Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • If you already have a valid VO CMS signed user grid certificate installed another remote machine like lxplus.cern.ch (usually in ~/.globus/{usercert.pem, userkey.pem}) you can simply copy them to the CMS Connect login machine. Just execute the following command from login-el7.uscms.org and enter the username and password to access that remote machine.

No Format
$ copy_certificates 

			=================================================================================

			This script checks if you have globus certificates or lets you
			copy them from another machine otherwise (default: lxplus.cern.ch)
			NOTE: New certificates need to be requested first. Follow this Twiki for that:

			https://twiki.cern.ch/twiki/bin/view/CMSPublic/WorkBookStartingGrid#ObtainingCert
			=================================================================================


Check for certificates in /home/yourusername/.globus

...

Couldn't find any certificates.
Copying certificates from another machine
Note: This requires certificates to be under the standard $HOME/.globus location
...

Enter hostname of machine to login: lxplus.cern.ch
Enter username for lxplus.cern.ch: yourusername

Warning: Permanently added the RSA host key for IP address '188.184.70.205' to the list of known hosts.

Password: 

usercert.pem                                                                                                                                                                                                                                              100% 3526     3.4KB/s   00:00    
userkey.pem                                                                                                                                                                                                                                               100% 2009     2.0KB/s   00:01
All Done...
You can execute the following to initialize your proxy: 

voms-proxy-init -voms cms -valid 192:00

...


Once you have your certificates available on the submission machine, you will need to initialize the proxy with voms-proxy-init. If you don't initialize your proxy certificate by yourself, or the remaining lifetime of such certificate is short, you will be asked to type your GRID pass phrase to automatically renew your certificate while submitting your jobs.

...