Project

General

Profile

Feature #1813

frontend to auto-update and/or auto-generate proxies (and possibly other credentials)

Added by Krista Larson over 8 years ago. Updated over 6 years ago.

Status:
Closed
Priority:
Low
Assignee:
Douglas Strain
Category:
-
Target version:
Start date:
03/27/2013
Due date:
% Done:

0%

Estimated time:
(Total: 0.00 h)
Stakeholders:
Duration:

Description

Currently there is nothing in the frontend that will automatically update proxies when they expire. We could also add the ability for the frontend to automatically create proxies given the credentials.


Subtasks

Bug #3628: Proxy creation plugin needs to be documentedAssignedBurt Holzman

History

#1 Updated by Krista Larson over 8 years ago

This is for a future v3+ release but not for 3.0.

#2 Updated by Burt Holzman about 8 years ago

  • Assignee set to Krista Larson
  • Target version set to v3_1

#3 Updated by Krista Larson about 8 years ago

Hi Krista.

This is the famous "proxy creation plugin" in the frontend that was never implemented.

The idea was that the frontend admin could provide, in addition to the paths to proxies,
a creation script (and possibly some parameters for the script) that could be used to create the proxies just-in-time.

I.e. the proxies do not need to exist when the frontend start up (although they can);
the frontend does the usual matchmaking, finds out which/how many proxies it needs, checks one by one if they are still valid (long enough) and if not, invokes the script+args to create/refresh the proxy.
(one should olso re-check that the operation succeeded, of course)
Only then it does the advertise with the (encrypted) proxy.

Does this explain?

Thanks,
Igor

PS: I am talking pilot proxies for everything above.

#4 Updated by Burt Holzman over 7 years ago

  • Assignee changed from Krista Larson to Douglas Strain

#5 Updated by Douglas Strain over 7 years ago

This feature has been implemented in branch called "master_1813". The code will now update proxies using the parameter "creation_script" once the time left on the proxy is less than "update_frequency". I think some tweaks are still needed if the proxy file doesn't exist in the first place. Also, this only works for type "grid_proxy" right now, but that's probably the only one that needs constant updating anyway. Commits in this branch are as follows:

commit:16630ce9a8ab1640ec097763b139826da0774994
commit:b392dbe31dd6251a96aead9035719bd4b2c5aad4

#6 Updated by Douglas Strain over 7 years ago

  • Status changed from New to Feedback
  • Assignee changed from Douglas Strain to Parag Mhashilkar

Also added two more commits to handle missing files as well as cert_pair credential type.

commit:616da16a8cce028ec9de5e2779fd07c3fd3ee123
commit:7c26b4246ae704c4528aec0d28e486fd6abe911a

All four commits are in the master_1813 branch.

Parag, any interest in reviewing this patch for me?

#7 Updated by Parag Mhashilkar over 7 years ago

  • Status changed from Feedback to Assigned
  • Assignee changed from Parag Mhashilkar to Douglas Strain

Code looks ok but I see atleast three places that several lines of logic is duplicated with just different variable names. Wonder if its worth downsizing for bonus points.

#8 Updated by Douglas Strain over 7 years ago

  • Status changed from Assigned to Feedback
  • Assignee changed from Douglas Strain to Parag Mhashilkar

Condensed some code in creation / reading of proxy descripts. Want to review these last two patches so we can finish this ticket up?

commit:94b0ec5480b1cdb626f7f9e2a6de06eb34a6551f
commit:ba2da57eadf9c367f37913fe73da66be1e969f0f

Thanks.

#9 Updated by Parag Mhashilkar over 7 years ago

ye to fewer lines of code! Please merge it.

#10 Updated by Parag Mhashilkar over 7 years ago

  • Assignee changed from Parag Mhashilkar to Douglas Strain

#11 Updated by Douglas Strain over 7 years ago

  • Status changed from Feedback to Resolved

Merged into master.

#12 Updated by Parag Mhashilkar over 6 years ago

  • Status changed from Resolved to Closed


Also available in: Atom PDF