841: cancel requests can bounce between JC and LM FIXED not certified | |||||||
> > | Bug #69841: cancel requests can bounce between JC and LM FIXED not certified | |||||||
This bug cannot be easily replicate. | ||||||||
Changed: | ||||||||
< < | Bugs #82687: emi WMS problems with ISB tar file handling FIXED | |||||||
> > | Bug #82687: emi WMS problems with ISB tar file handling FIXED | |||||||
Submit a jdl like this one: | ||||||||
Line: 835 to 829 | ||||||||
-rw-r--r-- 1 dteam017 dteam 0 Jul 1 14:01 .tmp_file | ||||||||
Changed: | ||||||||
< < | Bugs #82776: typo in WMS jobwrapper FIXED | |||||||
> > | Bug #82776: typo in WMS jobwrapper FIXED | |||||||
Simply check the JobWrapper template on the WMS:
[root@cream-44 ~]# cat /usr/share/glite-wms/jobwrapper.template.sh | grep "Taken token ${__shallow_resubmission_token}" push_in_LM_done_reason "Taken token ${__shallow_resubmission_token}" | ||||||||
Changed: | ||||||||
< < | Bugs #82983: [yaim-wms] authorization problem in WMS EMI-1 FIXED | |||||||
> > | Bug #82983: [yaim-wms] authorization problem in WMS EMI-1 FIXED | |||||||
Simply check that in the file glite_wms_wmproxy.gacl file there are not entry with the word ROLE in upper case:
[root@devel11 ~]# grep ROLE /etc/glite-wms/glite_wms_wmproxy.gacl [root@devel11 ~]# | ||||||||
Added: | ||||||||
> > | Bug #84155: Proxy renewal fails in ICE FIXEDTake a long jdl where MyProxyServer attribute is set and that require a cream CE as destination; like this one:[ale@cream-12 UI]$ cat test.jdl [ Executable = "/bin/sleep" ; Stdoutput = "env.out" ; StdError = "env.err" ; InputSandbox = { "/home/ale/UI/data/pippo" }; OutputSandbox = { "env.out" ,"env.err"} ; Arguments="900"; Environment={"VARIABLE=test"}; usertags = [ exe = "env" ]; FuzzyRank = true; ShallowRetryCount = 3; RetryCount = 2; Myproxyserver="myproxy.cnaf.infn.it"; requirements = RegExp("/cream-",other.GlueCEUniqueID); ]Submit it with a shorter proxy: [ale@cream-12 UI]$ voms-proxy-init -voms dteam --valid 00:15 Your identity: /C=IT/O=INFN/OU=Personal Certificate/L=Padova/CN=Alessio Gianelle Creating temporary proxy .............................................. Done Contacting voms.hellasgrid.gr:15004 [/C=GR/O=HellasGrid/OU=hellasgrid.gr/CN=voms.hellasgrid.gr] "dteam" Done Creating proxy ......................................................................................................................... Done Your proxy is valid until Tue Jul 12 15:30:22 2011 [ale@cream-12 UI]$ glite-wms-job-submit -a -c etc/wmp_devel11.conf test.jdl Connecting to the service https://devel11.cnaf.infn.it:7443/glite_wms_wmproxy_server ====================== glite-wms-job-submit Success ====================== The job has been successfully submitted to the WMProxy Your job identifier is: