Bug #11817

cred_list in the proxy plugins should add group credentials first and append global later

Added by Parag Mhashilkar about 4 years ago. Updated almost 4 years ago.

Target version:
Start date:
Due date:
% Done:


Estimated time:
First Occurred:
Occurs In:




Begin forwarded message:

From: Parag Mhashilkar
Subject: Re: ProxyFirst vs ProxyAll question
Date: February 24, 2016 at 1:49:04 PM CST
To: Brian Bockelman
Cc: "Fajardo Hernandez, Edgar" , GlideinWMS Support

Sorry, missed this email. It got filtered out before I saw it.

It turns out that it won’t work that way. When proxy list is created, global proxies are added first and group specific one later. So even if the group’s plugin type ‘ProxyFirst’ over rides global ‘ProxyAll’ correctly, the plugin will always select ProxyA today. If we have to keep the notion of scoping, I can see this being a bit inconsistent.

We can make the proxy list population to add group proxies before global proxies to address this. But for now, your best bet is to define credentials specific to each group and avoid global credentials in case you have groups that will only need a certain set of credentials.
Parag Mhashilkar

On Feb 24, 2016, at 12:53 PM, Brian Bockelman wrote:

Hi all,

Catching up on old emails - did this get resolved?


On Feb 17, 2016, at 11:37 AM, Fajardo Hernandez, Edgar wrote:

Dear Gwms Experts,

I have a question for u folks. I have a fronted with one proxy defined in the credentials in the “general” section (lets call it proxyA) with plugin ProxyAll. And in a couple of the FE groups another proxy (proxy B). If I change the plugin in these groups to ProxyFirst, will the glide ins from this proxy only use the proxyB, or would they be using both?

My question is if I have on proxy defined in the general section. How can I enforce another (one and only proxy) in some of the subgroups?




#1 Updated by Parag Mhashilkar about 4 years ago

  • Target version changed from v3_2_14 to v3_2_15

#2 Updated by HyunWoo Kim almost 4 years ago

  • Status changed from New to Feedback
  • Assignee changed from HyunWoo Kim to Parag Mhashilkar

I think I found the solution.
I modified one line in
then I tested and confirmed that the credential in group is picked up when group is using ProxyFirst and there is another credential in the global section.

#3 Updated by Parag Mhashilkar almost 4 years ago

  • Status changed from Feedback to Resolved
  • Assignee changed from Parag Mhashilkar to HyunWoo Kim

Looks ok. Merged

#4 Updated by Parag Mhashilkar almost 4 years ago

  • Status changed from Resolved to Closed

Also available in: Atom PDF