GridPP proxy for Migdal group and production role.
******************* This email originates from outside Imperial. Do not click on links and attachments unless you recognise the sender. If you trust the sender, add them to your safe senders list https://spam.ic.ac.uk/SpamConsole/Senders.aspx to disable email stamping for this address. ******************* Hello Daniela and Simon, I am a member of GridPP VO. I would like to create a proxy for the Migdal group, with production role. I would like to use this to then register the Migdal files on PPD dCache with the GridPP instance at Imperial. How would I go about creating the Dirac proxy for this? I tried something along the following lines but it did not work. Migdal is not a VO on its own, but is a group within the gridpp VO. dirac-proxy-init -g gridpp.migdal_user -M gridpp:/gridpp/migdal/Role=production -U I am obviously trying to replicate the following voms-proxy-init command within the Dirac environment voms-proxy-init --voms gridpp:/gridpp/migdal/Role=production --valid 168:0 Any help on this would be wonderful! Thanks and Cheers, Raja.
******************* This email originates from outside Imperial. Do not click on links and attachments unless you recognise the sender. If you trust the sender, add them to your safe senders list https://spam.ic.ac.uk/SpamConsole/Senders.aspx to disable email stamping for this address. ******************* Hi Raja, We've never worked with groups on our DIRAC instance, but we have a couple of VOs that use a production role. To be honest I am not sure how well groups work, they seem to have fallen out of fashion. This needs to be set up by hand, so I can try to set up this group/role for you. I've made a group called gridpp_migdal_user and put you and Chris Brew in it (copied form the gridpp voms server). Could you try it out ? ( dirac-proxy-init -g gridpp_migdal_user) On a more fundamental level, I'm not sure the gridpp VO is meant to be used for production level work, it's by construction open to all. Regards, Daniela On Tue, 4 Oct 2022 at 10:29, Raja Nandakumar <raja.nandakumar@cern.ch> wrote:
Hello Daniela and Simon,
I am a member of GridPP VO. I would like to create a proxy for the Migdal group, with production role. I would like to use this to then register the Migdal files on PPD dCache with the GridPP instance at Imperial.
How would I go about creating the Dirac proxy for this? I tried something along the following lines but it did not work. Migdal is not a VO on its own, but is a group within the gridpp VO.
dirac-proxy-init -g gridpp.migdal_user -M gridpp:/gridpp/migdal/Role=production -U
I am obviously trying to replicate the following voms-proxy-init command within the Dirac environment
voms-proxy-init --voms gridpp:/gridpp/migdal/Role=production --valid 168:0
Any help on this would be wonderful!
Thanks and Cheers, Raja.
-- ----------------------------------------------------------- daniela.bauer@imperial.ac.uk HEP Group/Physics Dep Imperial College London, SW7 2BW Tel: Working from home, please use email. http://www.hep.ph.ic.ac.uk/~dbauer/
******************* This email originates from outside Imperial. Do not click on links and attachments unless you recognise the sender. If you trust the sender, add them to your safe senders list https://spam.ic.ac.uk/SpamConsole/Senders.aspx to disable email stamping for this address. ******************* Also, I assume you will be writing those files under /gridpp/migdal as the start of your LFN ? Daniela On Tue, 4 Oct 2022 at 10:57, Daniela Bauer < daniela.bauer.grid@googlemail.com> wrote:
Hi Raja,
We've never worked with groups on our DIRAC instance, but we have a couple of VOs that use a production role. To be honest I am not sure how well groups work, they seem to have fallen out of fashion. This needs to be set up by hand, so I can try to set up this group/role for you. I've made a group called gridpp_migdal_user and put you and Chris Brew in it (copied form the gridpp voms server). Could you try it out ? ( dirac-proxy-init -g gridpp_migdal_user) On a more fundamental level, I'm not sure the gridpp VO is meant to be used for production level work, it's by construction open to all.
Regards, Daniela
On Tue, 4 Oct 2022 at 10:29, Raja Nandakumar <raja.nandakumar@cern.ch> wrote:
Hello Daniela and Simon,
I am a member of GridPP VO. I would like to create a proxy for the Migdal group, with production role. I would like to use this to then register the Migdal files on PPD dCache with the GridPP instance at Imperial.
How would I go about creating the Dirac proxy for this? I tried something along the following lines but it did not work. Migdal is not a VO on its own, but is a group within the gridpp VO.
dirac-proxy-init -g gridpp.migdal_user -M gridpp:/gridpp/migdal/Role=production -U
I am obviously trying to replicate the following voms-proxy-init command within the Dirac environment
voms-proxy-init --voms gridpp:/gridpp/migdal/Role=production --valid 168:0
Any help on this would be wonderful!
