EGEE Web>SA3>EGEECertification>SA3Testing>CertificationReportForPatch4828 (2011-06-24, ZdenekSustr)

Certification Report for Patch #4828 (Proxy renewal 1.3.21 for glite 3.1)

Origins

Build Report	http://etics-repository.cern.ch/repository/reports/id/7a22cf72-15ef-4893-869e-6ea55d320962/slc4_ia32_gcc346/-/reports/index.html
YUM repo file	http://etics-repository.cern.ch/repository/pm/registered/repomd/id/7a22cf72-15ef-4893-869e-6ea55d320962/slc4_ia32_gcc346/etics-registered-build-by-id-protect.repo
Patch	https://savannah.cern.ch/patch/?4828
Task	—
Component	`org.glite.security.proxyrenewal`
Status	Certified
Duration	12 hrs.
Previous Report	—

Clean installation

Environment

* Clean SL4 installation according to gLite guidelines (CA certificates, ...)

yum install -y ca_policy_igtf-mics ca_policy_igtf-slcs

Process

Install packages:


cd /etc/yum.repos.d
wget http://etics-repository.cern.ch/repository/pm/registered/repomd/id/7a22cf72-15ef-4893-869e-6ea55d320962/slc4_ia32_gcc346/etics-registered-build-by-id-protect.repo
yum -y install glite-security-proxyrenewal

useradd -u 155 glite
export GLITE_USER=glite
export GLITE_HOST_KEY=/etc/grid-security/hostkey.pem
export GLITE_HOST_CERT=/etc/grid-security/hostcert.pem

wget http://grid-deployment.web.cern.ch/grid-deployment/glite/repos/3.1/glite-PX.repo
yum install glite-PX

/opt/glite/etc/init.d/glite-proxy-renewald start

Note: ProxyRenewal does not require configuration by YAIM. YAIM is not used for this test. The test routine shown bellow can start from here immediately.

Full output of the installation

[root@forkys-sl SLC4/32 ~]# cd /etc/yum.repos.d
[root@forkys-sl SLC4/32 yum.repos.d]# wget http://etics-repository.cern.ch/repository/pm/registered/repomd/id/7a22cf72-15ef-4893-869e-6ea55d320962/slc4_ia32_gcc346/etics-registered-build-by-id-protect.repo
--12:42:52--  http://etics-repository.cern.ch/repository/pm/registered/repomd/id/7a22cf72-15ef-4893-869e-6ea55d320962/slc4_ia32_gcc346/etics-registered-build-by-id-protect.repo
           => `etics-registered-build-by-id-protect.repo'
Resolving etics-repository.cern.ch... 128.142.130.60
Connecting to etics-repository.cern.ch|128.142.130.60|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 900

100%[=========================================================================================>] 900           --.--K/s             

12:42:52 (47.68 MB/s) - `etics-registered-build-by-id-protect.repo' saved [900/900]

[root@forkys-sl SLC4/32 yum.repos.d]# yum -y install glite-security-proxyrenewal
Loading "kernel-module" plugin
Setting up Install Process
Setting up repositories
ETICS-registered-build-7a 100% |=========================|  764 B    00:00     
Reading repository metadata in from local files
primary.xml.gz            100% |=========================| 4.7 kB    00:00     
ETICS-regi: ################################################## 8/8
Added 8 new packages, deleted 0 old in 0.03 seconds
Parsing package install arguments
Resolving Dependencies
--> Populating transaction set with selected packages. Please wait.
---> Downloading header for glite-security-proxyrenewal to pack into transaction set.
glite-security-proxyrenew 100% |=========================| 7.0 kB    00:00     
---> Package glite-security-proxyrenewal.i386 0:1.3.21-2.slc4 set to be updated
--> Running transaction check
--> Processing Dependency: glite-security-voms-api-c >= 1.9.10 for package: glite-security-proxyrenewal
--> Processing Dependency: libmyproxy_gcc32dbg.so.0 for package: glite-security-proxyrenewal
--> Processing Dependency: myproxy >= VDT1.6.1x86_rhas_4 for package: glite-security-proxyrenewal
--> Restarting Dependency Resolution with new changes.
--> Populating transaction set with selected packages. Please wait.
---> Downloading header for myproxy to pack into transaction set.
myproxy-VDT1.6.1x86_rhas_4-7.i386.rpm                            24 kB 00:00 
---> Package myproxy.i386 0:VDT1.6.1x86_rhas_4-7 set to be updated
---> Downloading header for glite-security-voms-api-c to pack into transaction set.
glite-security-voms-api-c 100% |=========================| 4.7 kB    00:00     
---> Package glite-security-voms-api-c.i386 0:1.9.10-14.slc4 set to be updated
--> Running transaction check
Beginning Kernel Module Plugin
Finished Kernel Module Plugin

Dependencies Resolved

=============================================================================
 Package                 Arch       Version          Repository        Size 
=============================================================================
Installing:
 glite-security-proxyrenewal  i386       1.3.21-2.slc4    ETICS-registered-build-7a22cf72-15ef-4893-869e-6ea55d320962-slc4_ia32_gcc346   91 k
Installing for dependencies:
 glite-security-voms-api-c  i386       1.9.10-14.slc4   ETICS-registered-build-7a22cf72-15ef-4893-869e-6ea55d320962-slc4_ia32_gcc346  4.0 M
 myproxy                 i386       VDT1.6.1x86_rhas_4-7  ETICS-registered-build-7a22cf72-15ef-4893-869e-6ea55d320962-slc4_ia32_gcc346  1.2 M

Transaction Summary
=============================================================================
Install      3 Package(s)         
Update       0 Package(s)         
Remove       0 Package(s)         
Total download size: 5.2 M
Downloading Packages:
(1/3): glite-security-proxyrenewal-1.3.21-2.slc4.i386.rpm        91 kB 00:00 
(2/3): myproxy-VDT1.6.1x86_rhas_4-7.i386.rpm                    1.2 MB 00:07 
(3/3): glite-security-voms-api-c-1.9.10-14.slc4.i386.rpm        4.0 MB 00:01 
Running Transaction Test
Finished Transaction Test
Transaction Test Succeeded
Running Transaction
  Installing: glite-security-voms-api-c    ######################### [1/3] 
  Installing: myproxy                      ######################### [2/3] 
  Installing: glite-security-proxyrenewal  ######################### [3/3] 

