MyProxy Test Plan

This document is a work-in-progress.

The MyProxy Service is open source software for managing X.509 Public Key Infrastructure (PKI) security credentials (certificates and private keys). The following gLite services depend on a fully functional MyProxy service:

• glite-FTS (proxy renewal during file transfer)
• glite-WN (proxy renewal in long running jobs)
• lcg-CE (proxy renewal whilst jobs are queued/running)
• glite-WMS, glite-LB

The current gLite distribution is based on myproxy-VDT1.6.1. The packaging makes no distinction between the client and server, so server packages are installed on machines where only client programs would suffice. It also includes a comprehensive testsuite myproxy-test, written in Perl and consisting of some 40 test cases. By default, the tests are assumed to run as root on the MyProxy Server, but this may be overridden by setting the MYPROXY_SERVER variable to the fully qualified domain name of the MyProxy server. The testsuite does not test proxy renewal of certs with VOMS attributes. However, the document https://twiki.grid.iu.edu/twiki/bin/view/Integration/VOMSandMYPROXY covers some possible test scenarios that can be used as a basic to fill in the current gaps in the range of testing.

The MyProxy server is also run in conjunction with a service BDII, and it is recommend that the consistency of this information is also verified.

The current SAM test for MyProxy simply checks the validity of the host certificate.

Features/Scenarios to be tested

• Store a credential
• Query infomation on the stored credential
• Retrieve a stored credential
• Change passphrase

Command Line Interface

myproxy-change-pass-phrase
myproxy-destroy
myproxy-get-delegation
myproxy-info
myproxy-init
myproxy-logon
myproxy-retrieve
myproxy-store

myproxy-admin-addservice
myproxy-admin-adduser
myproxy-admin-change-pass
myproxy-admin-load-credential
myproxy-admin-query
myproxy-replicate
myproxy-server
myproxy-server-setup
myproxy-test
myproxy-test-replicate

Regression testing

As MyProxy is an externally provided component, the set of regression tests should be sourced from the software providers. In addition, an analysis of Savannah bugs related to MyProxy shows that one of the more problematic areas is the interaction of MyProx and FTS.

-- JohnWalsh - 12 May 2009