Thanks and Cheers, Raja.
--
----------------------------------------------------------- daniela.bauer@imperial.ac.uk HEP Group/Physics Dep Imperial College London, SW7 2BW Tel: Working from home, please use email. http://www.hep.ph.ic.ac.uk/~dbauer/
-- ----------------------------------------------------------- daniela.bauer@imperial.ac.uk HEP Group/Physics Dep Imperial College London, SW7 2BW Tel: Working from home, please use email. http://www.hep.ph.ic.ac.uk/~dbauer/
******************* This email originates from outside Imperial. Do not click on links and attachments unless you recognise the sender. If you trust the sender, add them to your safe senders list https://spam.ic.ac.uk/SpamConsole/Senders.aspx to disable email stamping for this address. ******************* Hi Daniela, Yes! Cheers, Raja. On 04/10/2022 11:05, Daniela Bauer wrote:
Also, I assume you will be writing those files under /gridpp/migdal as the start of your LFN ?
Daniela
On Tue, 4 Oct 2022 at 10:57, Daniela Bauer <daniela.bauer.grid@googlemail.com> wrote:
Hi Raja,
We've never worked with groups on our DIRAC instance, but we have a couple of VOs that use a production role. To be honest I am not sure how well groups work, they seem to have fallen out of fashion. This needs to be set up by hand, so I can try to set up this group/role for you. I've made a group called gridpp_migdal_user and put you and Chris Brew in it (copied form the gridpp voms server). Could you try it out ? ( dirac-proxy-init -g gridpp_migdal_user) On a more fundamental level, I'm not sure the gridpp VO is meant to be used for production level work, it's by construction open to all.
Regards, Daniela
On Tue, 4 Oct 2022 at 10:29, Raja Nandakumar <raja.nandakumar@cern.ch> wrote:
Hello Daniela and Simon,
I am a member of GridPP VO. I would like to create a proxy for the Migdal group, with production role. I would like to use this to then register the Migdal files on PPD dCache with the GridPP instance at Imperial.
How would I go about creating the Dirac proxy for this? I tried something along the following lines but it did not work. Migdal is not a VO on its own, but is a group within the gridpp VO.
dirac-proxy-init -g gridpp.migdal_user -M gridpp:/gridpp/migdal/Role=production -U
I am obviously trying to replicate the following voms-proxy-init command within the Dirac environment
voms-proxy-init --voms gridpp:/gridpp/migdal/Role=production --valid 168:0
Any help on this would be wonderful!
Thanks and Cheers, Raja.
--
----------------------------------------------------------- daniela.bauer@imperial.ac.uk HEP Group/Physics Dep Imperial College London, SW7 2BW Tel: Working from home, please use email. http://www.hep.ph.ic.ac.uk/~dbauer/
--
----------------------------------------------------------- daniela.bauer@imperial.ac.uk HEP Group/Physics Dep Imperial College London, SW7 2BW Tel: Working from home, please use email. http://www.hep.ph.ic.ac.uk/~dbauer/
Hi Daniela, So, to explain the context here - we're trying out the GridPP VO Group approach here for Migdal as an experiment to avoid them needing to make a "whole VO" (the context originally was that they need to manage space on Antares, and policy is such that access to that requires VOMS aware credentials, but otherwise Migdal didn't think they needed other features). Tbh, it's a bit surprising to me that we're already growing beyond that use case here! (I suggested GridPP VO groups as a workaround just to get Antares working.) Sam On Tue, 4 Oct 2022, 10:58 Daniela Bauer, <daniela.bauer.grid@googlemail.com> wrote:
This email from daniela.bauer.grid@googlemail.com originates from outside Imperial. Do not click on links and attachments unless you recognise the sender. If you trust the sender, add them to your safe senders list <https://spam.ic.ac.uk/SpamConsole/Senders.aspx> to disable email stamping for this address.
Hi Raja,
We've never worked with groups on our DIRAC instance, but we have a couple of VOs that use a production role. To be honest I am not sure how well groups work, they seem to have fallen out of fashion. This needs to be set up by hand, so I can try to set up this group/role for you. I've made a group called gridpp_migdal_user and put you and Chris Brew in it (copied form the gridpp voms server). Could you try it out ? ( dirac-proxy-init -g gridpp_migdal_user) On a more fundamental level, I'm not sure the gridpp VO is meant to be used for production level work, it's by construction open to all.
