Difference: Task21572 (1 vs. 2)

Revision 12011-07-18 - AlessioGianelle

Line: 1 to 1
Added:
>
>
META TOPICPARENT name="WebHome"

WMS test report

Summary

  • Component: WMS 3.3.1-1

  • ETICS Subsystem Configuration Name: emi-wms_R_3_3_3_0

  • VCS Tag:

  • EMI Major Release: EMI 1 (Kebnekaise)

  • Platform: sl5 epel

  • Build reports:

  • Repository:

  • Certification report (TBD)

  • Author: Alessio Gianelle

  • Outcome: In certification

Clean installation

Update

Check Bugs (Regression tests)

Bug #84155: Proxy renewal fails in ICE FIXED

Take a long jdl where MyProxyServer attribute is set and that require a cream CE as destination; like this one:

[ale@cream-12 UI]$ cat test.jdl 
[
Executable = "/bin/sleep" ;
Stdoutput = "env.out" ;
StdError =  "env.err" ;
InputSandbox = { "/home/ale/UI/data/pippo" };
OutputSandbox = { "env.out" ,"env.err"} ;
Arguments="900";
Environment={"VARIABLE=test"};
usertags = [ exe = "env" ];
FuzzyRank = true;
ShallowRetryCount = 3;
RetryCount = 2;
Myproxyserver="myproxy.cnaf.infn.it";
requirements = RegExp("/cream-",other.GlueCEUniqueID);
]

Submit it with a shorter proxy:

[ale@cream-12 UI]$  voms-proxy-init -voms dteam  --valid 00:15
Your identity: /C=IT/O=INFN/OU=Personal Certificate/L=Padova/CN=Alessio Gianelle
Creating temporary proxy .............................................. Done
Contacting  voms.hellasgrid.gr:15004 [/C=GR/O=HellasGrid/OU=hellasgrid.gr/CN=voms.hellasgrid.gr] "dteam" Done
Creating proxy ......................................................................................................................... Done

Your proxy is valid until Tue Jul 12 15:30:22 2011


[ale@cream-12 UI]$ glite-wms-job-submit -a -c etc/wmp_devel11.conf test.jdl

Connecting to the service https://devel11.cnaf.infn.it:7443/glite_wms_wmproxy_server


====================== glite-wms-job-submit Success ======================

The job has been successfully submitted to the WMProxy
Your job identifier is:

https://devel11.cnaf.infn.it:9000/tfn-DjwWIGZOg9zUvXs5CQ

==========================================================================

Check that its proxy is valid for no more that 15 minutes:

[ale@cream-12 UI]$ glite-wms-job-info -p https://devel11.cnaf.infn.it:9000/tfn-DjwWIGZOg9zUvXs5CQ

Connecting to the service https://devel11.cnaf.infn.it:7443/glite_wms_wmproxy_server


======================= glite-wms-job-info Success =======================

Your proxy delegated to the endpoint https://devel11.cnaf.infn.it:7443/glite_wms_wmproxy_server
 for the job https://devel11.cnaf.infn.it:9000/tfn-DjwWIGZOg9zUvXs5CQ :
Subject     : /C=IT/O=INFN/OU=Personal Certificate/L=Padova/CN=Alessio Gianelle/CN=proxy/CN=proxy
Issuer      : /C=IT/O=INFN/OU=Personal Certificate/L=Padova/CN=Alessio Gianelle/CN=proxy
Identity    : /C=IT/O=INFN/OU=Personal Certificate/L=Padova/CN=Alessio Gianelle/CN=proxy
Type        : proxy
Strength    : 512
StartDate   : 12 July 2011 - 15:13:45
Expiration  : 12 July 2011 - 15:29:45
Timeleft    : 07 min 17 sec 
=== VO dteam extension information ===
VO          : dteam
Subject     : /C=IT/O=INFN/OU=Personal Certificate/L=Padova/CN=Alessio Gianelle
Issuer      : /C=GR/O=HellasGrid/OU=hellasgrid.gr/CN=voms.hellasgrid.gr
URI         : voms.hellasgrid.gr:15004
Attribute   : /dteam/Role=NULL/Capability=NULL
Attribute   : /dteam/NGI_IT/Role=NULL/Capability=NULL
StartTime   : 12 July 2011 - 15:15:22
Expiration  : 12 July 2011 - 15:30:22
Timeleft    : 07 min 54 sec 

Wait until it finishes successfully:

[ale@cream-12 UI]$ glite-wms-job-status https://devel11.cnaf.infn.it:9000/tfn-DjwWIGZOg9zUvXs5CQ


======================= glite-wms-job-status Success =====================
BOOKKEEPING INFORMATION:

Status info for the Job : https://devel11.cnaf.infn.it:9000/tfn-DjwWIGZOg9zUvXs5CQ
Current Status:     Done (Success)
Logged Reason(s):
    - job completed
    - Job Terminated Successfully
Exit code:          0
Status Reason:      Job Terminated Successfully
Destination:        grid01.erciyes.edu.tr:8443/cream-pbs-dteam
Submitted:          Tue Jul 12 15:18:46 2011 CEST
==========================================================================

