VomsProxy lifetime problems

[Thomas Müller]

Dear GC experts,

I am submitting local jobs to the NAF batch system that access files
from the NAF dCache. For that I need a grid proxy. When I choose a too
long wall time, I get error messages like in the following:

> 2015-07-17 10:27:54 - Proxy lifetime (11h 16min 28sec) does not meet
> the proxy and walltime (12h 05min 00sec) requirements!
> 2015-07-17 10:27:54 - Disabling job submission

But date; voms-proxy-info tells me, that the time left should be much
larger:

> Fri Jul 17 10:29:31 CEST 2015
> Picked up _JAVA_OPTIONS: -Xmx256M
> subject : /C=DE/O=GermanGrid/OU=KIT/CN=Thomas Mueller/CN=proxy
> issuer : /C=DE/O=GermanGrid/OU=KIT/CN=Thomas Mueller
> identity : /C=DE/O=GermanGrid/OU=KIT/CN=Thomas Mueller
> type : full legacy globus proxy
> strength : 1024
> path : /tmp/x509up_u23648
> timeleft : 175:29:19
> key usage : Digital Signature, Key Encipherment, Data Encipherment

My config contains:

> [local] proxy = VomsProxy

Is this a problem? What should I maybe use instead.

Thanks for your help.

Regards,
Thomas

[Max Fischer]

Hi Thomas,

GC (stable-fixes) has no problem handling Proxies of 180h lifetime. You might want to check that GC is using the correct proxy and not an older one.

In general, it seems that running on the NAF with X509 proxies is much less of a hassle if you explicitly define an X509 proxy path in the config [1]. Make sure to also export it to the environment [2]. You should also recreate your proxy after exporting X509_USER_PROXY.

Cheers,
Max

[1] gc.conf
[constants]
x509_user_proxy=/usr/users/mfischer/.globus/x509up

[2] shell
$ export X509_USER_PROXY=/usr/users/mfischer/.globus/x509up

> --
> You received this message because you are subscribed to the Google Groups "grid-control" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to grid-control...@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.