Regards, Daniela
On Tue, 4 Oct 2022 at 10:29, Raja Nandakumar <raja.nandakumar@cern.ch> wrote:
Hello Daniela and Simon,
I am a member of GridPP VO. I would like to create a proxy for the Migdal group, with production role. I would like to use this to then register the Migdal files on PPD dCache with the GridPP instance at Imperial.
How would I go about creating the Dirac proxy for this? I tried something along the following lines but it did not work. Migdal is not a VO on its own, but is a group within the gridpp VO.
dirac-proxy-init -g gridpp.migdal_user -M gridpp:/gridpp/migdal/Role=production -U
I am obviously trying to replicate the following voms-proxy-init command within the Dirac environment
voms-proxy-init --voms gridpp:/gridpp/migdal/Role=production --valid 168:0
Any help on this would be wonderful!
Thanks and Cheers, Raja.
--
----------------------------------------------------------- daniela.bauer@imperial.ac.uk HEP Group/Physics Dep Imperial College London, SW7 2BW Tel: Working from home, please use email. http://www.hep.ph.ic.ac.uk/~dbauer/ -- _______________________________________________ Gridpp-Dirac-Users mailing list Gridpp-Dirac-Users@imperial.ac.uk https://mailman.ic.ac.uk/mailman/listinfo/gridpp-dirac-users
Hi Sam, We are just trying to be pro-active here and get the files into the Dirac File Catalog, for longer term information accessibility. It is a good question as to whether this is critical. For now, Migdal does not need this, but there is a chance that access to the file catalog may make their life easier in the future. And indeed if we did not need to register the files in Dirac, then the need for this Dirac role will vanish. Cheers, Raja. On 04/10/2022 11:08, Sam Skipsey wrote:
Hi Daniela,
So, to explain the context here - we're trying out the GridPP VO Group approach here for Migdal as an experiment to avoid them needing to make a "whole VO" (the context originally was that they need to manage space on Antares, and policy is such that access to that requires VOMS aware credentials, but otherwise Migdal didn't think they needed other features).
Tbh, it's a bit surprising to me that we're already growing beyond that use case here! (I suggested GridPP VO groups as a workaround just to get Antares working.)
Sam
On Tue, 4 Oct 2022, 10:58 Daniela Bauer, <daniela.bauer.grid@googlemail.com> wrote:
This email from daniela.bauer.grid@googlemail.com originates from outside Imperial. Do not click on links and attachments unless you recognise the sender. If you trust the sender, add them to your safe senders list <https://spam.ic.ac.uk/SpamConsole/Senders.aspx> to disable email stamping for this address.
Hi Raja,
We've never worked with groups on our DIRAC instance, but we have a couple of VOs that use a production role. To be honest I am not sure how well groups work, they seem to have fallen out of fashion. This needs to be set up by hand, so I can try to set up this group/role for you. I've made a group called gridpp_migdal_user and put you and Chris Brew in it (copied form the gridpp voms server). Could you try it out ? ( dirac-proxy-init -g gridpp_migdal_user) On a more fundamental level, I'm not sure the gridpp VO is meant to be used for production level work, it's by construction open to all.
Regards, Daniela
On Tue, 4 Oct 2022 at 10:29, Raja Nandakumar <raja.nandakumar@cern.ch> wrote:
Hello Daniela and Simon,
I am a member of GridPP VO. I would like to create a proxy for the Migdal group, with production role. I would like to use this to then register the Migdal files on PPD dCache with the GridPP instance at Imperial.
How would I go about creating the Dirac proxy for this? I tried something along the following lines but it did not work. Migdal is not a VO on its own, but is a group within the gridpp VO.
dirac-proxy-init -g gridpp.migdal_user -M gridpp:/gridpp/migdal/Role=production -U
I am obviously trying to replicate the following voms-proxy-init command within the Dirac environment
voms-proxy-init --voms gridpp:/gridpp/migdal/Role=production --valid 168:0
Any help on this would be wonderful!
Thanks and Cheers, Raja.
--
----------------------------------------------------------- daniela.bauer@imperial.ac.uk HEP Group/Physics Dep Imperial College London, SW7 2BW Tel: Working from home, please use email. http://www.hep.ph.ic.ac.uk/~dbauer/ -- _______________________________________________ Gridpp-Dirac-Users mailing list Gridpp-Dirac-Users@imperial.ac.uk https://mailman.ic.ac.uk/mailman/listinfo/gridpp-dirac-users
******************* This email originates from outside Imperial. Do not click on links and attachments unless you recognise the sender. If you trust the sender, add them to your safe senders list https://spam.ic.ac.uk/SpamConsole/Senders.aspx to disable email stamping for this address. ******************* Hi Daniela, Thanks for the quick response! I get an error Requested group gridpp_migdal_user is not valid for DN /DC=ch/DC=cern/OU=Organic Units/OU=Users/CN=nraja/CN=471708/CN=Raja Nandakumar Note - I believe that the role needed in Antares and RAL PPD dCache is Production (not user). Thanks and Cheers, Raja. On 04/10/2022 10:57, Daniela Bauer wrote:
Hi Raja,
We've never worked with groups on our DIRAC instance, but we have a couple of VOs that use a production role. To be honest I am not sure how well groups work, they seem to have fallen out of fashion. This needs to be set up by hand, so I can try to set up this group/role for you. I've made a group called gridpp_migdal_user and put you and Chris Brew in it (copied form the gridpp voms server). Could you try it out ? ( dirac-proxy-init -g gridpp_migdal_user) On a more fundamental level, I'm not sure the gridpp VO is meant to be used for production level work, it's by construction open to all.
Regards, Daniela
On Tue, 4 Oct 2022 at 10:29, Raja Nandakumar <raja.nandakumar@cern.ch> wrote:
Hello Daniela and Simon,
I am a member of GridPP VO. I would like to create a proxy for the Migdal group, with production role. I would like to use this to then register the Migdal files on PPD dCache with the GridPP instance at Imperial.
How would I go about creating the Dirac proxy for this? I tried something along the following lines but it did not work. Migdal is not a VO on its own, but is a group within the gridpp VO.
dirac-proxy-init -g gridpp.migdal_user -M gridpp:/gridpp/migdal/Role=production -U
I am obviously trying to replicate the following voms-proxy-init command within the Dirac environment
voms-proxy-init --voms gridpp:/gridpp/migdal/Role=production --valid 168:0
Any help on this would be wonderful!
Thanks and Cheers, Raja.
--
----------------------------------------------------------- daniela.bauer@imperial.ac.uk HEP Group/Physics Dep Imperial College London, SW7 2BW Tel: Working from home, please use email. http://www.hep.ph.ic.ac.uk/~dbauer/
******************* This email originates from outside Imperial. Do not click on links and attachments unless you recognise the sender. If you trust the sender, add them to your safe senders list https://spam.ic.ac.uk/SpamConsole/Senders.aspx to disable email stamping for this address. ******************* That's because I actually called the group gridpp_migdal_production, but apparently I am incapable of writing a coherent email this morning. I also need to make a sub-directory in the file catalog, preferably only writable by that goup. Cheers, Daniela On Tue, 4 Oct 2022 at 11:30, Raja Nandakumar <raja.nandakumar@cern.ch> wrote:
Hi Daniela,
Thanks for the quick response! I get an error
Requested group gridpp_migdal_user is not valid for DN /DC=ch/DC=cern/OU=Organic Units/OU=Users/CN=nraja/CN=471708/CN=Raja Nandakumar
Note - I believe that the role needed in Antares and RAL PPD dCache is Production (not user).
Thanks and Cheers, Raja.
On 04/10/2022 10:57, Daniela Bauer wrote:
Hi Raja,
We've never worked with groups on our DIRAC instance, but we have a couple of VOs that use a production role. To be honest I am not sure how well groups work, they seem to have fallen out of fashion. This needs to be set up by hand, so I can try to set up this group/role for you. I've made a group called gridpp_migdal_user and put you and Chris Brew in it (copied form the gridpp voms server). Could you try it out ? ( dirac-proxy-init -g gridpp_migdal_user) On a more fundamental level, I'm not sure the gridpp VO is meant to be used for production level work, it's by construction open to all.
Regards, Daniela
On Tue, 4 Oct 2022 at 10:29, Raja Nandakumar <raja.nandakumar@cern.ch> wrote:
Hello Daniela and Simon,
I am a member of GridPP VO. I would like to create a proxy for the Migdal group, with production role. I would like to use this to then register the Migdal files on PPD dCache with the GridPP instance at Imperial.
How would I go about creating the Dirac proxy for this? I tried something along the following lines but it did not work. Migdal is not a VO on its own, but is a group within the gridpp VO.
dirac-proxy-init -g gridpp.migdal_user -M gridpp:/gridpp/migdal/Role=production -U
I am obviously trying to replicate the following voms-proxy-init command within the Dirac environment
voms-proxy-init --voms gridpp:/gridpp/migdal/Role=production --valid 168:0
Any help on this would be wonderful!
Thanks and Cheers, Raja.