We can also check directly the command on the WMS. First of all find the proxy associated with the job in the persist directory of ice:

[root@devel11 persist_dir]# openssl x509 -noout -text -in /var/ice/persist_dir/2A9DAF04C398C21D6ADF7E884BC192ED95AF554C.betterproxy 
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1310476725 (0x4e1c49b5)
        Signature Algorithm: md5WithRSAEncryption
        Issuer: C=IT, O=INFN, OU=Personal Certificate, L=Padova, CN=Alessio Gianelle, CN=proxy
        Validity
            Not Before: Jul 12 13:13:45 2011 GMT
            Not After : Jul 12 13:29:45 2011 GMT
        Subject: C=IT, O=INFN, OU=Personal Certificate, L=Padova, CN=Alessio Gianelle, CN=proxy, CN=proxy
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
            RSA Public Key: (512 bit)
                Modulus (512 bit):
                    00:b7:78:00:10:30:78:4e:82:49:87:25:9d:65:51:
                    ff:4a:4e:5b:37:9e:78:05:84:eb:74:af:ae:11:bb:
                    60:00:f6:17:80:e7:e6:5d:1d:09:61:fd:71:59:64:
                    bc:10:34:65:54:f8:69:12:c2:61:78:be:29:09:2d:
                    17:ae:9c:7d:0f
                Exponent: 65537 (0x10001)
    Signature Algorithm: md5WithRSAEncryption
        a9:44:e7:b7:a5:9d:be:e3:65:cf:68:fa:ce:8d:b7:b2:44:30:
        31:a1:5a:f6:ee:fa:dc:1c:08:7b:be:6e:af:a7:f9:7f:d9:7f:
        6f:3f:44:40:a7:2b:68:86:b7:c6:bd:35:49:49:4a:3a:db:a7:
        26:4f:d4:93:b6:10:0d:55:58:e3:82:d4:92:44:b9:b0:ac:9d:
        5c:6a:a2:45:c0:61:5f:e4:c1:5a:af:9e:61:60:fb:62:14:9f:
        b6:c2:d1:ed:2c:6c:c8:9c:1b:3b:e6:c1:d9:8e:a0:4c:31:64:
        9f:52:fe:ad:81:04:4b:e5:6b:d1:95:ae:f9:28:5f:53:73:57:
        5e:97

Then logged as user glite and execute this command: export X509_USER_CERT=/var/wms.proxy; export X509_USER_KEY=/var/wms.proxy; /usr/bin/glite-wms-ice-proxy-renew -s myproxy.cnaf.infn.it -p /var/ice/persist_dir/<user proxy>.betterproxy -o <output file> where /var/ice/persist_dir/<user proxy>.betterproxy is the proxy associate to the job and in <output file> you should find the renewed proxy:

[root@devel11 persist_dir]# su - glite
[glite@devel11 ~]$ export X509_USER_CERT=/var/wms.proxy; export X509_USER_KEY=/var/wms.proxy; /usr/bin/glite-wms-ice-proxy-renew -s myproxy.cnaf.infn.it -p /var/ice/persist_dir/2A9DAF04C398C21D6ADF7E884BC192ED95AF554C.betterproxy -o /var/ice/persist_dir/2A9DAF04C398C21D6ADF7E884BC192ED95AF554C.betterproxy.renewed
/var/ice/persist_dir/2A9DAF04C398C21D6ADF7E884BC192ED95AF554C.betterproxy.voms.xX3leH
[glite@devel11 ~]$ ls -l /var/ice/persist_dir/
total 68
-rw-r--r-- 1 glite glite  9767 Jul 12 15:28 2A9DAF04C398C21D6ADF7E884BC192ED95AF554C.betterproxy
-rw------- 1 glite glite  9767 Jul 12 15:29 2A9DAF04C398C21D6ADF7E884BC192ED95AF554C.betterproxy.renewed
-rw-r--r-- 1 glite glite 44032 Jul 12 15:28 ice.db

Check the validity of the new proxy:

[root@devel11 persist_dir]# openssl x509 -noout -text -in /var/ice/persist_dir/2A9DAF04C398C21D6ADF7E884BC192ED95AF554C.betterproxy.renewed 
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19275 (0x4b4b)
        Signature Algorithm: md5WithRSAEncryption
        Issuer: C=IT, O=INFN, OU=Personal Certificate, L=Padova, CN=Alessio Gianelle, CN=proxy, CN=proxy, CN=proxy
        Validity
            Not Before: Jul 12 13:24:29 2011 GMT
            Not After : Jul 12 23:29:36 2011 GMT
        Subject: C=IT, O=INFN, OU=Personal Certificate, L=Padova, CN=Alessio Gianelle, CN=proxy, CN=proxy, CN=proxy, CN=proxy
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
            RSA Public Key: (512 bit)
                Modulus (512 bit):
                    00:ca:23:d8:f0:c3:c1:61:33:4b:05:62:42:2d:72:
                    22:94:9f:d7:da:a5:38:27:45:b8:49:cb:b9:89:dc:
                    a0:ad:55:18:1e:1e:fe:cb:ce:89:73:18:65:8e:38:
                    ad:cf:ad:f4:b4:e9:cb:d1:82:2d:1f:e9:b8:bf:40:
                    d9:43:bb:aa:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, E-mail Protection
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Data Encipherment
            1.3.6.1.4.1.8005.100.100.5: 
0...U.          0..F0..B0..>0..&...0s.q0k.i0g1.0...U....IT1
..U....Padova1.0...U....Alessio Gianelle..KK.]0[.Y0W1.0...U....GR1.0...U.
.
.......+...}.Fq..=].....voms.hellasgrid.gr0
0"..20110712132928Z..20110713012928Z0..0...
+.....Edd.1s0q.". dteam://voms.hellasgrid.gr:150040K. /dteam/Role=NULL/Capability=NULL.'/dteam/NGI_IT/Role=NULL/Capability=NULL0...0..
+.....Edd...0.0.0...U.8....0...U.#..0....y...^.....f.b....V.0..;.
+.....Edd
.....0c1.0...U....GR1.0...U.q0
.
111008093327Z0W1.0...U....GR1.0...U.uthorities1.0...U....HellasGrid CA 20060..
.
..........0..1.0...U....voms.hellasgrid.gr0.."0
.......l{!.&?.}7...{...N.....c.....f....|........_.Q..7%L4......e.nn.....].>./.i'.A>.pb..s.rw#M...ac.6..R..7=3.l..'N.1...n..).../C.|g.21...l.=J
0.R..=.N=..e.~....a'[..eN..(F7..N..T...h.....*..Ph..$...m...jPl..uo.OD*..](.2+#.%.?...!Z..s/.=.8.......9a]8yj..l..............0...0...U.......0.0...U...........0...U.......y...^.....f.b....V.0....U.#...0.......]..:.l.C..=O<.f^&.l.j0h1.0...U....GR1.0...U.
.
HellasGrid1"0 ..U....Certification Authorities1 0...U....HellasGrid Root CA 2006...0%..U....0...hellasgrid-ca@grid.auth.gr0...U....0...voms.hellasgrid.gr0...+......E.....0c0a..+........Uhttp://www.grid.auth.gr/pki/hellasgrid-ca-2006/documents/cps/HellasGrid-CA-CP-CPS.pdf0H..U...A0?0=.;.9.7http://crl.grid.auth.gr/...........V....~..!Z..5.........Y...4...[.m.>&......*..........R..i5.7.u..~>;M.v....T.(..jk
......t...uJ....+..{CD...ec.q...-..L....BS..cAcP.)/[......^.i..V.};T.w#.GF(~.kcL..HP..h.....Y...J\..........#60...n.....Kx.{!Vx......?J.$..F.`)5yLl..).6...,.T&EM.5...y..-
...........M,.R...%..l.].$v.,..d.B....5.=m...
D".f..?..Qz.Rk.k..ZS..f...(....)8.....0f.........&..J....nV.C.I.bj..>Mz>..a..../N+.....0....w...6.U4......ap8.. ...u..kQh.._.sUYa.....?..1.A.E.m...3.A.....i.../....}..`.A.....h...U.0....*.r]....eocH....54
    Signature Algorithm: md5WithRSAEncryption
        34:d3:75:cd:a0:f2:3e:64:60:00:05:88:8d:4b:a2:e6:75:33:
        ca:37:cc:1a:93:8a:48:73:72:ed:6e:df:e3:40:f9:27:2f:ce:
        16:f7:43:83:df:cb:16:54:6f:d4:2a:d9:af:a4:30:4d:99:23:
        94:60:95:3d:ed:17:27:d2:cc:de:42:d1:b4:df:51:e7:63:10:
        e5:52:5f:f0:b8:2b:be:bd:3c:e2:98:b4:2a:ec:5a:70:5e:05:
        03:69:aa:d7:48:ea:d2:4f:09:70:99:df:fe:98:04:74:af:e7:
        31:67:33:4a:7e:27:8c:8d:88:e9:15:02:3b:0b:b9:e1:98:e2:
        7f:ed:8b:31:27:80:f3:27:78:53:80:da:5c:4b:86:68:84:63:
        c6:f5:f8:40:61:b4:f8:95:dd:19:f9:83:21:fc:18:bb:82:87:
        b0:ba:5b:70:5c:92:56:ce:bd:f7:f6:04:08:bc:76:5b:d7:0e:
        d2:e5:cb:fa:f2:f1:41:6d:6e:c7:21:3f:4f:b0:6d:56:8a:07:
        5e:e1:73:0d:e0:23:54:e7:ef:0b:b8:d7:86:7f:4b:43:07:98:
        3b:db:db:7c:30:6c:06:15:d5:c3:bc:03:17:ee:71:d9:df:9d:
        de:47:47:35:09:5b:89:4c:68:3c:9d:fa:1c:9c:a8:bb:55:b8:
        39:90:8d:74
 
This site is powered by the TWiki collaboration platformCopyright © 2008-2020 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback