Difference: Task20812 (22 vs. 23)

Collection of 1000 nodes

• Collection ID: https://devel11.cnaf.infn.it:9000/Wty8qDpctah3lazxG6iViA
• Nodes are submitted to a production environment (397 CEs):
  • 436 jobs are executed on a LCG CE
  • 564 jobs are executed in a CREAM CE

• • 971: Done (Success)
  • 29: Aborted

Case B: testing environment

• Collection ID: https://cream-44.pd.infn.it:9000/BJI8Q7RSNC050nCDqYHong
• Nodes are submitted to a testing environment (33 CEs):
  • 147 jobs are executed on the single LCG CE
  • 853 jobs are executed in a CREAM CE
• Final Status:
  • 995: Done (Success)
  • 5: Aborted

[ale@cream-12 UI]$ glite-wms-job-submit -a -c etc/wmp_cream-44.conf 82687.jdl

[ale@cream-12 UI]$ glite-wms-job-status https://cream-44.pd.infn.it:9000/50rMqKVPm3Qe1cYH1L3Wmw

https://cream-44.pd.infn.it:9000/50rMqKVPm3Qe1cYH1L3Wmw

Connecting to the service https://cream-44.pd.infn.it:7443/glite_wms_wmproxy_server

[root@devel11 ~]# grep ROLE /etc/glite-wms/glite_wms_wmproxy.gacl 
[root@devel11 ~]#

Bug #84155: Proxy renewal fails in ICE FIXED

[ale@cream-12 UI]$ cat test.jdl 

[ale@cream-12 UI]$  voms-proxy-init -voms dteam  --valid 00:15

Connecting to the service https://devel11.cnaf.infn.it:7443/glite_wms_wmproxy_server

[ale@cream-12 UI]$ glite-wms-job-info -p https://devel11.cnaf.infn.it:9000/tfn-DjwWIGZOg9zUvXs5CQ

[ale@cream-12 UI]$ glite-wms-job-status https://devel11.cnaf.infn.it:9000/tfn-DjwWIGZOg9zUvXs5CQ

[root@devel11 persist_dir]# openssl x509 -noout -text -in /var/ice/persist_dir/2A9DAF04C398C21D6ADF7E884BC192ED95AF554C.betterproxy 
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1310476725 (0x4e1c49b5)
        Signature Algorithm: md5WithRSAEncryption
        Issuer: C=IT, O=INFN, OU=Personal Certificate, L=Padova, CN=Alessio Gianelle, CN=proxy
        Validity
            Not Before: Jul 12 13:13:45 2011 GMT
            Not After : Jul 12 13:29:45 2011 GMT
        Subject: C=IT, O=INFN, OU=Personal Certificate, L=Padova, CN=Alessio Gianelle, CN=proxy, CN=proxy
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
            RSA Public Key: (512 bit)
                Modulus (512 bit):
                    00:b7:78:00:10:30:78:4e:82:49:87:25:9d:65:51:
                    ff:4a:4e:5b:37:9e:78:05:84:eb:74:af:ae:11:bb:
                    60:00:f6:17:80:e7:e6:5d:1d:09:61:fd:71:59:64:
                    bc:10:34:65:54:f8:69:12:c2:61:78:be:29:09:2d:
                    17:ae:9c:7d:0f
                Exponent: 65537 (0x10001)
    Signature Algorithm: md5WithRSAEncryption
        a9:44:e7:b7:a5:9d:be:e3:65:cf:68:fa:ce:8d:b7:b2:44:30:
        31:a1:5a:f6:ee:fa:dc:1c:08:7b:be:6e:af:a7:f9:7f:d9:7f:
        6f:3f:44:40:a7:2b:68:86:b7:c6:bd:35:49:49:4a:3a:db:a7:
        26:4f:d4:93:b6:10:0d:55:58:e3:82:d4:92:44:b9:b0:ac:9d:
        5c:6a:a2:45:c0:61:5f:e4:c1:5a:af:9e:61:60:fb:62:14:9f:
        b6:c2:d1:ed:2c:6c:c8:9c:1b:3b:e6:c1:d9:8e:a0:4c:31:64:
        9f:52:fe:ad:81:04:4b:e5:6b:d1:95:ae:f9:28:5f:53:73:57:
        5e:97

[root@devel11 persist_dir]# su - glite
[glite@devel11 ~]$ export X509_USER_CERT=/var/wms.proxy; export X509_USER_KEY=/var/wms.proxy; /usr/bin/glite-wms-ice-proxy-renew -s myproxy.cnaf.infn.it -p /var/ice/persist_dir/2A9DAF04C398C21D6ADF7E884BC192ED95AF554C.betterproxy -o /var/ice/persist_dir/2A9DAF04C398C21D6ADF7E884BC192ED95AF554C.betterproxy.renewed
/var/ice/persist_dir/2A9DAF04C398C21D6ADF7E884BC192ED95AF554C.betterproxy.voms.xX3leH
[glite@devel11 ~]$ ls -l /var/ice/persist_dir/
total 68
-rw-r--r-- 1 glite glite  9767 Jul 12 15:28 2A9DAF04C398C21D6ADF7E884BC192ED95AF554C.betterproxy
-rw------- 1 glite glite  9767 Jul 12 15:29 2A9DAF04C398C21D6ADF7E884BC192ED95AF554C.betterproxy.renewed
-rw-r--r-- 1 glite glite 44032 Jul 12 15:28 ice.db

Check the validity of the new proxy:

[root@devel11 persist_dir]# openssl x509 -noout -text -in /var/ice/persist_dir/2A9DAF04C398C21D6ADF7E884BC192ED95AF554C.betterproxy.renewed 
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19275 (0x4b4b)
        Signature Algorithm: md5WithRSAEncryption
        Issuer: C=IT, O=INFN, OU=Personal Certificate, L=Padova, CN=Alessio Gianelle, CN=proxy, CN=proxy, CN=proxy
        Validity
            Not Before: Jul 12 13:24:29 2011 GMT
            Not After : Jul 12 23:29:36 2011 GMT
        Subject: C=IT, O=INFN, OU=Personal Certificate, L=Padova, CN=Alessio Gianelle, CN=proxy, CN=proxy, CN=proxy, CN=proxy
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
            RSA Public Key: (512 bit)
                Modulus (512 bit):
                    00:ca:23:d8:f0:c3:c1:61:33:4b:05:62:42:2d:72:
                    22:94:9f:d7:da:a5:38:27:45:b8:49:cb:b9:89:dc:
                    a0:ad:55:18:1e:1e:fe:cb:ce:89:73:18:65:8e:38:
                    ad:cf:ad:f4:b4:e9:cb:d1:82:2d:1f:e9:b8:bf:40:
                    d9:43:bb:aa:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, E-mail Protection
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Data Encipherment
            1.3.6.1.4.1.8005.100.100.5: 
0...U.          0..F0..B0..>0..&...0s.q0k.i0g1.0...U....IT1
..U....Padova1.0...U....Alessio Gianelle..KK.]0[.Y0W1.0...U....GR1.0...U.
.
.......+...}.Fq..=].....voms.hellasgrid.gr0
0"..20110712132928Z..20110713012928Z0..0...
+.....Edd.1s0q.". dteam://voms.hellasgrid.gr:150040K. /dteam/Role=NULL/Capability=NULL.'/dteam/NGI_IT/Role=NULL/Capability=NULL0...0..
+.....Edd...0.0.0...U.8....0...U.#..0....y...^.....f.b....V.0..;.
+.....Edd
.....0c1.0...U....GR1.0...U.q0
.
111008093327Z0W1.0...U....GR1.0...U.uthorities1.0...U....HellasGrid CA 20060..
.
..........0..1.0...U....voms.hellasgrid.gr0.."0
.......l{!.&?.}7...{...N.....c.....f....|........_.Q..7%L4......e.nn.....].>./.i'.A>.pb..s.rw#M...ac.6..R..7=3.l..'N.1...n..).../C.|g.21...l.=J
0.R..=.N=..e.~....a'[..eN..(F7..N..T...h.....*..Ph..$...m...jPl..uo.OD*..](.2+#.%.?...!Z..s/.=.8.......9a]8yj..l..............0...0...U.......0.0...U...........0...U.......y...^.....f.b....V.0....U.#...0.......]..:.l.C..=O<.f^&.l.j0h1.0...U....GR1.0...U.
.
HellasGrid1"0 ..U....Certification Authorities1 0...U....HellasGrid Root CA 2006...0%..U....0...hellasgrid-ca@grid.auth.gr0...U....0...voms.hellasgrid.gr0...+......E.....0c0a..+........Uhttp://www.grid.auth.gr/pki/hellasgrid-ca-2006/documents/cps/HellasGrid-CA-CP-CPS.pdf0H..U...A0?0=.;.9.7http://crl.grid.auth.gr/...........V....~..!Z..5.........Y...4...[.m.>&......*..........R..i5.7.u..~>;M.v....T.(..jk
......t...uJ....+..{CD...ec.q...-..L....BS..cAcP.)/[......^.i..V.};T.w#.GF(~.kcL..HP..h.....Y...J\..........#60...n.....Kx.{!Vx......?J.$..F.`)5yLl..).6...,.T&EM.5...y..-
...........M,.R...%..l.].$v.,..d.B....5.=m...
D".f..?..Qz.Rk.k..ZS..f...(....)8.....0f.........&..J....nV.C.I.bj..>Mz>..a..../N+.....0....w...6.U4......ap8.. ...u..kQh.._.sUYa.....?..1.A.E.m...3.A.....i.../....}..`.A.....h...U.0....*.r]....eocH....54
    Signature Algorithm: md5WithRSAEncryption
        34:d3:75:cd:a0:f2:3e:64:60:00:05:88:8d:4b:a2:e6:75:33:
        ca:37:cc:1a:93:8a:48:73:72:ed:6e:df:e3:40:f9:27:2f:ce:
        16:f7:43:83:df:cb:16:54:6f:d4:2a:d9:af:a4:30:4d:99:23:
        94:60:95:3d:ed:17:27:d2:cc:de:42:d1:b4:df:51:e7:63:10:
        e5:52:5f:f0:b8:2b:be:bd:3c:e2:98:b4:2a:ec:5a:70:5e:05:
        03:69:aa:d7:48:ea:d2:4f:09:70:99:df:fe:98:04:74:af:e7:
        31:67:33:4a:7e:27:8c:8d:88:e9:15:02:3b:0b:b9:e1:98:e2:
        7f:ed:8b:31:27:80:f3:27:78:53:80:da:5c:4b:86:68:84:63:
        c6:f5:f8:40:61:b4:f8:95:dd:19:f9:83:21:fc:18:bb:82:87:
        b0:ba:5b:70:5c:92:56:ce:bd:f7:f6:04:08:bc:76:5b:d7:0e:
        d2:e5:cb:fa:f2:f1:41:6d:6e:c7:21:3f:4f:b0:6d:56:8a:07:
        5e:e1:73:0d:e0:23:54:e7:ef:0b:b8:d7:86:7f:4b:43:07:98:
        3b:db:db:7c:30:6c:06:15:d5:c3:bc:03:17:ee:71:d9:df:9d:
        de:47:47:35:09:5b:89:4c:68:3c:9d:fa:1c:9c:a8:bb:55:b8:
        39:90:8d:74

-- AlessioGianelle - 2011-07-01