--
----------------------------------------------------------- daniela.bauer@imperial.ac.uk HEP Group/Physics Dep Imperial College London, SW7 2BW Tel: Working from home, please use email. http://www.hep.ph.ic.ac.uk/~dbauer/
-- ----------------------------------------------------------- daniela.bauer@imperial.ac.uk HEP Group/Physics Dep Imperial College London, SW7 2BW Tel: Working from home, please use email. http://www.hep.ph.ic.ac.uk/~dbauer/
******************* This email originates from outside Imperial. Do not click on links and attachments unless you recognise the sender. If you trust the sender, add them to your safe senders list https://spam.ic.ac.uk/SpamConsole/Senders.aspx to disable email stamping for this address. ******************* Hi Daniela, Thanks! This is better - at least we seem to be getting somewhere. The error now is Trying next server for gridpp. Creating temporary proxy Done Contacting voms03.gridpp.ac.uk:15000 [/C=UK/O=eScience/OU=Imperial/L=Physics/CN=voms03.gridpp.ac.uk] "gridpp" Failed ; StdErr: .............................................................................. Error: gridpp: Unable to satisfy G/gridpp/migdal/Riole=production request! ................................................. Error: gridpp: Unable to satisfy G/gridpp/migdal/Riole=production request! ...................... Error: gridpp: Unable to satisfy G/gridpp/migdal/Riole=production request! .................................... Error: gridpp: Unable to satisfy G/gridpp/migdal/Riole=production request! ............................................. Error: gridpp: Unable to satisfy G/gridpp/migdal/Riole=production request! ........................ Error: gridpp: Unable to satisfy G/gridpp/migdal/Riole=production request! None of the contacted servers for gridpp were capable of returning a valid AC for the user. ) Are you sure you are properly registered in the VO? Cheers, Raja. On 04/10/2022 11:36, Daniela Bauer wrote:
That's because I actually called the group gridpp_migdal_production, but apparently I am incapable of writing a coherent email this morning. I also need to make a sub-directory in the file catalog, preferably only writable by that goup.
Cheers, Daniela
On Tue, 4 Oct 2022 at 11:30, Raja Nandakumar <raja.nandakumar@cern.ch> wrote:
Hi Daniela,
Thanks for the quick response! I get an error
Requested group gridpp_migdal_user is not valid for DN /DC=ch/DC=cern/OU=Organic Units/OU=Users/CN=nraja/CN=471708/CN=Raja Nandakumar
Note - I believe that the role needed in Antares and RAL PPD dCache is Production (not user).
Thanks and Cheers, Raja.
On 04/10/2022 10:57, Daniela Bauer wrote:
Hi Raja,
We've never worked with groups on our DIRAC instance, but we have a couple of VOs that use a production role. To be honest I am not sure how well groups work, they seem to have fallen out of fashion. This needs to be set up by hand, so I can try to set up this group/role for you. I've made a group called gridpp_migdal_user and put you and Chris Brew in it (copied form the gridpp voms server). Could you try it out ? ( dirac-proxy-init -g gridpp_migdal_user) On a more fundamental level, I'm not sure the gridpp VO is meant to be used for production level work, it's by construction open to all.
Regards, Daniela
On Tue, 4 Oct 2022 at 10:29, Raja Nandakumar <raja.nandakumar@cern.ch> wrote:
Hello Daniela and Simon,
I am a member of GridPP VO. I would like to create a proxy for the Migdal group, with production role. I would like to use this to then register the Migdal files on PPD dCache with the GridPP instance at Imperial.
How would I go about creating the Dirac proxy for this? I tried something along the following lines but it did not work. Migdal is not a VO on its own, but is a group within the gridpp VO.
dirac-proxy-init -g gridpp.migdal_user -M gridpp:/gridpp/migdal/Role=production -U
I am obviously trying to replicate the following voms-proxy-init command within the Dirac environment
voms-proxy-init --voms gridpp:/gridpp/migdal/Role=production --valid 168:0
Any help on this would be wonderful!
Thanks and Cheers, Raja.
--
----------------------------------------------------------- daniela.bauer@imperial.ac.uk HEP Group/Physics Dep Imperial College London, SW7 2BW Tel: Working from home, please use email. http://www.hep.ph.ic.ac.uk/~dbauer/
--
----------------------------------------------------------- daniela.bauer@imperial.ac.uk HEP Group/Physics Dep Imperial College London, SW7 2BW Tel: Working from home, please use email. http://www.hep.ph.ic.ac.uk/~dbauer/
Is it supposed to say 'Riole=production' ? On Tue, 4 Oct 2022, 11:47 Raja Nandakumar, <raja.nandakumar@cern.ch> wrote:
This email from raja.nandakumar@cern.ch originates from outside Imperial. Do not click on links and attachments unless you recognise the sender. If you trust the sender, add them to your safe senders list <https://spam.ic.ac.uk/SpamConsole/Senders.aspx> to disable email stamping for this address.
