search

dmwm / CRAB2

CRAB2
2 stars 11 forks source link

flag (and stop) early users who have proxies from voms.fnal.gov #894

Closed ericvaandering closed 10 years ago

ericvaandering commented 10 years ago

Original Savannah ticket 100995 reported by belforte on Mon Mar 25 09:45:15 2013.

see https://savannah.cern.ch/support/?136697

ericvaandering commented 10 years ago

Comment by belforte on Mon Mar 25 11:24:26 2013

here's an example such proxy for a crab task on submit-2 root@submit-2 /crabprod/remoteGlidein/57/uscms4150/mdunser_SMS-T5tttt_mGo-800to1200_mStop-225to1025_mLSP_50_8TeV-Madgraph_800_875_x0ie72# voms-proxy-info -all -file .x509up_u564 subject : /DC=ch/DC=cern/OU=Organic Units/OU=Users/CN=mdunser/CN=706134/CN=Marc Dunser/CN=proxy issuer : /DC=ch/DC=cern/OU=Organic Units/OU=Users/CN=mdunser/CN=706134/CN=Marc Dunser identity : /DC=ch/DC=cern/OU=Organic Units/OU=Users/CN=mdunser/CN=706134/CN=Marc Dunser type : proxy strength : 1024 bits path : .x509up_u564 timeleft : 184:29:28 key usage : Digital Signature, Key Encipherment === VO cms extension information === VO : cms subject : /DC=ch/DC=cern/OU=Organic Units/OU=Users/CN=mdunser/CN=706134/CN=Marc Dunser issuer : /DC=org/DC=doegrids/OU=Services/CN=http/voms.fnal.gov attribute : /cms/Role=NULL/Capability=NULL timeleft : 184:29:28 uri : voms.fnal.gov:15015 root@submit-2 /crabprod/remoteGlidein/57/uscms4150/mdunser_SMS-T5tttt_mGo-800to1200_mStop-225to1025_mLSP_50_8TeV-Madgraph_800_875_x0ie72#

but submit-2 is apparently only liking CERN's servers, so this may be trickier then I thought root@submit-2 /etc/grid-security/vomsdir/cms# ls lcg-voms.cern.ch.lsc voms.cern.ch.lsc root@submit-2 /etc/grid-security/vomsdir/cms#

ericvaandering commented 10 years ago

Comment by belforte on Mon Apr 1 14:18:07 2013

why does UCSD GUMS not do this ?

ericvaandering commented 10 years ago

Comment by jletts on Mon Apr 1 14:22:20 2013

I will ask Terrence.

ericvaandering commented 10 years ago

Comment by belforte on Tue Apr 2 16:56:47 2013

Terrence reported that GUMS config from OSG points to voms.fnal.gov, so we can't avoid listing its cert. as a good one. I spoke with Burt H. and realized this would be an uphill struggle. There will be no simple and quick way to "ban" this. The OSG UI config. does not list voms.fnal.gov for CMS since at least 4 years. So we could rightfully expect this to become rarer and rarer. Given that the held jobs and the glexec failures appear not a burning issue, I propose we wait it out.

ericvaandering commented 10 years ago

Comment by belforte on Tue Aug 20 09:57:42 2013

this stopped happening, seems the last bad UI's have been updates, so let's forget

ericvaandering commented 10 years ago

Closed by belforte on Tue Aug 20 09:57:42 2013