- Gridpp-Dirac-Users - imperial.ac.uk

Upgrade on Thursday 14/12
by Daniela Bauer 14 Jan '16

14 Jan '16

Hi All, we need to upgrade the dirac server. This will happen on Thursday morning. We hope that the impact will be minimal (i.e. the dirac server will only be inaccessible for a couple of minutes), but if there is something you really treasure you should probably finish it by tomorrow night. regards, Daniela -- Sent from the pit of despair ----------------------------------------------------------- daniela.bauer(a)imperial.ac.uk HEP Group/Physics Dep Imperial College London, SW7 2BW Tel: +44-(0)20-75947810 http://www.hep.ph.ic.ac.uk/~dbauer/

1 1

fixes for arc-ces/server reconfiguration
by Daniela Bauer 05 Nov '15

05 Nov '15

Hi All, There is currently a problem with submitting to arc-ces via dirac. (It just doesn't do it.) We *think* we have a solution for it, unfortunately this requires some non-negligible bit of reconfiguration. We intend to do this tomorrow morning. We hope that, while the dirac instance might be temporarily unavailable, none of the running/queued jobs will be lost. But as we all know, hope dies last, so if you are planning to submit any jobs tomorrow, I would recommend holding off until after lunch. Regards, Daniela -- Sent from the pit of despair ----------------------------------------------------------- daniela.bauer(a)imperial.ac.uk HEP Group/Physics Dep Imperial College London, SW7 2BW Tel: +44-(0)20-75947810 http://www.hep.ph.ic.ac.uk/~dbauer/

2 3

dirac file catalogue permissions
by Daniela Bauer 19 Oct '15

19 Oct '15

Hi All, As it turned out we had a very permissive setup for our dirac file catalogue. We've now locked this down a bit. If you find that you can't access your data anymore and/or can't write to a directory you should be able to write to, please let us know. Regards, Daniela -- Sent from the pit of despair ----------------------------------------------------------- daniela.bauer(a)imperial.ac.uk HEP Group/Physics Dep Imperial College London, SW7 2BW Tel: +44-(0)20-75947810 http://www.hep.ph.ic.ac.uk/~dbauer/

1 0

dirac.gridpp.ac.uk upgrade
by Daniela Bauer 07 Oct '15

07 Oct '15

Hi All, This is just a heads up, that in response to a security issue we are obligated to update the dirac server reasonably soon. Currently we are aiming for Wednesday 7th of October. Obviously we are aiming for minimal disruption, but things can and do go wrong. Regards, Daniela -- Sent from the pit of despair ----------------------------------------------------------- daniela.bauer(a)imperial.ac.uk HEP Group/Physics Dep Imperial College London, SW7 2BW Tel: +44-(0)20-75947810 http://www.hep.ph.ic.ac.uk/~dbauer/

1 1

dirac.gridpp.ac.uk testing this afternoon
by Daniela Bauer 01 Oct '15

01 Oct '15

Hi All, We want to test a patch on dirac to enable glexec this afternoon. There is a chance this might break things for a while, but normality (as it is...) should be restored by this evening. regards, Daniela ----------------------------------------------------------- daniela.bauer(a)imperial.ac.uk HEP Group/Physics Dep Imperial College London, SW7 2BW Tel: +44-(0)20-75947810 http://www.hep.ph.ic.ac.uk/~dbauer/