Hi Daniela,
Thanks! This is better - at least we seem to be getting somewhere. The error now is
Trying next server for gridpp. Creating temporary proxy Done Contacting voms03.gridpp.ac.uk:15000 [/C=UK/O=eScience/OU=Imperial/L=Physics/CN=voms03.gridpp.ac.uk] "gridpp" Failed ; StdErr: .............................................................................. Error: gridpp: Unable to satisfy G/gridpp/migdal/Riole=production request! ................................................. Error: gridpp: Unable to satisfy G/gridpp/migdal/Riole=production request! ...................... Error: gridpp: Unable to satisfy G/gridpp/migdal/Riole=production request! .................................... Error: gridpp: Unable to satisfy G/gridpp/migdal/Riole=production request! ............................................. Error: gridpp: Unable to satisfy G/gridpp/migdal/Riole=production request! ........................ Error: gridpp: Unable to satisfy G/gridpp/migdal/Riole=production request!
None of the contacted servers for gridpp were capable of returning a valid AC for the user. )
Are you sure you are properly registered in the VO?
Cheers, Raja.
On 04/10/2022 11:36, Daniela Bauer wrote:
That's because I actually called the group gridpp_migdal_production, but apparently I am incapable of writing a coherent email this morning. I also need to make a sub-directory in the file catalog, preferably only writable by that goup.
Cheers, Daniela
On Tue, 4 Oct 2022 at 11:30, Raja Nandakumar <raja.nandakumar@cern.ch> wrote:
Hi Daniela,
Thanks for the quick response! I get an error
Requested group gridpp_migdal_user is not valid for DN /DC=ch/DC=cern/OU=Organic Units/OU=Users/CN=nraja/CN=471708/CN=Raja Nandakumar
Note - I believe that the role needed in Antares and RAL PPD dCache is Production (not user).
Thanks and Cheers, Raja.
On 04/10/2022 10:57, Daniela Bauer wrote:
Hi Raja,
We've never worked with groups on our DIRAC instance, but we have a couple of VOs that use a production role. To be honest I am not sure how well groups work, they seem to have fallen out of fashion. This needs to be set up by hand, so I can try to set up this group/role for you. I've made a group called gridpp_migdal_user and put you and Chris Brew in it (copied form the gridpp voms server). Could you try it out ? ( dirac-proxy-init -g gridpp_migdal_user) On a more fundamental level, I'm not sure the gridpp VO is meant to be used for production level work, it's by construction open to all.
Regards, Daniela
On Tue, 4 Oct 2022 at 10:29, Raja Nandakumar <raja.nandakumar@cern.ch> wrote:
Hello Daniela and Simon,
I am a member of GridPP VO. I would like to create a proxy for the Migdal group, with production role. I would like to use this to then register the Migdal files on PPD dCache with the GridPP instance at Imperial.
How would I go about creating the Dirac proxy for this? I tried something along the following lines but it did not work. Migdal is not a VO on its own, but is a group within the gridpp VO.
dirac-proxy-init -g gridpp.migdal_user -M gridpp:/gridpp/migdal/Role=production -U
I am obviously trying to replicate the following voms-proxy-init command within the Dirac environment
voms-proxy-init --voms gridpp:/gridpp/migdal/Role=production --valid 168:0
Any help on this would be wonderful!
Thanks and Cheers, Raja.
