[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [HTCondor-users] Simulating HTCondor's delegation of a proxy (fwd)



On Tue, Sep 17, 2013 at 10:59:37AM -0500, Zachary Miller wrote:
> > My question.. is there any way to delegate the proxy using the same method
> >  that condor does so as to reliably reproduce such a proxy without having
> > to steal it off of a worker node from a running job every time?
> 
> Completely outside of HTCondor, you should be able to use "grid-proxy-init",
> using your original proxy as the cert and specifying a new proxy as the output:
> 
> 	grid-proxy-init -cert /tmp/x509up_uZKM -key /tmp/x509up_uZKM -out /tmp/x509up_uZKM_double

I should add:  Also use the "-limited" flag since HTCondor creates limited
proxies by default, unless you've set DELEGATE_FULL_JOB_GSI_CREDENTIALS.


Cheers,
-zach


> And then check it with:
> 	grid-proxy-info -file /tmp/x509up_uZKM_double
> 
> 
> Cheers,
> -zach
> 
> _______________________________________________
> HTCondor-users mailing list
> To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
> subject: Unsubscribe
> You can also unsubscribe by visiting
> https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users
> 
> The archives can be found at:
> https://lists.cs.wisc.edu/archive/htcondor-users/