Setup: GRID authentication

Introduction

After installation of the user's certificate on the user's machine (GRID credentials) and the initialization of the UI (User interface), the user has to create a valid proxy of his certificate. Although CRAB is doing this automatically if no valid proxy can be found, the following instructions describe the creation process.

Proxy generation

After installation of the certificate in the user's home directory, the following command creates a user proxy:

voms-proxy-init -voms cms

using the passphrase defined during installation.

To check how long the user's proxy is valid, use the following command:

voms-proxy-info -all

A valid proxy should produce a similar output like:

subject   : /DC=org/DC=doegrids/OU=People/CN=Oliver Gutsche 103748/CN=proxy
issuer    : /DC=org/DC=doegrids/OU=People/CN=Oliver Gutsche 103748
identity  : /DC=org/DC=doegrids/OU=People/CN=Oliver Gutsche 103748
type      : proxy
strength  : 512 bits
path      : /tmp/x509up_u12840
timeleft  : 11:59:54
VO        : cms
subject   : /DC=org/DC=doegrids/OU=People/CN=Oliver Gutsche 103748
issuer    : /C=CH/O=CERN/OU=GRID/CN=host/lcg-voms.cern.ch
attribute : /cms/Role=NULL/Capability=NULL
attribute : /cms/analysis/Role=NULL/Capability=NULL
attribute : /cms/uscms/Role=NULL/Capability=NULL
timeleft  : 11:59:54

Authentication test

A good test if the user's certificate is valid and if his proxy is valid uses the following globus tool trying to authenticate to FNAL:

globusrun -a -r cmsosgce.fnal.gov

Previous: CRAB installation Top: Main page Next: CMSSW project
Edit | Attach | Watch | Print version | History: r2 < r1 | Backlinks | Raw View | WYSIWYG | More topic actions
Topic revision: r2 - 2007-07-29 - OliverGutsche
 
    • Cern Search Icon Cern Search
    • TWiki Search Icon TWiki Search
    • Google Search Icon Google Search

    Main All webs login

This site is powered by the TWiki collaboration platform Powered by PerlCopyright & 2008-2021 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
or Ideas, requests, problems regarding TWiki? use Discourse or Send feedback