--
----------------------------------------------------------- daniela.bauer@imperial.ac.uk HEP Group/Physics Dep Imperial College London, SW7 2BW Tel: Working from home, please use email. http://www.hep.ph.ic.ac.uk/~dbauer/
--
----------------------------------------------------------- daniela.bauer@imperial.ac.uk HEP Group/Physics Dep Imperial College London, SW7 2BW Tel: Working from home, please use email. http://www.hep.ph.ic.ac.uk/~dbauer/
-- _______________________________________________ Gridpp-Dirac-Users mailing list Gridpp-Dirac-Users@imperial.ac.uk https://mailman.ic.ac.uk/mailman/listinfo/gridpp-dirac-users
******************* This email originates from outside Imperial. Do not click on links and attachments unless you recognise the sender. If you trust the sender, add them to your safe senders list https://spam.ic.ac.uk/SpamConsole/Senders.aspx to disable email stamping for this address. ******************* I have now fixed the "Riole" typo and replaced it with Role. Sigh. On Tue, 4 Oct 2022 at 11:47, Raja Nandakumar <raja.nandakumar@cern.ch> wrote:
Hi Daniela,
Thanks! This is better - at least we seem to be getting somewhere. The error now is
Trying next server for gridpp. Creating temporary proxy Done Contacting voms03.gridpp.ac.uk:15000 [/C=UK/O=eScience/OU=Imperial/L=Physics/CN=voms03.gridpp.ac.uk] "gridpp" Failed ; StdErr: .............................................................................. Error: gridpp: Unable to satisfy G/gridpp/migdal/Riole=production request! ................................................. Error: gridpp: Unable to satisfy G/gridpp/migdal/Riole=production request! ...................... Error: gridpp: Unable to satisfy G/gridpp/migdal/Riole=production request! .................................... Error: gridpp: Unable to satisfy G/gridpp/migdal/Riole=production request! ............................................. Error: gridpp: Unable to satisfy G/gridpp/migdal/Riole=production request! ........................ Error: gridpp: Unable to satisfy G/gridpp/migdal/Riole=production request!
None of the contacted servers for gridpp were capable of returning a valid AC for the user. )
Are you sure you are properly registered in the VO?
Cheers, Raja.
On 04/10/2022 11:36, Daniela Bauer wrote:
That's because I actually called the group gridpp_migdal_production, but apparently I am incapable of writing a coherent email this morning. I also need to make a sub-directory in the file catalog, preferably only writable by that goup.
Cheers, Daniela
On Tue, 4 Oct 2022 at 11:30, Raja Nandakumar <raja.nandakumar@cern.ch> wrote:
Hi Daniela,
Thanks for the quick response! I get an error
Requested group gridpp_migdal_user is not valid for DN /DC=ch/DC=cern/OU=Organic Units/OU=Users/CN=nraja/CN=471708/CN=Raja Nandakumar
Note - I believe that the role needed in Antares and RAL PPD dCache is Production (not user).
Thanks and Cheers, Raja.
On 04/10/2022 10:57, Daniela Bauer wrote:
Hi Raja,
We've never worked with groups on our DIRAC instance, but we have a couple of VOs that use a production role. To be honest I am not sure how well groups work, they seem to have fallen out of fashion. This needs to be set up by hand, so I can try to set up this group/role for you. I've made a group called gridpp_migdal_user and put you and Chris Brew in it (copied form the gridpp voms server). Could you try it out ? ( dirac-proxy-init -g gridpp_migdal_user) On a more fundamental level, I'm not sure the gridpp VO is meant to be used for production level work, it's by construction open to all.
Regards, Daniela
On Tue, 4 Oct 2022 at 10:29, Raja Nandakumar <raja.nandakumar@cern.ch> wrote:
Hello Daniela and Simon,
I am a member of GridPP VO. I would like to create a proxy for the Migdal group, with production role. I would like to use this to then register the Migdal files on PPD dCache with the GridPP instance at Imperial.
How would I go about creating the Dirac proxy for this? I tried something along the following lines but it did not work. Migdal is not a VO on its own, but is a group within the gridpp VO.
dirac-proxy-init -g gridpp.migdal_user -M gridpp:/gridpp/migdal/Role=production -U
I am obviously trying to replicate the following voms-proxy-init command within the Dirac environment
voms-proxy-init --voms gridpp:/gridpp/migdal/Role=production --valid 168:0
Any help on this would be wonderful!
Thanks and Cheers, Raja.
--
----------------------------------------------------------- daniela.bauer@imperial.ac.uk HEP Group/Physics Dep Imperial College London, SW7 2BW Tel: Working from home, please use email. http://www.hep.ph.ic.ac.uk/~dbauer/
--
----------------------------------------------------------- daniela.bauer@imperial.ac.uk HEP Group/Physics Dep Imperial College London, SW7 2BW Tel: Working from home, please use email. http://www.hep.ph.ic.ac.uk/~dbauer/
-- ----------------------------------------------------------- daniela.bauer@imperial.ac.uk HEP Group/Physics Dep Imperial College London, SW7 2BW Tel: Working from home, please use email. http://www.hep.ph.ic.ac.uk/~dbauer/
******************* This email originates from outside Imperial. Do not click on links and attachments unless you recognise the sender. If you trust the sender, add them to your safe senders list https://spam.ic.ac.uk/SpamConsole/Senders.aspx to disable email stamping for this address. ******************* Thanks - it works now! Cheers, Raja. On 04/10/2022 11:51, Daniela Bauer wrote:
I have now fixed the "Riole" typo and replaced it with Role. Sigh.
