Project

General

Profile

Bug #11817

cred_list in the proxy plugins should add group credentials first and append global later

Added by Parag Mhashilkar over 3 years ago. Updated over 3 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Category:
-
Target version:
Start date:
02/24/2016
Due date:
% Done:

0%

Estimated time:
First Occurred:
Occurs In:
Stakeholders:

OSG

Duration:

Description

Begin forwarded message:

From: Parag Mhashilkar
Subject: Re: ProxyFirst vs ProxyAll question
Date: February 24, 2016 at 1:49:04 PM CST
To: Brian Bockelman
Cc: "Fajardo Hernandez, Edgar" , GlideinWMS Support

Sorry, missed this email. It got filtered out before I saw it.

It turns out that it won’t work that way. When proxy list is created, global proxies are added first and group specific one later. So even if the group’s plugin type ‘ProxyFirst’ over rides global ‘ProxyAll’ correctly, the plugin will always select ProxyA today. If we have to keep the notion of scoping, I can see this being a bit inconsistent.

We can make the proxy list population to add group proxies before global proxies to address this. But for now, your best bet is to define credentials specific to each group and avoid global credentials in case you have groups that will only need a certain set of credentials.
_____________________________________
Parag Mhashilkar
_____________________________________

On Feb 24, 2016, at 12:53 PM, Brian Bockelman wrote:

Hi all,

Catching up on old emails - did this get resolved?

Brian

On Feb 17, 2016, at 11:37 AM, Fajardo Hernandez, Edgar wrote:

Dear Gwms Experts,

I have a question for u folks. I have a fronted with one proxy defined in the credentials in the “general” section (lets call it proxyA) with plugin ProxyAll. And in a couple of the FE groups another proxy (proxy B). If I change the plugin in these groups to ProxyFirst, will the glide ins from this proxy only use the proxyB, or would they be using both?

My question is if I have on proxy defined in the general section. How can I enforce another (one and only proxy) in some of the subgroups?

Thanks,

-E

History

#1 Updated by Parag Mhashilkar over 3 years ago

  • Target version changed from v3_2_14 to v3_2_15

#2 Updated by HyunWoo Kim over 3 years ago

  • Status changed from New to Feedback
  • Assignee changed from HyunWoo Kim to Parag Mhashilkar

I think I found the solution.
I modified one line in glideinFrontendConfig.py
then I tested and confirmed that the credential in group is picked up when group is using ProxyFirst and there is another credential in the global section.

#3 Updated by Parag Mhashilkar over 3 years ago

  • Status changed from Feedback to Resolved
  • Assignee changed from Parag Mhashilkar to HyunWoo Kim

Looks ok. Merged

#4 Updated by Parag Mhashilkar over 3 years ago

  • Status changed from Resolved to Closed


Also available in: Atom PDF