Installed: glite-security-proxyrenewal.i386 0:1.3.21-2.slc4
Dependency Installed: glite-security-voms-api-c.i386 0:1.9.10-14.slc4 myproxy.i386 0:VDT1.6.1x86_rhas_4-7
Complete!
[root@forkys-sl SLC4/32 yum.repos.d]# 
[root@forkys-sl SLC4/32 yum.repos.d]# useradd -u 155 glite
[root@forkys-sl SLC4/32 yum.repos.d]# export GLITE_USER=glite
[root@forkys-sl SLC4/32 yum.repos.d]# export GLITE_HOST_KEY=/etc/grid-security/hostkey.pem
[root@forkys-sl SLC4/32 yum.repos.d]# export GLITE_HOST_CERT=/etc/grid-security/hostcert.pem
[root@forkys-sl SLC4/32 yum.repos.d]# wget http://grid-deployment.web.cern.ch/grid-deployment/glite/repos/3.1/glite-PX.repo
--12:49:30--  http://grid-deployment.web.cern.ch/grid-deployment/glite/repos/3.1/glite-PX.repo
           => `glite-PX.repo'
Resolving grid-deployment.web.cern.ch... 137.138.139.19, 137.138.142.33
Connecting to grid-deployment.web.cern.ch|137.138.139.19|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 344 [text/plain]

100%[=========================================================================================>] 344           --.--K/s             

12:49:31 (4.37 MB/s) - `glite-PX.repo' saved [344/344]

[root@forkys-sl SLC4/32 yum.repos.d]# yum install glite-PX
Loading "kernel-module" plugin
Setting up Install Process
Setting up repositories
glite-PX                  100% |=========================|  951 B    00:00     
Reading repository metadata in from local files
primary.xml.gz            100% |=========================|  18 kB    00:00     
glite-PX  : ################################################## 80/80
Added 80 new packages, deleted 0 old in 0.25 seconds
Parsing package install arguments
Resolving Dependencies
--> Populating transaction set with selected packages. Please wait.
---> Downloading header for glite-PX to pack into transaction set.
glite-PX-3.1.29-0.i386.rp 100% |=========================| 2.4 kB    00:00     
---> Package glite-PX.i386 0:3.1.29-0 set to be updated
--> Running transaction check
--> Processing Dependency: gpt >= VDT1.6.0x86_rhas_4-1 for package: glite-PX
--> Processing Dependency: glite-yaim-myproxy >= 4.0.3-1 for package: glite-PX
--> Processing Dependency: bdii >= 4.0.1-4 for package: glite-PX
--> Processing Dependency: glue-schema >= 1.3.0-5 for package: glite-PX
--> Processing Dependency: glite-version >= 3.1.1-2 for package: glite-PX
--> Processing Dependency: vdt_globus_essentials >= VDT1.6.1x86_rhas_4-9 for package: glite-PX
--> Processing Dependency: glite-info-templates >= 1.0.0-11 for package: glite-PX
--> Processing Dependency: glite-info-provider-service >= 1.1.7-0 for package: glite-PX
--> Processing Dependency: myproxy-config >= 2.0.2-1 for package: glite-PX
--> Processing Dependency: glite-info-provider-release >= 1.0.0-5 for package: glite-PX
--> Processing Dependency: glite-yaim-core >= 4.0.11-2 for package: glite-PX
--> Processing Dependency: glite-info-generic >= 2.0.2-3 for package: glite-PX
--> Restarting Dependency Resolution with new changes.
--> Populating transaction set with selected packages. Please wait.
---> Downloading header for glite-yaim-myproxy to pack into transaction set.
glite-yaim-myproxy-4.0.3- 100% |=========================| 2.6 kB    00:00     
---> Package glite-yaim-myproxy.noarch 0:4.0.3-1 set to be updated
---> Downloading header for glite-info-templates to pack into transaction set.
glite-info-templates-1.0. 100% |=========================| 3.6 kB    00:00     
---> Package glite-info-templates.noarch 0:1.0.0-11 set to be updated
---> Downloading header for bdii to pack into transaction set.
bdii-4.0.1-4.noarch.rpm   100% |=========================| 4.7 kB    00:00     
---> Package bdii.noarch 0:4.0.1-4 set to be updated
---> Downloading header for glite-version to pack into transaction set.
glite-version-3.1.1-2.noa 100% |=========================| 1.8 kB    00:00     
---> Package glite-version.noarch 0:3.1.1-2 set to be updated
---> Downloading header for glite-yaim-core to pack into transaction set.
glite-yaim-core-4.0.11-2. 100% |=========================|  14 kB    00:00     
---> Package glite-yaim-core.noarch 0:4.0.11-2 set to be updated
---> Downloading header for glite-info-provider-release to pack into transaction set.
glite-info-provider-relea 100% |=========================| 1.7 kB    00:00     
---> Package glite-info-provider-release.noarch 0:1.0.0-5 set to be updated
---> Downloading header for myproxy-config to pack into transaction set.
myproxy-config-2.0.2-1.no 100% |=========================| 2.0 kB    00:00     
---> Package myproxy-config.noarch 0:2.0.2-1 set to be updated
---> Downloading header for glue-schema to pack into transaction set.
glue-schema-1.3.0-5.noarc 100% |=========================| 2.8 kB    00:00     
---> Package glue-schema.noarch 0:1.3.0-5 set to be updated
---> Downloading header for gpt to pack into transaction set.
gpt-VDT1.6.0x86_rhas_4-1. 100% |=========================|  25 kB    00:00     
---> Package gpt.i386 0:VDT1.6.0x86_rhas_4-1 set to be updated
---> Downloading header for glite-info-generic to pack into transaction set.
glite-info-generic-2.0.2- 100% |=========================| 2.9 kB    00:00     
---> Package glite-info-generic.noarch 0:2.0.2-3 set to be updated
---> Downloading header for glite-info-provider-service to pack into transaction set.
glite-info-provider-servi 100% |=========================| 6.6 kB    00:00     
---> Package glite-info-provider-service.noarch 0:1.1.7-0 set to be updated
---> Downloading header for vdt_globus_essentials to pack into transaction set.
vdt_globus_essentials-VDT 100% |=========================| 172 kB    00:00     
---> Package vdt_globus_essentials.i386 0:VDT1.6.1x86_rhas_4-9 set to be updated
--> Running transaction check
--> Processing Dependency: openldap-servers for package: bdii
--> Restarting Dependency Resolution with new changes.
--> Populating transaction set with selected packages. Please wait.
---> Downloading header for openldap-servers to pack into transaction set.
openldap-servers-2.2.13-1 100% |=========================|  40 kB    00:00     
---> Package openldap-servers.i386 0:2.2.13-12.el4_8.4 set to be updated
--> Running transaction check
Beginning Kernel Module Plugin
Finished Kernel Module Plugin

Dependencies Resolved

=============================================================================
 Package                 Arch       Version          Repository        Size 
=============================================================================
Installing:
 glite-PX                i386       3.1.29-0         glite-PX          2.9 k
Installing for dependencies:
 bdii                    noarch     4.0.1-4          glite-PX           22 k
 glite-info-generic      noarch     2.0.2-3          glite-PX          5.4 k
 glite-info-provider-release  noarch     1.0.0-5          glite-PX          2.7 k
 glite-info-provider-service  noarch     1.1.7-0          glite-PX           26 k
 glite-info-templates    noarch     1.0.0-11         glite-PX          8.2 k
 glite-version           noarch     3.1.1-2          glite-PX          4.6 k
 glite-yaim-core         noarch     4.0.11-2         glite-PX          119 k
 glite-yaim-myproxy      noarch     4.0.3-1          glite-PX          8.9 k
 glue-schema             noarch     1.3.0-5          glite-PX           30 k
 gpt                     i386       VDT1.6.0x86_rhas_4-1  glite-PX          854 k
 myproxy-config          noarch     2.0.2-1          glite-PX          4.0 k
 openldap-servers        i386       2.2.13-12.el4_8.4  sl-base           3.2 M
Updating for dependencies:
 vdt_globus_essentials   i386       VDT1.6.1x86_rhas_4-9  glite-PX           16 M