https://devel11.cnaf.infn.it:9000/tfn-DjwWIGZOg9zUvXs5CQ ==========================================================================Check that its proxy is valid for no more that 15 minutes: [ale@cream-12 UI]$ glite-wms-job-info -p https://devel11.cnaf.infn.it:9000/tfn-DjwWIGZOg9zUvXs5CQ Connecting to the service https://devel11.cnaf.infn.it:7443/glite_wms_wmproxy_server ======================= glite-wms-job-info Success ======================= Your proxy delegated to the endpoint https://devel11.cnaf.infn.it:7443/glite_wms_wmproxy_server for the job https://devel11.cnaf.infn.it:9000/tfn-DjwWIGZOg9zUvXs5CQ : Subject : /C=IT/O=INFN/OU=Personal Certificate/L=Padova/CN=Alessio Gianelle/CN=proxy/CN=proxy Issuer : /C=IT/O=INFN/OU=Personal Certificate/L=Padova/CN=Alessio Gianelle/CN=proxy Identity : /C=IT/O=INFN/OU=Personal Certificate/L=Padova/CN=Alessio Gianelle/CN=proxy Type : proxy Strength : 512 StartDate : 12 July 2011 - 15:13:45 Expiration : 12 July 2011 - 15:29:45 Timeleft : 07 min 17 sec === VO dteam extension information === VO : dteam Subject : /C=IT/O=INFN/OU=Personal Certificate/L=Padova/CN=Alessio Gianelle Issuer : /C=GR/O=HellasGrid/OU=hellasgrid.gr/CN=voms.hellasgrid.gr URI : voms.hellasgrid.gr:15004 Attribute : /dteam/Role=NULL/Capability=NULL Attribute : /dteam/NGI_IT/Role=NULL/Capability=NULL StartTime : 12 July 2011 - 15:15:22 Expiration : 12 July 2011 - 15:30:22 Timeleft : 07 min 54 secWait until it finishes successfully: [ale@cream-12 UI]$ glite-wms-job-status https://devel11.cnaf.infn.it:9000/tfn-DjwWIGZOg9zUvXs5CQ ======================= glite-wms-job-status Success ===================== BOOKKEEPING INFORMATION: Status info for the Job : https://devel11.cnaf.infn.it:9000/tfn-DjwWIGZOg9zUvXs5CQ Current Status: Done (Success) Logged Reason(s): - job completed - Job Terminated Successfully Exit code: 0 Status Reason: Job Terminated Successfully Destination: grid01.erciyes.edu.tr:8443/cream-pbs-dteam Submitted: Tue Jul 12 15:18:46 2011 CEST ==========================================================================We can also check directly the command on the WMS. First of all find the proxy associated with the job in the persist directory of ice: [root@devel11 persist_dir]# openssl x509 -noout -text -in /var/ice/persist_dir/2A9DAF04C398C21D6ADF7E884BC192ED95AF554C.betterproxy Certificate: Data: Version: 3 (0x2) Serial Number: 1310476725 (0x4e1c49b5) Signature Algorithm: md5WithRSAEncryption Issuer: C=IT, O=INFN, OU=Personal Certificate, L=Padova, CN=Alessio Gianelle, CN=proxy Validity Not Before: Jul 12 13:13:45 2011 GMT Not After : Jul 12 13:29:45 2011 GMT Subject: C=IT, O=INFN, OU=Personal Certificate, L=Padova, CN=Alessio Gianelle, CN=proxy, CN=proxy Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public Key: (512 bit) Modulus (512 bit): 