Re: [Condor-users] MyProxy doesn't refresh credentials for gt4 grid_type

[Emir Imamagic <eimamagi@xxxxxxx>]

Hello,

thank you for your reply.

Still, a nice thing is that Condor checks for refreshed proxy and 
sends refresh to Delegation Service. So, I managed to make relatively 
easy solution with cron script :)

Another thing, why do you use retrieveable MyProxy certificates?
If you use renewable certificates, refresh can be achieved without 
passphrase. Authentication is then achieved by using existing proxy (if 
it's valid). Resonable security level is achieved by setting renewable 
policy to allow only a specific user to renew proxy.
This solution is actually recommended in MyProxy documentation 
(http://grid.ncsa.uiuc.edu/myproxy/renew.html)

Also, when can we expect to see myproxy support for gt4 jobs? It doesn't 
seem like a difficult thing to implement, because the whole refresh 
mechanism already exist.

And the last question, is there an implementation plan for C version of 
GT4 gahp?

Thanks in advance,
emir

On Mon, 5 Dec 2005, Jaime Frey wrote:

> On Dec 3, 2005, at 2:02 PM, Emir Imamagic wrote:
>
> > I'm using Condor 6.7.13 and Globus Toolkit 4.0.1 (both ws and pre-
> > ws). It
> > seems that MyProxy refresh doesn't work with gt4 grid type. I
> > increased
> > debug level to all, but didn't see anything special. GT4 gahp probes
> > Globus container every 5 minutes (changes state to PROBE_JOBMANAGER
> > and
> > back to SUBMITTED).
> > Once the proxy expires I see messages:
> >    proxy is about to expire
> >    doEvaluateState called: gmState GM_PROXY_EXPIRED, globusState 2
> > and after that every 10 minutes:
> >    doEvaluateState called: gmState GM_PROXY_EXPIRED, globusState 2
> >    refresh_credentials(<job_address>) failed!
> >
> > This behaviour is absolutely the same in a case when I don't define
> > MyProxy parameters.
> >
> >
> > I tried submitting same jobs as gt2 types and it worked perfectly.
> > In the
> > log there was a line:
> > myproxy-get-delegation for proxy /tmp/proxy exited successfully.
>
> Proxy refresh from MyProxy only works with gt2 jobs at present. I'll
> fix the documentation, which is incorrect. We're sorry for the
> confusion.
>
> +----------------------------------+---------------------------------+
> |            Jaime Frey            |  Public Split on Whether        |
> |        jfrey@xxxxxxxxxxx         |  Bush Is a Divider              |
> |  http://www.cs.wisc.edu/~jfrey/  |         -- CNN Scrolling Banner |
> +----------------------------------+---------------------------------+
>
>
> _______________________________________________
> Condor-users mailing list
> Condor-users@xxxxxxxxxxx
> https://lists.cs.wisc.edu/mailman/listinfo/condor-users