[gridway-user] Re: GridFTP on hydra

[Thomas Bruesemeister]

As we can see the user proxy has not always in the format
x509up_<uid>:

-rw-------  1 agdusr021 gridpool1 5273 Jun 20 
15:50 /tmp/x509up_p22673.fileseeZcY.1
-rw-------  1 fkbreitl  gacg      2938 Jun 18 19:24 /tmp/x509up_u1372
-rw-------  1 iliya     gacg      2925 Jun 20 10:38 /tmp/x509up_u500

I can remember that gsissh automatically created x509up_<uid> files
on hydra for my griduser some time ago.

So the questions is: What caused this change and is this 
intended behaviour?

Best wishes,
Thomas



On Wednesday 20 June 2007 15:37, Thomas Bruesemeister wrote:
> Ok, this is what I have tested so far:
>
>
> Executed as griduser agrid021
> ============================
> ~> /usr/local/gw/bin/gw_tm_mad_ftp
> X509_USER_PROXY: /tmp/x509up_p13643.file0SB1Mt.1
> GW_LOCATION: /usr/local/gw
> GLOBUS_LOCATION: /globus/gt403
> INIT 3 - - - -
> INIT - - SUCCESS -
> START 0 - - - -
> START 0 - SUCCESS -
> MKDIR 0 0 - gsiftp://titan.ari.uni-heidelberg.de/~/mkdir-testdir -
> MKDIR 0 - SUCCESS gsiftp://titan.ari.uni-heidelberg.de/~/mkdir-testdir/
> =============================================
>
>
>
> Executed as gwadmin user
> ================================
> ~> sudo -u agrid021 /usr/local/gw/bin/gw_tm_mad_ftp
> X509_USER_PROXY:
> GW_LOCATION: /usr/local/gw
> GLOBUS_LOCATION: /globus/gt403
> INIT 3 - - - -
> INIT - - SUCCESS -
> START 0 - - - -
> START 0 - SUCCESS -
> MKDIR 0 0 - gsiftp://titan.ari.uni-heidelberg.de/~/mkdir-testdir2 -
> MKDIR 0 - FAILURE gsiftp://titan.ari.uni-heidelberg.de/~/mkdir-testdir2/
> =======================================
>
>
> As you can see the X509_USER_PROXY is not set here.
>
> Now when I explicitly set the X509_USER_PROXY environment variable
> (as gwadmin user) it works:
>
> ====================================
> ~> export X509_USER_PROXY=/tmp/x509up_p13643.file0SB1Mt.1
> ~> sudo -u agrid021 /usr/local/gw/bin/gw_tm_mad_ftp
> X509_USER_PROXY: /tmp/x509up_p13643.file0SB1Mt.1
> GW_LOCATION: /usr/local/gw
> GLOBUS_LOCATION: /globus/gt403
> INIT 3 - - - -
> INIT - - SUCCESS -
> START 0 - - - -
> START 0 - SUCCESS -
> MKDIR 0 0 - gsiftp://titan.ari.uni-heidelberg.de/~/mkdir-testdir2 -
> MKDIR 0 - SUCCESS gsiftp://titan.ari.uni-heidelberg.de/~/mkdir-testdir2/
> =============================================
>
>
> It seems GridWay has a problem to find the Proxy
> (/tmp/x509up_p13643.file0SB1Mt.1) automatically!!!
>
>
>
> Best wishes,
> Thomas
>
> On Wednesday 20 June 2007 15:14, Tino Vazquez wrote:
> > Hi Thomas,
> >
> > The X509_USER_PROXY variable doesn't really need to be set, GridWay will
> > look for the default proxy location (that is, x509up_u<uid>) if that
> > variable is not set. What it needs is for that user (agrid021 in your
> > case) to have a proxy initialized (the proxy is all is needed, GridWay
> > doesn't need the real certificates).
> >
> > So I guess now the question is: do you have the gw_tm_mad_ftp failing for
> > the agrid021 user using sudo even if that user already has a proxy
> > initialized?
> >
> > Regards,
> >
> >    Tino
> >
> > On 6/20/07, Thomas Bruesemeister <tbruese at ari.uni-heidelberg.de> wrote:
> > > Hi,
> > >
> > > I think I found a possible error in the data staging process
> > > on hydra:
> > >
> > > When I try to use the GridWay transfer driver as a griduser directly
> > > it works because the X509_USER_PROXY environment variable
> > > is automatically set when logging into hydra via gsissh:
> > >
> > > agrid021 at hydra>/usr/local/gw/bin/gw_tm_mad_ftp
> > > X509_USER_PROXY: /tmp/x509up_p13643.file0SB1Mt.1
> > >
> > > When I use the driver with the gwadmin account and sudo to act on
> > > behalf of my
> > > griduser this environment variable is not set:
> > >
> > > gwadmin at hydra>sudo -u agrid021 /usr/local/gw/bin/gw_tm_mad_ftp
> > > X509_USER_PROXY:
> > >
> > > Is this a known problem, and if yes, how do I circumvent
> > > this issue? Does GridWay expect the "real", non-proxy certificate
> > > to be available?
> > >
> > >
> > > Best wishes,
> > > Thomas

-- 
Thomas Bruesemeister

Astronomisches Rechen-Institut
am Zentrum für Astronomie
der Universität Heidelberg

Fon: +49 (0)6221 54-1834
Fax: +49 (0)6221 54-1888
tbruese at ari.uni-heidelberg.de