Transaction Summary
=============================================================================
Install     13 Package(s)         
Update       1 Package(s)         
Remove       0 Package(s)         
Total download size: 20 M
Is this ok [y/N]: y
Downloading Packages:
(1/14): glite-yaim-myprox 100% |=========================| 8.9 kB    00:00     
(2/14): glite-info-templa 100% |=========================| 8.2 kB    00:00     
(3/14): bdii-4.0.1-4.noar 100% |=========================|  22 kB    00:00     
(4/14): glite-version-3.1 100% |=========================| 4.6 kB    00:00     
(5/14): glite-yaim-core-4 100% |=========================| 119 kB    00:00     
(6/14): glite-info-provid 100% |=========================| 2.7 kB    00:00     
(7/14): myproxy-config-2. 100% |=========================| 4.0 kB    00:00     
(8/14): glue-schema-1.3.0 100% |=========================|  30 kB    00:00     
(9/14): gpt-VDT1.6.0x86_r 100% |=========================| 854 kB    00:00     
(10/14): glite-info-gener 100% |=========================| 5.4 kB    00:00     
(11/14): glite-info-provi 100% |=========================|  26 kB    00:00     
(12/14): glite-PX-3.1.29- 100% |=========================| 2.9 kB    00:00     
(13/14): openldap-servers 100% |=========================| 3.2 MB    00:04     
(14/14): vdt_globus_essen 100% |=========================|  16 MB    00:04     
Running Transaction Test
Finished Transaction Test
Transaction Test Succeeded
Running Transaction
  Installing: gpt                          ####################### [ 1/15] 
Using system tar and gzip programs to unpack packages
GNU tar located at /bin/tar
GNU zip located at /bin/gzip
GNU unzip located at /bin/gunzip
GNU make located at /usr/bin/make
Perl located at /usr/bin/perl
rpm located at /bin/rpm
rpmbuild located at /usr/bin/rpmbuild
RPM Package License set to GNU
RPM Package Vendor set to NCSA
RPM Package FTP Site set to ftp.ncsa.uiuc.edu
RPM Package URL set to http://www.gridpackaging.org
RPM Packager set to NCSA
RPM Prefix set to /usr/grid
GNU target platform set to i686-pc-linux-gnu
  Updating  : vdt_globus_essentials        ####################### [ 2/15] 
  Installing: glite-info-generic           ####################### [ 3/15] 
  Installing: glite-yaim-core              ####################### [ 4/15] 
  Installing: glite-yaim-myproxy           ####################### [ 5/15] 
  Installing: glite-info-templates         ####################### [ 6/15] 
  Installing: openldap-servers             ####################### [ 7/15] 
  Installing: bdii                         ####################### [ 8/15] 
  Installing: glite-info-provider-service  ####################### [ 9/15] 
  Installing: glue-schema                  ####################### [10/15] 
  Installing: myproxy-config               ####################### [11/15] 
  Installing: glite-info-provider-release  ####################### [12/15] 
  Installing: glite-version                ####################### [13/15] 
  Installing: glite-PX                     ####################### [14/15] 
  Cleanup   : vdt_globus_essentials        ####################### [15/15]

Installed: glite-PX.i386 0:3.1.29-0
Dependency Installed: bdii.noarch 0:4.0.1-4 glite-info-generic.noarch 0:2.0.2-3 glite-info-provider-release.noarch 0:1.0.0-5 glite-info-provider-service.noarch 0:1.1.7-0 glite-info-templates.noarch 0:1.0.0-11 glite-version.noarch 0:3.1.1-2 glite-yaim-core.noarch 0:4.0.11-2 glite-yaim-myproxy.noarch 0:4.0.3-1 glue-schema.noarch 0:1.3.0-5 gpt.i386 0:VDT1.6.0x86_rhas_4-1 myproxy-config.noarch 0:2.0.2-1 openldap-servers.i386 0:2.2.13-12.el4_8.4
Dependency Updated: vdt_globus_essentials.i386 0:VDT1.6.1x86_rhas_4-9
Complete!
[root@forkys-sl SLC4/32 yum.repos.d]# /opt/glite/etc/init.d/glite-proxy-renewald start
Starting ProxyRenewal Daemon: glite-proxy-renewd ... done

Tests

Functionality Tests

TestPlan	https://twiki.cern.ch/twiki/bin/view/EGEE/PXSoftwareVerificationandValidationPlan
Tests	http://glite.cvs.cern.ch/cgi-bin/glite.cgi/org.glite.testsuites.ctb/MyProxy/

Process

su - glite
export PATH=$PATH:/opt/globus/bin
JOBID=https://fake.job.id/xxx
MPSERVER=delwin.fi.muni.cz
myproxy-init -s $MPSERVER --certfile /tmp/usercred.p12 --keyfile /tmp/usercred.p12 -d -n

voms-proxy-init -valid 0:40 -voms voce -key /tmp/usercred.p12 -cert /tmp/usercred.p12 -vomses /etc/vomses
ORIG_PROXY=`voms-proxy-info | grep -E "^path" | sed 's/^path\s*:\s*//'`
REGISTERED_PROXY=`glite-proxy-renew -s $MPSERVER -f $ORIG_PROXY -j $JOBID start`
printf "\tProxy:\t$ORIG_PROXY\n\tRenew:\t$REGISTERED_PROXY\n"; \
printf "Registered proxy -- "; \
voms-proxy-info -file $REGISTERED_PROXY | grep timeleft; \
printf "sleeping..."; \
sleep 600; \
printf "\nRegistered proxy -- ";\
voms-proxy-info -file $REGISTERED_PROXY | grep timeleft; \
printf "Original proxy -- "; \
voms-proxy-info -file $ORIG_PROXY | grep timeleft; \
printf "\nRegistered proxy -- "; \
voms-proxy-info -file $REGISTERED_PROXY -fqan -actimeleft; \
printf "Original proxy -- "; \
voms-proxy-info -file $ORIG_PROXY -fqan -actimeleft; \
printf "\nRegistered proxy -- "; \
voms-proxy-info -file $REGISTERED_PROXY -identity; \
printf "Original proxy -- ";\
voms-proxy-info -file $ORIG_PROXY -identity; \
glite-proxy-renew -j $JOBID stop; \
ls $REGISTERED_PROXY 2>&1 | grep 'No such file or directory' > /dev/null && echo OK