00:b7:78:00:10:30:78:4e:82:49:87:25:9d:65:51: ff:4a:4e:5b:37:9e:78:05:84:eb:74:af:ae:11:bb: 60:00:f6:17:80:e7:e6:5d:1d:09:61:fd:71:59:64: bc:10:34:65:54:f8:69:12:c2:61:78:be:29:09:2d: 17:ae:9c:7d:0f Exponent: 65537 (0x10001) Signature Algorithm: md5WithRSAEncryption a9:44:e7:b7:a5:9d:be:e3:65:cf:68:fa:ce:8d:b7:b2:44:30: 31:a1:5a:f6:ee:fa:dc:1c:08:7b:be:6e:af:a7:f9:7f:d9:7f: 6f:3f:44:40:a7:2b:68:86:b7:c6:bd:35:49:49:4a:3a:db:a7: 26:4f:d4:93:b6:10:0d:55:58:e3:82:d4:92:44:b9:b0:ac:9d: 5c:6a:a2:45:c0:61:5f:e4:c1:5a:af:9e:61:60:fb:62:14:9f: b6:c2:d1:ed:2c:6c:c8:9c:1b:3b:e6:c1:d9:8e:a0:4c:31:64: 9f:52:fe:ad:81:04:4b:e5:6b:d1:95:ae:f9:28:5f:53:73:57: 5e:97Then logged as user glite and execute this command: export X509_USER_CERT=/var/wms.proxy; export X509_USER_KEY=/var/wms.proxy; /usr/bin/glite-wms-ice-proxy-renew -s myproxy.cnaf.infn.it -p /var/ice/persist_dir/<user proxy>.betterproxy -o <output file> where /var/ice/persist_dir/<user proxy>.betterproxy is the proxy associate to the job and in <output file> you should find the renewed proxy: [root@devel11 persist_dir]# su - glite [glite@devel11 ~]$ export X509_USER_CERT=/var/wms.proxy; export X509_USER_KEY=/var/wms.proxy; /usr/bin/glite-wms-ice-proxy-renew -s myproxy.cnaf.infn.it -p /var/ice/persist_dir/2A9DAF04C398C21D6ADF7E884BC192ED95AF554C.betterproxy -o /var/ice/persist_dir/2A9DAF04C398C21D6ADF7E884BC192ED95AF554C.betterproxy.renewed /var/ice/persist_dir/2A9DAF04C398C21D6ADF7E884BC192ED95AF554C.betterproxy.voms.xX3leH [glite@devel11 ~]$ ls -l /var/ice/persist_dir/ total 68 -rw-r--r-- 1 glite glite 9767 Jul 12 15:28 2A9DAF04C398C21D6ADF7E884BC192ED95AF554C.betterproxy -rw------- 1 glite glite 9767 Jul 12 15:29 2A9DAF04C398C21D6ADF7E884BC192ED95AF554C.betterproxy.renewed -rw-r--r-- 1 glite glite 44032 Jul 12 15:28 ice.dbCheck the validity of the new proxy: [root@devel11 persist_dir]# openssl x509 -noout -text -in /var/ice/persist_dir/2A9DAF04C398C21D6ADF7E884BC192ED95AF554C.betterproxy.renewed Certificate: Data: Version: 3 (0x2) Serial Number: 19275 (0x4b4b) Signature Algorithm: md5WithRSAEncryption Issuer: C=IT, O=INFN, OU=Personal Certificate, L=Padova, CN=Alessio Gianelle, CN=proxy, CN=proxy, CN=proxy Validity Not Before: Jul 12 13:24:29 2011 GMT Not After : Jul 12 23:29:36 2011 GMT Subject: C=IT, O=INFN, OU=Personal Certificate, L=Padova, CN=Alessio Gianelle, CN=proxy, CN=proxy, CN=proxy, CN=proxy Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public Key: (512 bit) Modulus (512 bit): 00:ca:23:d8:f0:c3:c1:61:33:4b:05:62:42:2d:72: 22:94:9f:d7:da:a5:38:27:45:b8:49:cb:b9:89:dc: a0:ad:55:18:1e:1e:fe:cb:ce:89:73:18:65:8e:38: ad:cf:ad:f4:b4:e9:cb:d1:82:2d:1f:e9:b8:bf:40: d9:43:bb:aa:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Extended Key Usage: TLS Web Client Authentication, E-mail Protection X509v3 Key Usage: critical Digital Signature, Key Encipherment, Data Encipherment 1.3.6.1.4.1.8005.100.100.5: 0...U. 0..F0..B0..