Project

General

Profile

Feature #18522

Automatically renew gwms proxies

Added by Marco Mambelli over 1 year ago. Updated about 1 year ago.

Status:
Closed
Priority:
High
Category:
-
Target version:
Start date:
12/11/2017
Due date:
% Done:

0%

Estimated time:
Stakeholders:

OSG

Duration:

Description

This ticket tracks jira: https://jira.opensciencegrid.org/browse/SOFTWARE-3022

From this comment, Brian Bockelman expressed interest in packaging a script that would renew proxies based on configuration.
Requirements
* Allow renewal of multiple pilot proxies
* cron and systemd timer to run the script hourly
* The following information per proxy
** VO
** real or “fake”, if fake:
*** voms cert/key paths
*** one VOMS attribute
** input cert/key paths
** proxy output path
* Optional information
** Additional VOMS attributes
** frequency of update

and connected Github pull request: https://github.com/holzman/glideinWMS/pull/13

Provide a built-in service for frontend admins to renew their frontend and pilot proxies. Prefer voms-proxy-fake to prepare for VOMS Admin server retirement in the OSG.

History

#1 Updated by Marco Mambelli over 1 year ago

  • Assignee set to Marco Mambelli

The current proposal is to merge the pull request and credit it to Brian Linn after few changes suggested (handle user - see pull req. comments).
The mechanism via GWMS config is anyway different.

#2 Updated by Marco Mambelli over 1 year ago

The mechanism in GWMS is currently not used (I surveyed the Frontend configs). It will be modified in the future.

#3 Updated by Marco Mambelli over 1 year ago

  • Status changed from New to Resolved

Bian Lin ported the changes to v3/18522_2 via cherry-picking because the original branch was off master.
The tool is independent from the rest of GlideinWMS (its own config files and startup/cron, no imports)
Contrib lines were added to the 2 main files
Review was OK, merged

#4 Updated by Parag Mhashilkar about 1 year ago

  • Status changed from Resolved to Closed


Also available in: Atom PDF