Output

[root@forkys-sl SLC4/32 ~]# su - glite
[glite@forkys-sl SLC4/32 ~]$ export PATH=$PATH:/opt/globus/bin
[glite@forkys-sl SLC4/32 ~]$ JOBID=https://fake.job.id/xxx
[glite@forkys-sl SLC4/32 ~]$ MPSERVER=delwin.fi.muni.cz
[glite@forkys-sl SLC4/32 ~]$ myproxy-init -s $MPSERVER --certfile /tmp/usercred.p12 --keyfile /tmp/usercred.p12 -d -n
Enter GRID pass phrase for this identity:
Your identity: /DC=org/DC=terena/DC=tcs/C=CZ/O=CESNET/CN=Zdenek Sustr 4040
Creating proxy .................................................... Done
Proxy Verify OK
Your proxy is valid until: Wed Jun 29 14:50:02 2011
A proxy valid for 168 hours (7.0 days) for user /DC=org/DC=terena/DC=tcs/C=CZ/O=CESNET/CN=Zdenek Sustr 4040 now exists on delwin.fi.muni.cz.
[glite@forkys-sl SLC4/32 ~]$ voms-proxy-init -valid 0:40 -voms voce -key /tmp/usercred.p12 -cert /tmp/usercred.p12 -vomses /etc/vomses
Enter GRID pass phrase for this identity:
Your identity: /DC=org/DC=terena/DC=tcs/C=CZ/O=CESNET/CN=Zdenek Sustr 4040
Creating temporary proxy ...................................... Done
Contacting  voms1.egee.cesnet.cz:7001 [/DC=cz/DC=cesnet-ca/O=CESNET/CN=voms1.egee.cesnet.cz] "voce" Done
Creating proxy ....................................... Done
Your proxy is valid until Wed Jun 22 15:30:12 2011
[glite@forkys-sl SLC4/32 ~]$ ORIG_PROXY=`voms-proxy-info | grep -E "^path" | sed 's/^path\s*:\s*//'`
[glite@forkys-sl SLC4/32 ~]$ REGISTERED_PROXY=`glite-proxy-renew -s $MPSERVER -f $ORIG_PROXY -j $JOBID start`
[glite@forkys-sl SLC4/32 ~]$ printf "\tProxy:\t$ORIG_PROXY\n\tRenew:\t$REGISTERED_PROXY\n"; \
> printf "Registered proxy -- "; \
> voms-proxy-info -file $REGISTERED_PROXY | grep timeleft; \
> printf "sleeping..."; \
> sleep 600; \
> printf "\nRegistered proxy -- ";\
> voms-proxy-info -file $REGISTERED_PROXY | grep timeleft; \
> printf "Original proxy -- "; \
> voms-proxy-info -file $ORIG_PROXY | grep timeleft; \
> printf "\nRegistered proxy -- "; \
> voms-proxy-info -file $REGISTERED_PROXY -fqan -actimeleft; \
> printf "Original proxy -- "; \
> voms-proxy-info -file $ORIG_PROXY -fqan -actimeleft; \
> printf "\nRegistered proxy -- "; \
> voms-proxy-info -file $REGISTERED_PROXY -identity; \
> printf "Original proxy -- ";\
> voms-proxy-info -file $ORIG_PROXY -identity; \
> glite-proxy-renew -j $JOBID stop; \
> ls $REGISTERED_PROXY 2>&1 | grep 'No such file or directory' > /dev/null && echo OK
   Proxy:   /tmp/x509up_u155
   Renew:   /glite/spool/glite-renewd/46f28dc374755cd61d02c581fea41d04.0
Registered proxy -- timeleft  : 0:39:52
sleeping...
Registered proxy -- timeleft  : 9:54:55
Original proxy -- timeleft  : 0:30:32

Registered proxy -- 42895
/voce/Role=NULL/Capability=NULL
Original proxy -- 1831
/voce/Role=NULL/Capability=NULL

Registered proxy -- /DC=org/DC=terena/DC=tcs/C=CZ/O=CESNET/CN=Zdenek Sustr 4040/CN=1378800936/CN=1116738890/CN=846399464
Original proxy -- /DC=org/DC=terena/DC=tcs/C=CZ/O=CESNET/CN=Zdenek Sustr 4040
OK

Upgrade from production

Environment

* Clean SL4 installation according to gLite guidelines (CA certificates, ...), VOMS installed

yum install -y ca_policy_igtf-mics ca_policy_igtf-slcs
rpm -ivh http://eticssoft.web.cern.ch/eticssoft/repository/org.glite/org.glite.security.voms-clients/1.9.10/slc4_ia32_gcc346/glite-security-voms-clients-1.9.10-14.slc4.i386.rpm

Process

Install packages:


cd /etc/yum.repos.d
wget http://grid-deployment.web.cern.ch/grid-deployment/glite/repos/3.1/glite-WMS.repo
wget http://grid-deployment.web.cern.ch/grid-deployment/glite/repos/3.1/glite-PX.repo
yum -y install glite-PX

yum -y install glite-security-proxyrenewal

useradd -u 155 glite
export GLITE_USER=glite
export GLITE_HOST_KEY=/etc/grid-security/hostkey.pem
export GLITE_HOST_CERT=/etc/grid-security/hostcert.pem

/opt/glite/etc/init.d/glite-proxy-renewald start

wget http://etics-repository.cern.ch/repository/pm/registered/repomd/id/7a22cf72-15ef-4893-869e-6ea55d320962/slc4_ia32_gcc346/etics-registered-build-by-id-protect.repo

yum -y update

/opt/glite/etc/init.d/glite-proxy-renewald restart

Note: ProxyRenewal does not require configuration by YAIM. YAIM is not used for this test. The test routine shown bellow can start from here immediately.

Full output of the installation

[root@forkys-sl SLC4/32 ~]# cd /etc/yum.repos.d
[root@forkys-sl SLC4/32 yum.repos.d]# wget http://grid-deployment.web.cern.ch/grid-deployment/glite/repos/3.1/glite-WMS.repo
--15:07:35--  http://grid-deployment.web.cern.ch/grid-deployment/glite/repos/3.1/glite-WMS.repo
           => `glite-WMS.repo'
Resolving grid-deployment.web.cern.ch... 137.138.142.33, 137.138.139.19
Connecting to grid-deployment.web.cern.ch|137.138.142.33|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 360 [text/plain]

100%[=================================================================================================================================================>] 360           --.--K/s             

15:07:35 (6.13 MB/s) - `glite-WMS.repo' saved [360/360]

[root@forkys-sl SLC4/32 yum.repos.d]# wget http://grid-deployment.web.cern.ch/grid-deployment/glite/repos/3.1/glite-PX.repo
--15:07:35--  http://grid-deployment.web.cern.ch/grid-deployment/glite/repos/3.1/glite-PX.repo
           => `glite-PX.repo'
Resolving grid-deployment.web.cern.ch... 137.138.139.19, 137.138.142.33
Connecting to grid-deployment.web.cern.ch|137.138.139.19|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 344 [text/plain]

100%[=================================================================================================================================================>] 344           --.--K/s             

