FusionGrid Access Proxy 2006-11-16 1:30pm


Goal:

   To renew the FusionGrid X509 Proxy when needed at the time a user logs in.

How to use:

  Default location of a FusionGrid Access Proxy is
     $HOME/.globus/.pfgs/x509_proxy

  Scripts to set the proxy and update X509_USER_PROXY are:
    /u/pshare/PFGS/bin/fusiongrid_access.csh
    /u/pshare/PFGS/bin/fusiongrid_access.sh
  Scripts to only update X509_USER_PROXY are:
    /u/pshare/PFGS/bin/fusiongrid_proxypath.csh
    /u/pshare/PFGS/bin/fusiongrid_proxypath.sh

  For c-shell users:
    $HOME/.cshrc:   source /u/pshare/PFGS/bin/fusiongrid_proxypath.csh
    $HOME/.login:   source /u/pshare/PFGS/bin/fusiongrid_access.csh
  For bash users:
    $HOME/.bashrc:  . /u/pshare/PFGS/bin/fusiongrid_proxypath.sh
    $HOME/.profile: . /u/pshare/PFGS/bin/fusiongrid_access.sh

Explanation:

  Shell script fusiongrid_access.{sh,csh} 
     - Loads globus
     - Invokes /u/pshare/PFGS/python/fusiongrid_access.py
          If time left in the proxy is less than 120 hours
             Asks user for password
             Uses myproxy-get-delegation to set time left to 540 hours
     - Prints out hours left in proxy
     - Invokes /u/pshare/PFGS/python/fusiongrid_proxypath.py
          to set X509_USER_PROXY from value returned
   Arguments to fusiongrid_access.py are passed using environment 
    variable FUSIONGRID_ACCESS_ARGS
   Arguments to fusiongrid_proxypath.py are passed using environment
    variable FUSIONGRID_PROXYPATH_ARGS

  Shell script fusiongrid_proxypath.{sh.csh}
     - Loads globus
     - Invokes /u/pshare/PFGS/python/fusiongrid_proxypath.py
          to set X509_USER_PROXY from value returned
   Arguments to fusiongrid_proxypath.py are passed using environment
    variable FUSIONGRID_PROXYPATH_ARGS

Options to /u/pshare/PFGS/python/fusiongrid_access.py:
Usage: fusiongrid_access.py [-h, --help] [--proxypath=proxypath]
          [--hours=hours] [--minimum_hours=hours]
          [--username=username] [--server=server]
          [--password_timeout=seconds] [--password_tries=count]
 
   Update FusionGrid proxy if remaining hours less than minimum
   Globus must be set up
 
   default proxypath is $HOME/.globus/.pfgs/x509_proxy
   default hours are 540
   default miminum hours are 120
   default username is logged in username
   default server(s) are cert.fusiongrid.org and roam.fusiongrid.og
 
   default password_timeout is 30 seconds
   default password_tries are 3
 
Arguments to /u/pshare/PFGS/python/fusiongrid_proxypath.py:
Usage: fusiongrid_proxypath.py [home]

  $HOME is used if [home] is not given.