Hi Everyone,
I'd like to run multijobs on a Globus 4.0.8 host running GridWay,
which will eventually route the jobs to a couple clusters also running
GT 4.0.8. As far as I can tell from the GT4 GRAM Security Model
document [1], MultiJobs are supposed to have a full credential
delegated so they can start subjobs.
This doesn't seem to be happening though, since I get proxy errors
from GridWay. For example, when I submit this job (http://pastie.org/279433
), I get the following error in the GridWay log:
Thu Sep 25 10:50:00 2008 [EM][E]: Job submission failed: Limited proxy
is not accepted
And when I check the delegated proxy with grid-proxy-info, I find that
it's a Proxy draft (pre-RFC) compliant limited proxy.
I have found that if I delegate a full credential with globus-
credential-delegate, and then set try to use the -Jf option in globus-
credential-delegate, my job fails because the credential doesn't
actually get copied to the ~/.globus directory of my gridmapped user.
When I then submit a dummy job using the Fork job factory, the
credential does get copied into the directory. After this point, my
MultiJobs *do* work, because the credential has been copied over by
another job. Even so, I have to use the jobCredentialEndpoint element
in my job description.
Is there some other way that I'm supposed to delegate full credentials
with MultiJobs? Am I misunderstanding something completely?
--patrick
References:
1. http://www-unix.globus.org/security/gt4-review/GT4-GRAM-Security-oct27.doc
(Page 7)
- [gt-user] MultiJobs aren't delegating their credential Patrick Armstrong
-