15:07:35 (109.35 MB/s) - `glite-PX.repo' saved [344/344]

[root@forkys-sl SLC4/32 yum.repos.d]# yum -y install glite-PX
Loading "kernel-module" plugin
Setting up Install Process
Setting up repositories
glite-PX                  100% |=========================|  951 B    00:00     
glite-WMS                 100% |=========================|  951 B    00:00     
Reading repository metadata in from local files
primary.xml.gz            100% |=========================|  18 kB    00:00     
glite-PX  : ################################################## 80/80
Added 80 new packages, deleted 0 old in 0.25 seconds
primary.xml.gz            100% |=========================|  75 kB    00:00     
glite-WMS : ################################################## 279/279
Added 279 new packages, deleted 0 old in 0.99 seconds
Parsing package install arguments
Resolving Dependencies
--> Populating transaction set with selected packages. Please wait.
---> Downloading header for glite-PX to pack into transaction set.
glite-PX-3.1.29-0.i386.rp 100% |=========================| 2.4 kB    00:00     
---> Package glite-PX.i386 0:3.1.29-0 set to be updated
--> Running transaction check
--> Processing Dependency: gpt >= VDT1.6.0x86_rhas_4-1 for package: glite-PX
--> Processing Dependency: glite-yaim-myproxy >= 4.0.3-1 for package: glite-PX
--> Processing Dependency: bdii >= 4.0.1-4 for package: glite-PX
--> Processing Dependency: glue-schema >= 1.3.0-5 for package: glite-PX
--> Processing Dependency: glite-version >= 3.1.1-2 for package: glite-PX
--> Processing Dependency: vdt_globus_essentials >= VDT1.6.1x86_rhas_4-9 for package: glite-PX
--> Processing Dependency: glite-info-templates >= 1.0.0-11 for package: glite-PX
--> Processing Dependency: myproxy >= VDT1.6.1x86_rhas_4-7 for package: glite-PX
--> Processing Dependency: glite-info-provider-service >= 1.1.7-0 for package: glite-PX
--> Processing Dependency: myproxy-config >= 2.0.2-1 for package: glite-PX
--> Processing Dependency: glite-info-provider-release >= 1.0.0-5 for package: glite-PX
--> Processing Dependency: glite-yaim-core >= 4.0.11-2 for package: glite-PX
--> Processing Dependency: glite-info-generic >= 2.0.2-3 for package: glite-PX
--> Restarting Dependency Resolution with new changes.
--> Populating transaction set with selected packages. Please wait.
---> Downloading header for glite-yaim-myproxy to pack into transaction set.
glite-yaim-myproxy-4.0.3- 100% |=========================| 2.6 kB    00:00     
---> Package glite-yaim-myproxy.noarch 0:4.0.3-1 set to be updated
---> Downloading header for glite-version to pack into transaction set.
glite-version-3.1.2-1.noa 100% |=========================| 1.9 kB    00:00     
---> Package glite-version.noarch 0:3.1.2-1 set to be updated
---> Downloading header for bdii to pack into transaction set.
bdii-4.0.1-4.noarch.rpm   100% |=========================| 4.7 kB    00:00     
---> Package bdii.noarch 0:4.0.1-4 set to be updated
---> Downloading header for glite-info-provider-release to pack into transaction set.
glite-info-provider-relea 100% |=========================| 1.9 kB    00:00     
---> Package glite-info-provider-release.noarch 0:1.0.2-1 set to be updated
---> Downloading header for myproxy-config to pack into transaction set.
myproxy-config-2.0.2-1.no 100% |=========================| 2.0 kB    00:00     
---> Package myproxy-config.noarch 0:2.0.2-1 set to be updated
---> Downloading header for glue-schema to pack into transaction set.
glue-schema-1.3.0-5.noarc 100% |=========================| 2.8 kB    00:00     
---> Package glue-schema.noarch 0:1.3.0-5 set to be updated
---> Downloading header for gpt to pack into transaction set.
gpt-VDT1.6.0x86_rhas_4-1. 100% |=========================|  25 kB    00:00     
---> Package gpt.i386 0:VDT1.6.0x86_rhas_4-1 set to be updated
---> Downloading header for glite-info-templates to pack into transaction set.
glite-info-templates-1.0. 100% |=========================| 3.6 kB    00:00     
---> Package glite-info-templates.noarch 0:1.0.0-11 set to be updated
---> Downloading header for glite-info-generic to pack into transaction set.
glite-info-generic-2.0.2- 100% |=========================| 2.9 kB    00:00     
---> Package glite-info-generic.noarch 0:2.0.2-3 set to be updated
---> Downloading header for glite-info-provider-service to pack into transaction set.
glite-info-provider-servi 100% |=========================| 6.6 kB    00:00     
---> Package glite-info-provider-service.noarch 0:1.1.7-0 set to be updated
---> Downloading header for myproxy to pack into transaction set.
myproxy-VDT1.6.1x86_rhas_ 100% |=========================|  24 kB    00:00     
---> Package myproxy.i386 0:VDT1.6.1x86_rhas_4-7 set to be updated
---> Downloading header for glite-yaim-core to pack into transaction set.
glite-yaim-core-4.0.13-2. 100% |=========================|  17 kB    00:00     
---> Package glite-yaim-core.noarch 0:4.0.13-2 set to be updated
---> Downloading header for vdt_globus_essentials to pack into transaction set.
vdt_globus_essentials-VDT 100% |=========================| 172 kB    00:00     
---> Package vdt_globus_essentials.i386 0:VDT1.6.1x86_rhas_4-9 set to be updated
--> Running transaction check
--> Processing Dependency: openldap-servers for package: bdii
--> Restarting Dependency Resolution with new changes.
--> Populating transaction set with selected packages. Please wait.
---> Downloading header for openldap-servers to pack into transaction set.
openldap-servers-2.2.13-1 100% |=========================|  40 kB    00:00     
---> Package openldap-servers.i386 0:2.2.13-12.el4_8.4 set to be updated
--> Running transaction check
Beginning Kernel Module Plugin
Finished Kernel Module Plugin

Dependencies Resolved

=============================================================================
 Package                 Arch       Version          Repository        Size 
=============================================================================
Installing:
 glite-PX                i386       3.1.29-0         glite-PX          2.9 k
Installing for dependencies:
 bdii                    noarch     4.0.1-4          glite-PX           22 k
 glite-info-generic      noarch     2.0.2-3          glite-PX          5.4 k
 glite-info-provider-release  noarch     1.0.2-1          glite-WMS         3.0 k
 glite-info-provider-service  noarch     1.1.7-0          glite-PX           26 k
 glite-info-templates    noarch     1.0.0-11         glite-PX          8.2 k
 glite-version           noarch     3.1.2-1          glite-WMS         4.4 k
 glite-yaim-core         noarch     4.0.13-2         glite-WMS         124 k
 glite-yaim-myproxy      noarch     4.0.3-1          glite-PX          8.9 k
 glue-schema             noarch     1.3.0-5          glite-PX           30 k
 gpt                     i386       VDT1.6.0x86_rhas_4-1  glite-PX          854 k
 myproxy                 i386       VDT1.6.1x86_rhas_4-7  glite-PX          1.2 M
 myproxy-config          noarch     2.0.2-1          glite-PX          4.0 k
 openldap-servers        i386       2.2.13-12.el4_8.4  sl-base           3.2 M
Updating for dependencies:
 vdt_globus_essentials   i386       VDT1.6.1x86_rhas_4-9  glite-PX           16 M

