FusionGrid Access Proxy 2006-11-16 1:30pm
Goal:
To renew the FusionGrid X509 Proxy when needed at the time a user logs in.
How to use:
Default location of a FusionGrid Access Proxy is
$HOME/.globus/.pfgs/x509_proxy
Scripts to set the proxy and update X509_USER_PROXY are:
/u/pshare/PFGS/bin/fusiongrid_access.csh
/u/pshare/PFGS/bin/fusiongrid_access.sh
Scripts to only update X509_USER_PROXY are:
/u/pshare/PFGS/bin/fusiongrid_proxypath.csh
/u/pshare/PFGS/bin/fusiongrid_proxypath.sh
For c-shell users:
$HOME/.cshrc: source /u/pshare/PFGS/bin/fusiongrid_proxypath.csh
$HOME/.login: source /u/pshare/PFGS/bin/fusiongrid_access.csh
For bash users:
$HOME/.bashrc: . /u/pshare/PFGS/bin/fusiongrid_proxypath.sh
$HOME/.profile: . /u/pshare/PFGS/bin/fusiongrid_access.sh
Explanation:
Shell script fusiongrid_access.{sh,csh}
- Loads globus
- Invokes /u/pshare/PFGS/python/fusiongrid_access.py
If time left in the proxy is less than 120 hours
Asks user for password
Uses myproxy-get-delegation to set time left to 540 hours
- Prints out hours left in proxy
- Invokes /u/pshare/PFGS/python/fusiongrid_proxypath.py
to set X509_USER_PROXY from value returned
Arguments to fusiongrid_access.py are passed using environment
variable FUSIONGRID_ACCESS_ARGS
Arguments to fusiongrid_proxypath.py are passed using environment
variable FUSIONGRID_PROXYPATH_ARGS
Shell script fusiongrid_proxypath.{sh.csh}
- Loads globus
- Invokes /u/pshare/PFGS/python/fusiongrid_proxypath.py
to set X509_USER_PROXY from value returned
Arguments to fusiongrid_proxypath.py are passed using environment
variable FUSIONGRID_PROXYPATH_ARGS
Options to /u/pshare/PFGS/python/fusiongrid_access.py:
Usage: fusiongrid_access.py [-h, --help] [--proxypath=proxypath]
[--hours=hours] [--minimum_hours=hours]
[--username=username] [--server=server]
[--password_timeout=seconds] [--password_tries=count]
Update FusionGrid proxy if remaining hours less than minimum
Globus must be set up
default proxypath is $HOME/.globus/.pfgs/x509_proxy
default hours are 540
default miminum hours are 120
default username is logged in username
default server(s) are cert.fusiongrid.org and roam.fusiongrid.og
default password_timeout is 30 seconds
default password_tries are 3
Arguments to /u/pshare/PFGS/python/fusiongrid_proxypath.py:
Usage: fusiongrid_proxypath.py [home]
$HOME is used if [home] is not given.