On Tue, 4 Oct 2022 at 11:47, Raja Nandakumar <raja.nandakumar@cern.ch> wrote:
Hi Daniela,
Thanks! This is better - at least we seem to be getting somewhere. The error now is
Trying next server for gridpp. Creating temporary proxy Done Contacting voms03.gridpp.ac.uk:15000 <http://voms03.gridpp.ac.uk:15000> [/C=UK/O=eScience/OU=Imperial/L=Physics/CN=voms03.gridpp.ac.uk <http://voms03.gridpp.ac.uk>] "gridpp" Failed ; StdErr: .............................................................................. Error: gridpp: Unable to satisfy G/gridpp/migdal/Riole=production request! ................................................. Error: gridpp: Unable to satisfy G/gridpp/migdal/Riole=production request! ...................... Error: gridpp: Unable to satisfy G/gridpp/migdal/Riole=production request! .................................... Error: gridpp: Unable to satisfy G/gridpp/migdal/Riole=production request! ............................................. Error: gridpp: Unable to satisfy G/gridpp/migdal/Riole=production request! ........................ Error: gridpp: Unable to satisfy G/gridpp/migdal/Riole=production request!
None of the contacted servers for gridpp were capable of returning a valid AC for the user. )
Are you sure you are properly registered in the VO?
Cheers, Raja.
On 04/10/2022 11:36, Daniela Bauer wrote:
That's because I actually called the group gridpp_migdal_production, but apparently I am incapable of writing a coherent email this morning. I also need to make a sub-directory in the file catalog, preferably only writable by that goup.
Cheers, Daniela
On Tue, 4 Oct 2022 at 11:30, Raja Nandakumar <raja.nandakumar@cern.ch> wrote:
Hi Daniela,
Thanks for the quick response! I get an error
Requested group gridpp_migdal_user is not valid for DN /DC=ch/DC=cern/OU=Organic Units/OU=Users/CN=nraja/CN=471708/CN=Raja Nandakumar
Note - I believe that the role needed in Antares and RAL PPD dCache is Production (not user).
Thanks and Cheers, Raja.
On 04/10/2022 10:57, Daniela Bauer wrote:
Hi Raja,
We've never worked with groups on our DIRAC instance, but we have a couple of VOs that use a production role. To be honest I am not sure how well groups work, they seem to have fallen out of fashion. This needs to be set up by hand, so I can try to set up this group/role for you. I've made a group called gridpp_migdal_user and put you and Chris Brew in it (copied form the gridpp voms server). Could you try it out ? ( dirac-proxy-init -g gridpp_migdal_user) On a more fundamental level, I'm not sure the gridpp VO is meant to be used for production level work, it's by construction open to all.
Regards, Daniela
On Tue, 4 Oct 2022 at 10:29, Raja Nandakumar <raja.nandakumar@cern.ch> wrote:
Hello Daniela and Simon,
I am a member of GridPP VO. I would like to create a proxy for the Migdal group, with production role. I would like to use this to then register the Migdal files on PPD dCache with the GridPP instance at Imperial.
How would I go about creating the Dirac proxy for this? I tried something along the following lines but it did not work. Migdal is not a VO on its own, but is a group within the gridpp VO.
dirac-proxy-init -g gridpp.migdal_user -M gridpp:/gridpp/migdal/Role=production -U
I am obviously trying to replicate the following voms-proxy-init command within the Dirac environment
voms-proxy-init --voms gridpp:/gridpp/migdal/Role=production --valid 168:0
Any help on this would be wonderful!
Thanks and Cheers, Raja.
--
----------------------------------------------------------- daniela.bauer@imperial.ac.uk HEP Group/Physics Dep Imperial College London, SW7 2BW Tel: Working from home, please use email. http://www.hep.ph.ic.ac.uk/~dbauer/
--
----------------------------------------------------------- daniela.bauer@imperial.ac.uk HEP Group/Physics Dep Imperial College London, SW7 2BW Tel: Working from home, please use email. http://www.hep.ph.ic.ac.uk/~dbauer/
--
----------------------------------------------------------- daniela.bauer@imperial.ac.uk HEP Group/Physics Dep Imperial College London, SW7 2BW Tel: Working from home, please use email. http://www.hep.ph.ic.ac.uk/~dbauer/
participants (3)
-
Daniela Bauer
-
Raja Nandakumar
-
Sam Skipsey