3 2

authentication issues with Dirac v6r13p9
by Frederic Brochu 22 Sep '15

22 Sep '15

Dear all, I am no longer able to copy and register files with dirac-dms-add-file. This command line used to work: dirac-dms-add-file /gridpp/user/f/f.brochu/TomoTherapy/phaseSpace360/XRay_phaseSpace360_5 XRay_phaseSpace360_5 UKI-NORTHGRID-LIV-HEP-disk But when I am doing it now with a different file, I am getting: h-4.1$ dirac-dms-add-file /gridpp/user/f/f.brochu/TomoTherapy/phaseSpace360/XRay_phaseSpace360_7 XRay_phaseSpace360_7 UKI-NORTHGRID-LIV-HEP-disk Uploading /gridpp/user/f/f.brochu/TomoTherapy/phaseSpace360/XRay_phaseSpace360_7 createDirectory: Failed to create directory on storage. srm://hepgrid11.ph.liv.ac.uk:8446/srm/managerv2?SFN=/dpm/ph.liv.ac.uk/home/gridpp/gridpp/user/f/f.brochu/TomoTherapy/phaseSpace360: SRM2Storage.__gfal_exec(gfal_ls): Execution failed. [SE][Ls][] httpg://hepgrid11.ph.liv.ac.uk:8446/srm/managerv2: CGSI-gSOAP running on pcjp reports Error initializing context GSS Major Status: Authentication Failed GSS Minor Status Error Chain: globus_gsi_gssapi: SSLv3 handshake problems globus_gsi_callb Error: failed to upload /gridpp/user/f/f.brochu/TomoTherapy/phaseSpace360/XRay_phaseSpace360_7 to UKI-NORTHGRID-LIV-HEP-disk This is also true for any other site. Further to this, dirac-proxy-init also complains: dirac-proxy-init -g gridpp_user -M Generating proxy... Enter Certificate password: Could not add VOMS extensions to the proxy Failed adding VOMS attribute: Failed to set VOMS attributes. Command: voms-proxy-init -cert "/tmp/x509up_u1008" -key "/tmp/x509up_u1008" -out "/tmp/brochu/tmpuSlB4v" -voms "gridpp:/gridpp" -valid "23:54" -vomses "/var/clus/usera/brochu/gridpp/dirac_ui/etc/grid-security/vomses"; StdOut: Your identity: /C=UK/O=eScience/OU=Cambridge/L=UCS/CN=frederic brochu/CN=proxy Creating temporary proxy Done Contacting voms.gridpp.ac.uk:15000 [/C=UK/O=eScience/OU=Manchester/L=HEP/CN=voms.gridpp.ac.uk] "gridpp" Failed Trying next server for gridpp. Creating temporary proxy Done Contacting voms03.gridpp.ac.uk:15000 [/C=UK/O=eScience/OU=Imperial/L=Physics/CN=voms03.gridpp.ac.uk] "gridpp" Failed Trying next server for gridpp. Creating temporary proxy Done Contacting voms02.gridpp.ac.uk:15000 [/C=UK/O=eScience/OU=Oxford/L=OeSC/CN=voms02.gridpp.ac.uk] "gridpp" Failed ; StdErr: ..................................................... Error: Error during SSL handshake:error:80066405:lib(128):verify_callback:outdated CRL found, revoking all certs till you get new CRL:sslutils.c:2115 outdated CRL found, revoking all certs till you get new CRL Function: verify_callback error:80066411:lib(128):verify_callback:certificate failed verify::sslutils.c:2318 error =CRL has expired subject=/C=UK/O=eScience/OU=Manchester/L=HEP/CN=voms.gridpp.ac.uk issuer =/C=UK/O=eScienceCA/OU=Authority/CN=UK e-Science CA 2B certificate failed verify: error =CRL has expired subject=/C=UK/O=eScience/OU=Manchester/L=HEP/CN=voms.gridpp.ac.uk issuer =/C=UK/O=eScienceCA/OU=Authority/CN=UK e-Science CA 2B Function: verify_callback error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed:s3_clnt.c:1172 certificate verify failed Function: SSL3_GET_SERVER_CERTIFICATE ..................................................... Error: Error during SSL handshake:error:80066405:lib(128):verify_callback:outdated CRL found, revoking all certs till you get new CRL:sslutils.c:2115 outdated CRL found, revoking all certs till you get new CRL Function: verify_callback error:80066411:lib(128):verify_callback:certificate failed verify::sslutils.c:2318 error =CRL has expired subject=/C=UK/O=eScience/OU=Oxford/L=OeSC/CN=voms02.gridpp.ac.uk issuer =/C=UK/O=eScienceCA/OU=Authority/CN=UK e-Science CA 2B certificate failed verify: error =CRL has expired subject=/C=UK/O=eScience/OU=Oxford/L=OeSC/CN=voms02.gridpp.ac.uk issuer =/C=UK/O=eScienceCA/OU=Authority/CN=UK e-Science CA 2B Function: verify_callback error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed:s3_clnt.c:1172 certificate verify failed Function: SSL3_GET_SERVER_CERTIFICATE None of the contacted servers for gridpp were capable of returning a valid AC for the user. Are you sure you are properly registered in the VO? Uploading proxy for gridpp_user... Proxy generated: subject : /C=UK/O=eScience/OU=Cambridge/L=UCS/CN=frederic brochu/CN=proxy issuer : /C=UK/O=eScience/OU=Cambridge/L=UCS/CN=frederic brochu identity : /C=UK/O=eScience/OU=Cambridge/L=UCS/CN=frederic brochu timeleft : 23:59:58 DIRAC group : gridpp_user path : /tmp/x509up_u1008 username : frederic.brochu properties : NormalUser Proxies uploaded: DN | Group | Until (GMT) /C=UK/O=eScience/OU=Cambridge/L=UCS/CN=frederic brochu | gridpp_user | 2016/07/28 15:12 On the other hand, voms-proxy-init works a charm: -sh-4.1$ voms-proxy-init -voms gridpp Enter GRID pass phrase for this identity: Contacting voms03.gridpp.ac.uk:15000 [/C=UK/O=eScience/OU=Imperial/L=Physics/CN=voms03.gridpp.ac.uk] "gridpp"... Remote VOMS server contacted succesfully. Created proxy in /tmp/x509up_u1008. Your proxy is valid until Tue Sep 22 21:48:30 BST 2015 All this is only affecting my ability to upload and register data to storage elements. Job submission and output collection are still working fine. Any idea? I am using the dirac version mentioned in the subject. Best regards, Frederic

5 11

Testing, testing.
by Sam Skipsey 04 Nov '14

04 Nov '14

Hello everyone on the GridPP Dirac users list. This is just a quick test to see if the mailing list works for me (and the rest of us). It also serves to ask the question: where is the Imperial Dirac fork (which I believe exists)? Cheers, Sam

3 3

DIRAC environment
by Raja Nandakumar 04 Nov '14

04 Nov '14

Hi, For those interested in setting up the DIRAC environment in CVMFS, there is the attached bash script that you can source. This will hopefully give you access to the dirac commands available. Notes : 1. Needs CVMFS (LHCb endpoint) available on the machine. 2. I have put in a hack to get the latest version of DIRAC available, rather than hardcoding it. Maybe there is a more elegant method, but I am not an expert... 3. Assumes bash shell It should be easily hackable to do the same thing for a local DIRAC install also. Cheers, Raja.

1 0