Job Submission Tutorial Grid Induction NA3 Training Team, Israel

After this tutorial you will be able to submit a job that lasts more than 12 hours.

Creating a proxy every 12 hours is both annoying and problematic for long-running jobs.

Wouldn't it be great if I could put my certificates on some server and let it have the headache with issuing proxies?

That's where MyProxy comes in.

Getting MyProxy

Rather than storing your X.509 credentials (certificate and private key) on each machine you use, you can store them on a MyProxy server and retrieve a proxy credential from the MyProxy repository when needed.

Each VO has its own MyProxy server(s). The environment variable MYPROXY_SERVER usually holds the MyProxy server name

1. Let's create the delegator that will issue proxies on your behalf.:
   

   % myproxy-init -s MyProxyServerName -d -n Enter GRID pass phrase for this identity: Creating proxy ........................................................................ Done Proxy Verify OK Your proxy is valid until: Fri Feb 22 00:11:49 2008 A proxy valid for 168 hours (7.0 days) for user <username> now exists on myproxy.grid.auth.gr.

   
   The -s flag specifies the name of the MyProxy server, the one responsible to issue you the proxies from now on.
   Replace MyProxyServerName with the one specified in the table above according to your VO.
   The -d flag tell the MyProxy server to use your certificate subject instead of the login name
   If you initialize a MyProxy with -d flag, you'll need all subsequent myproxy-xxx command to include it too (because they have to know how to identify you - using the login name or the certificate subject)
   The -n says to require no passphrase, since the working node will be the one asking for a new proxy every 12 hours.
   
   You are asked for the password of your certificate (the one protecting your privet key, remember?).
   The delegator has a lifetime of 1 week by default. This can be changed using -c #hours
   

   From now on you can use the server to issue proxies for you automatically to ensure that your job continues to run past the expiration time of the proxy.
   How do we do that?
   You need to specify this attribute in the JDL file:

   MyProxyServer = “MyProxyServerName";

   e.g. MyProxyServer = “grid001.ct.infn.it”;

2. You can query the time left for your MyProxy using

   % myproxy-info -s MyProxyServerName -d username: <username> owner:<username> timeleft: 167:44:18 (7.0 days)

3. You can always remove your MyProxy using

   % myproxy-destroy -s MyProxyServerName -d Default MyProxy credential for user <username> was successfully removed.

   
   

   Lets learn about Data Management now