Transaction Summary
=============================================================================
Install     14 Package(s)         
Update       1 Package(s)         
Remove       0 Package(s)         
Total download size: 21 M
Downloading Packages:
(1/15): glite-yaim-myprox 100% |=========================| 8.9 kB    00:00     
(2/15): glite-version-3.1 100% |=========================| 4.4 kB    00:00     
(3/15): bdii-4.0.1-4.noar 100% |=========================|  22 kB    00:00     
(4/15): openldap-servers- 100% |=========================| 3.2 MB    00:03     
(5/15): glite-info-provid 100% |=========================| 3.0 kB    00:00     
(6/15): myproxy-config-2. 100% |=========================| 4.0 kB    00:00     
(7/15): glue-schema-1.3.0 100% |=========================|  30 kB    00:00     
(8/15): gpt-VDT1.6.0x86_r 100% |=========================| 854 kB    00:00     
(9/15): glite-info-templa 100% |=========================| 8.2 kB    00:00     
(10/15): glite-info-gener 100% |=========================| 5.4 kB    00:00     
(11/15): glite-info-provi 100% |=========================|  26 kB    00:00     
(12/15): myproxy-VDT1.6.1 100% |=========================| 1.2 MB    00:00     
(13/15): glite-PX-3.1.29- 100% |=========================| 2.9 kB    00:00     
(14/15): glite-yaim-core- 100% |=========================| 124 kB    00:00     
(15/15): vdt_globus_essen 100% |=========================|  16 MB    00:04     
Running Transaction Test
Finished Transaction Test
Transaction Test Succeeded
Running Transaction
  Installing: gpt                          ####################### [ 1/16] 
Using system tar and gzip programs to unpack packages
GNU tar located at /bin/tar
GNU zip located at /bin/gzip
GNU unzip located at /bin/gunzip
GNU make located at /usr/bin/make
Perl located at /usr/bin/perl
rpm located at /bin/rpm
rpmbuild located at /usr/bin/rpmbuild
RPM Package License set to GNU
RPM Package Vendor set to NCSA
RPM Package FTP Site set to ftp.ncsa.uiuc.edu
RPM Package URL set to http://www.gridpackaging.org
RPM Packager set to NCSA
RPM Prefix set to /usr/grid
GNU target platform set to i686-pc-linux-gnu
  Updating  : vdt_globus_essentials        ####################### [ 2/16] 
  Installing: glite-yaim-core              ####################### [ 3/16] 
  Installing: glite-info-generic           ####################### [ 4/16] 
  Installing: glite-version                ####################### [ 5/16] 
  Installing: glite-info-provider-release  ####################### [ 6/16] 
  Installing: glite-info-templates         ####################### [ 7/16] 
  Installing: glite-yaim-myproxy           ####################### [ 8/16] 
  Installing: myproxy                      ####################### [ 9/16] 
  Installing: glite-info-provider-service  ####################### [10/16] 
  Installing: glue-schema                  ####################### [11/16] 
  Installing: myproxy-config               ####################### [12/16] 
  Installing: openldap-servers             ####################### [13/16] 
  Installing: bdii                         ####################### [14/16] 
  Installing: glite-PX                     ####################### [15/16] 
  Cleanup   : vdt_globus_essentials        ####################### [16/16]

Installed: glite-PX.i386 0:3.1.29-0
Dependency Installed: bdii.noarch 0:4.0.1-4 glite-info-generic.noarch 0:2.0.2-3 glite-info-provider-release.noarch 0:1.0.2-1 glite-info-provider-service.noarch 0:1.1.7-0 glite-info-templates.noarch 0:1.0.0-11 glite-version.noarch 0:3.1.2-1 glite-yaim-core.noarch 0:4.0.13-2 glite-yaim-myproxy.noarch 0:4.0.3-1 glue-schema.noarch 0:1.3.0-5 gpt.i386 0:VDT1.6.0x86_rhas_4-1 myproxy.i386 0:VDT1.6.1x86_rhas_4-7 myproxy-config.noarch 0:2.0.2-1 openldap-servers.i386 0:2.2.13-12.el4_8.4
Dependency Updated: vdt_globus_essentials.i386 0:VDT1.6.1x86_rhas_4-9
Complete!
[root@forkys-sl SLC4/32 yum.repos.d]# 
[root@forkys-sl SLC4/32 yum.repos.d]# yum -y install glite-security-proxyrenewal
Loading "kernel-module" plugin
Setting up Install Process
Setting up repositories
Reading repository metadata in from local files
Parsing package install arguments
Resolving Dependencies
--> Populating transaction set with selected packages. Please wait.
---> Downloading header for glite-security-proxyrenewal to pack into transaction set.
glite-security-proxyrenew 100% |=========================| 6.5 kB    00:00     
---> Package glite-security-proxyrenewal.i386 0:1.3.8-5.slc4 set to be updated
--> Running transaction check
--> Processing Dependency: glite-security-voms-api-c >= 1.9.10 for package: glite-security-proxyrenewal
--> Processing Dependency: libvomsc_gcc32dbg.so.0 for package: glite-security-proxyrenewal
--> Restarting Dependency Resolution with new changes.
--> Populating transaction set with selected packages. Please wait.
---> Downloading header for glite-security-voms-api-c to pack into transaction set.
glite-security-voms-api-c 100% |=========================| 4.7 kB    00:00     
---> Package glite-security-voms-api-c.i386 0:1.9.10-12.slc4 set to be updated
--> Running transaction check
Beginning Kernel Module Plugin
Finished Kernel Module Plugin

Dependencies Resolved

=============================================================================
 Package                 Arch       Version          Repository        Size 
=============================================================================
Installing:
 glite-security-proxyrenewal  i386       1.3.8-5.slc4     glite-WMS          86 k
Installing for dependencies:
 glite-security-voms-api-c  i386       1.9.10-12.slc4   glite-WMS         4.0 M

Transaction Summary
=============================================================================
Install      2 Package(s)         
Update       0 Package(s)         
Remove       0 Package(s)         
Total download size: 4.1 M
Downloading Packages:
(1/2): glite-security-pro 100% |=========================|  86 kB    00:00     
(2/2): glite-security-vom 100% |=========================| 4.0 MB    00:01     
Running Transaction Test
Finished Transaction Test
Transaction Test Succeeded
Running Transaction
  Installing: glite-security-voms-api-c    ######################### [1/2] 
  Installing: glite-security-proxyrenewal  ######################### [2/2] 