>0..&...0s.q0k.i0g1.0...U....IT1 ..U....Padova1.0...U....Alessio Gianelle..KK.]0[.Y0W1.0...U....GR1.0...U. . .......+...}.Fq..=].....voms.hellasgrid.gr0 0"..20110712132928Z..20110713012928Z0..0... +.....Edd.1s0q.". dteam://voms.hellasgrid.gr:150040K. /dteam/Role=NULL/Capability=NULL.'/dteam/NGI_IT/Role=NULL/Capability=NULL0...0.. +.....Edd...0.0.0...U.8....0...U.#..0....y...^.....f.b....V.0..;. +.....Edd .....0c1.0...U....GR1.0...U.q0 . 111008093327Z0W1.0...U....GR1.0...U.uthorities1.0...U....HellasGrid CA 20060.. . ..........0..1.0...U....voms.hellasgrid.gr0.."0 .......l{!.&?.}7...{...N.....c.....f....|........_.Q..7%L4......e.nn.....].>./.i'.A>.pb..s.rw#M...ac.6..R..7=3.l..'N.1...n..).../C.|g.21...l.=J 0.R..=.N=..e.~....a'[..eN..(F7..N..T...h.....*..Ph..$...m...jPl..uo.OD*..](.2+#.%.?...!Z..s/.=.8.......9a]8yj..l..............0...0...U.......0.0...U...........0...U.......y...^.....f.b....V.0....U.#...0.......]..:.l.C..=O<.f^&.l.j0h1.0...U....GR1.0...U. . HellasGrid1"0 ..U....Certification Authorities1 0...U....HellasGrid Root CA 2006...0%..U....0...hellasgrid-ca@grid.auth.gr0...U....0...voms.hellasgrid.gr0...+......E.....0c0a..+........Uhttp://www.grid.auth.gr/pki/hellasgrid-ca-2006/documents/cps/HellasGrid-CA-CP-CPS.pdf0H..U...A0?0=.;.9.7http://crl.grid.auth.gr/...........V....~..!Z..5.........Y...4...[.m.>&......*..........R..i5.7.u..~>;M.v....T.(..jk ......t...uJ....+..{CD...ec.q...-..L....BS..cAcP.)/[......^.i..V.};T.w#.GF(~.kcL..HP..h.....Y...J\..........#60...n.....Kx.{!Vx......?J.$..F.`)5yLl..).6...,.T&EM.5...y..- ...........M,.R...%..l.].$v.,..d.B....5.=m... D".f..?..Qz.Rk.k..ZS..f...(....)8.....0f.........&..J....nV.C.I.bj..>Mz>..a..../N+.....0....w...6.U4......ap8.. ...u..kQh.._.sUYa.....?..1.A.E.m...3.A.....i.../....}..`.A.....h...U.0....*.r]....eocH....54 Signature Algorithm: md5WithRSAEncryption 34:d3:75:cd:a0:f2:3e:64:60:00:05:88:8d:4b:a2:e6:75:33: ca:37:cc:1a:93:8a:48:73:72:ed:6e:df:e3:40:f9:27:2f:ce: 16:f7:43:83:df:cb:16:54:6f:d4:2a:d9:af:a4:30:4d:99:23: 94:60:95:3d:ed:17:27:d2:cc:de:42:d1:b4:df:51:e7:63:10: e5:52:5f:f0:b8:2b:be:bd:3c:e2:98:b4:2a:ec:5a:70:5e:05: 03:69:aa:d7:48:ea:d2:4f:09:70:99:df:fe:98:04:74:af:e7: 31:67:33:4a:7e:27:8c:8d:88:e9:15:02:3b:0b:b9:e1:98:e2: 7f:ed:8b:31:27:80:f3:27:78:53:80:da:5c:4b:86:68:84:63: c6:f5:f8:40:61:b4:f8:95:dd:19:f9:83:21:fc:18:bb:82:87: b0:ba:5b:70:5c:92:56:ce:bd:f7:f6:04:08:bc:76:5b:d7:0e: d2:e5:cb:fa:f2:f1:41:6d:6e:c7:21:3f:4f:b0:6d:56:8a:07: 5e:e1:73:0d:e0:23:54:e7:ef:0b:b8:d7:86:7f:4b:43:07:98: 3b:db:db:7c:30:6c:06:15:d5:c3:bc:03:17:ee:71:d9:df:9d: de:47:47:35:09:5b:89:4c:68:3c:9d:fa:1c:9c:a8:bb:55:b8: 39:90:8d:74 | |||||||
-- AlessioGianelle - 2011-07-01
|