Installed: glite-security-proxyrenewal.i386 0:1.3.8-5.slc4
Dependency Installed: glite-security-voms-api-c.i386 0:1.9.10-12.slc4
Complete!
[root@forkys-sl SLC4/32 yum.repos.d]# 
[root@forkys-sl SLC4/32 yum.repos.d]# useradd -u 155 glite
[root@forkys-sl SLC4/32 yum.repos.d]# export GLITE_USER=glite
[root@forkys-sl SLC4/32 yum.repos.d]# export GLITE_HOST_KEY=/etc/grid-security/hostkey.pem
[root@forkys-sl SLC4/32 yum.repos.d]# export GLITE_HOST_CERT=/etc/grid-security/hostcert.pem
[root@forkys-sl SLC4/32 yum.repos.d]# 
[root@forkys-sl SLC4/32 yum.repos.d]# /opt/glite/etc/init.d/glite-proxy-renewald start
Starting ProxyRenewal Daemon: glite-proxy-renewd ... done
[root@forkys-sl SLC4/32 yum.repos.d]# 
[root@forkys-sl SLC4/32 yum.repos.d]# wget http://etics-repository.cern.ch/repository/pm/registered/repomd/id/7a22cf72-15ef-4893-869e-6ea55d320962/slc4_ia32_gcc346/etics-registered-build-by-id-protect.repo
--15:08:03--  http://etics-repository.cern.ch/repository/pm/registered/repomd/id/7a22cf72-15ef-4893-869e-6ea55d320962/slc4_ia32_gcc346/etics-registered-build-by-id-protect.repo
           => `etics-registered-build-by-id-protect.repo'
Resolving etics-repository.cern.ch... 128.142.130.60
Connecting to etics-repository.cern.ch|128.142.130.60|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: unspecified

    [ <=>                                                                                                                                              ] 900           --.--K/s             

15:08:04 (45.17 MB/s) - `etics-registered-build-by-id-protect.repo' saved [900]

[root@forkys-sl SLC4/32 yum.repos.d]# 
[root@forkys-sl SLC4/32 yum.repos.d]# yum -y update
Loading "kernel-module" plugin
Setting up Update Process
Setting up repositories
ETICS-registered-build-7a 100% |=========================|  764 B    00:00     
Reading repository metadata in from local files
primary.xml.gz            100% |=========================| 4.7 kB    00:00     
ETICS-regi: ################################################## 8/8
Added 8 new packages, deleted 0 old in 0.04 seconds
Resolving Dependencies
--> Populating transaction set with selected packages. Please wait.
---> Downloading header for glite-security-proxyrenewal to pack into transaction set.
glite-security-proxyrenew 100% |=========================| 7.0 kB    00:00     
---> Package glite-security-proxyrenewal.i386 0:1.3.21-2.slc4 set to be updated
---> Downloading header for glite-security-voms-api-c to pack into transaction set.
glite-security-voms-api-c 100% |=========================| 4.7 kB    00:00     
---> Package glite-security-voms-api-c.i386 0:1.9.10-14.slc4 set to be updated
---> Downloading header for glite-security-voms-api-cpp to pack into transaction set.
glite-security-voms-api-c 100% |=========================| 5.4 kB    00:00     
---> Package glite-security-voms-api-cpp.i386 0:1.9.10-12.slc4 set to be updated
--> Running transaction check
Beginning Kernel Module Plugin
Finished Kernel Module Plugin

Dependencies Resolved

=============================================================================
 Package                 Arch       Version          Repository        Size 
=============================================================================
Updating:
 glite-security-proxyrenewal  i386       1.3.21-2.slc4    ETICS-registered-build-7a22cf72-15ef-4893-869e-6ea55d320962-slc4_ia32_gcc346   91 k
 glite-security-voms-api-c  i386       1.9.10-14.slc4   ETICS-registered-build-7a22cf72-15ef-4893-869e-6ea55d320962-slc4_ia32_gcc346  4.0 M
 glite-security-voms-api-cpp  i386       1.9.10-12.slc4   glite-WMS         4.8 M

Transaction Summary
=============================================================================
Install      0 Package(s)         
Update       3 Package(s)         
Remove       0 Package(s)         
Total download size: 8.8 M
Downloading Packages:
(1/3): glite-security-proxyrenewal-1.3.21-2.slc4.i386.rpm        91 kB 00:00 
(2/3): glite-security-voms-api-c-1.9.10-14.slc4.i386.rpm        4.0 MB 00:01 
(3/3): glite-security-vom 100% |=========================| 4.8 MB    00:01     
Running Transaction Test
Finished Transaction Test
Transaction Test Succeeded
Running Transaction
  Updating  : glite-security-voms-api-c    ######################### [1/6] 
  Updating  : glite-security-voms-api-cpp  ######################### [2/6] 
  Updating  : glite-security-proxyrenewal  ######################### [3/6] 
  Cleanup   : glite-security-proxyrenewal  ######################### [4/6]
  Cleanup   : glite-security-voms-api-c    ######################### [5/6]
  Cleanup   : glite-security-voms-api-cpp  ######################### [6/6]

Updated: glite-security-proxyrenewal.i386 0:1.3.21-2.slc4 glite-security-voms-api-c.i386 0:1.9.10-14.slc4 glite-security-voms-api-cpp.i386 0:1.9.10-12.slc4
Complete!
[root@forkys-sl SLC4/32 yum.repos.d]# 
[root@forkys-sl SLC4/32 yum.repos.d]# /opt/glite/etc/init.d/glite-proxy-renewald restart
Stopping ProxyRenewal Daemon: glite-proxy-renewd ... done
Starting ProxyRenewal Daemon: glite-proxy-renewd ... done

Tests

Functionality Tests

TestPlan	https://twiki.cern.ch/twiki/bin/view/EGEE/PXSoftwareVerificationandValidationPlan
Tests	http://glite.cvs.cern.ch/cgi-bin/glite.cgi/org.glite.testsuites.ctb/MyProxy/

Process

su - glite
export PATH=$PATH:/opt/globus/bin
JOBID=https://fake.job.id/xxx
MPSERVER=delwin.fi.muni.cz
myproxy-init -s $MPSERVER --certfile /tmp/usercred.p12 --keyfile /tmp/usercred.p12 -d -n

voms-proxy-init -valid 0:40 -voms voce -key /tmp/usercred.p12 -cert /tmp/usercred.p12 -vomses /etc/vomses
ORIG_PROXY=`voms-proxy-info | grep -E "^path" | sed 's/^path\s*:\s*//'`
REGISTERED_PROXY=`glite-proxy-renew -s $MPSERVER -f $ORIG_PROXY -j $JOBID start`
printf "\tProxy:\t$ORIG_PROXY\n\tRenew:\t$REGISTERED_PROXY\n"; \
printf "Registered proxy -- "; \
voms-proxy-info -file $REGISTERED_PROXY | grep timeleft; \
printf "sleeping..."; \
sleep 600; \
printf "\nRegistered proxy -- ";\
voms-proxy-info -file $REGISTERED_PROXY | grep timeleft; \
printf "Original proxy -- "; \
voms-proxy-info -file $ORIG_PROXY | grep timeleft; \
printf "\nRegistered proxy -- "; \
voms-proxy-info -file $REGISTERED_PROXY -fqan -actimeleft; \
printf "Original proxy -- "; \
voms-proxy-info -file $ORIG_PROXY -fqan -actimeleft; \
printf "\nRegistered proxy -- "; \
voms-proxy-info -file $REGISTERED_PROXY -identity; \
printf "Original proxy -- ";\
voms-proxy-info -file $ORIG_PROXY -identity; \
glite-proxy-renew -j $JOBID stop; \
ls $REGISTERED_PROXY 2>&1 | grep 'No such file or directory' > /dev/null && echo OK

Output

[root@forkys-sl SLC4/32 yum.repos.d]# su - glite
[glite@forkys-sl SLC4/32 ~]$ export PATH=$PATH:/opt/globus/bin
[glite@forkys-sl SLC4/32 ~]$ JOBID=https://fake.job.id/xxx
[glite@forkys-sl SLC4/32 ~]$ MPSERVER=delwin.fi.muni.cz
[glite@forkys-sl SLC4/32 ~]$ myproxy-init -s $MPSERVER --certfile /tmp/usercred.p12 --keyfile /tmp/usercred.p12 -d -n
Enter GRID pass phrase for this identity:
Your identity: /DC=org/DC=terena/DC=tcs/C=CZ/O=CESNET/CN=Zdenek Sustr 4040
Creating proxy .............................................................................................................................. Done
Proxy Verify OK
Your proxy is valid until: Wed Jun 29 15:37:01 2011
A proxy valid for 168 hours (7.0 days) for user /DC=org/DC=terena/DC=tcs/C=CZ/O=CESNET/CN=Zdenek Sustr 4040 now exists on delwin.fi.muni.cz.
[glite@forkys-sl SLC4/32 ~]$ voms-proxy-init -valid 0:40 -voms voce -key /tmp/usercred.p12 -cert /tmp/usercred.p12 -vomses /etc/vomses
Enter GRID pass phrase for this identity:
Your identity: /DC=org/DC=terena/DC=tcs/C=CZ/O=CESNET/CN=Zdenek Sustr 4040
voms-proxy-init: symbol lookup error: voms-proxy-init: undefined symbol: _ZN8vomsdata15LoadCredentialsEP7x509_stP8stack_stP11evp_pkey_st
[glite@forkys-sl SLC4/32 ~]$ voms-proxy-init -valid 0:40 -voms voce -key /tmp/usercred.p12 -cert /tmp/usercred.p12 -vomses /etc/vomses
Enter GRID pass phrase for this identity:
Your identity: /DC=org/DC=terena/DC=tcs/C=CZ/O=CESNET/CN=Zdenek Sustr 4040
Creating temporary proxy ............................... Done
Contacting  voms1.egee.cesnet.cz:7001 [/DC=cz/DC=cesnet-ca/O=CESNET/CN=voms1.egee.cesnet.cz] "voce" Done
Creating proxy ............................................................................................. Done
Your proxy is valid until Wed Jun 22 16:19:50 2011
[glite@forkys-sl SLC4/32 ~]$ ORIG_PROXY=`voms-proxy-info | grep -E "^path" | sed 's/^path\s*:\s*//'`
[glite@forkys-sl SLC4/32 ~]$ REGISTERED_PROXY=`glite-proxy-renew -s $MPSERVER -f $ORIG_PROXY -j $JOBID start`
[glite@forkys-sl SLC4/32 ~]$ printf "\tProxy:\t$ORIG_PROXY\n\tRenew:\t$REGISTERED_PROXY\n"; \
> printf "Registered proxy -- "; \
> voms-proxy-info -file $REGISTERED_PROXY | grep timeleft; \
> printf "sleeping..."; \
> sleep 600; \
> printf "\nRegistered proxy -- ";\
> voms-proxy-info -file $REGISTERED_PROXY | grep timeleft; \
> printf "Original proxy -- "; \
> voms-proxy-info -file $ORIG_PROXY | grep timeleft; \
> printf "\nRegistered proxy -- "; \
> voms-proxy-info -file $REGISTERED_PROXY -fqan -actimeleft; \
> printf "Original proxy -- "; \
> voms-proxy-info -file $ORIG_PROXY -fqan -actimeleft; \
> printf "\nRegistered proxy -- "; \
> voms-proxy-info -file $REGISTERED_PROXY -identity; \
> printf "Original proxy -- ";\
> voms-proxy-info -file $ORIG_PROXY -identity; \
> glite-proxy-renew -j $JOBID stop; \
> ls $REGISTERED_PROXY 2>&1 | grep 'No such file or directory' > /dev/null && echo OK
   Proxy:   /tmp/x509up_u155
   Renew:   /glite/spool/glite-renewd/46f28dc374755cd61d02c581fea41d04.0
Registered proxy -- timeleft  : 0:39:47
sleeping...
Registered proxy -- timeleft  : 9:55:50
Original proxy -- timeleft  : 0:29:47

Registered proxy -- 42950
/voce/Role=NULL/Capability=NULL
Original proxy -- 1787
/voce/Role=NULL/Capability=NULL

Registered proxy -- /DC=org/DC=terena/DC=tcs/C=CZ/O=CESNET/CN=Zdenek Sustr 4040/CN=1067108296/CN=1181876740/CN=847375501
Original proxy -- /DC=org/DC=terena/DC=tcs/C=CZ/O=CESNET/CN=Zdenek Sustr 4040
OK

Resolution of Linked Bugs

Apart from bugs described below, this patch also addresses bugs with release 1.3.21, see https://twiki.cern.ch/twiki/bin/view/EGEE/PXCertificationReportForTask20914#Resolution_of_Linked_Bugs

#43577 – Proxy renewal must aggregate proxies with equal VOMS attributes

This is rather a new feature than a real bug fix, even though it influences the overall performance. As of this release proxies that contain the set of VOMS attributes are aggregated into a single proxy to renew. The fact can be verified by checking the fqan directive being present in the renewal metadata file (the one with the .data suffix).
Fix Certified

#52710 – Proxy renewal failure

The current code fixes several places where renewal was failing and also implements the aggregation mechanism. Indeed, we haven't detected this error on a few WMSs where updated version of renewal has been running for a while.
Fix Certified

#65145 – proxy renewal daemon crashes upon serving each incoming request

That problem has been fixed in patch #3753 and is not appearing anymore.
Fix Certified

#67026 – glite-proxy-renewd closes filedescriptors that may be in use

The fix has also been verified in production on a few WMS's
Fix Certified

Topic revision: r12 - 2011-06-24 - ZdenekSustr

EGEE

Main.WebList

Welcome Guest

- Cern Search
- TWiki Search
- Google Search
EGEE All webs

Copyright &© by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Ask a support question or Send feedback