[Go-essp-tech] certificate updates

[stephen.pascoe at stfc.ac.uk]

Hi Jennifer,

MyProxyLogon-ESG.jar isn't designed to work in a script but there are alternatives.  Some work has been done on making the jar work without the GUI but I'm not sure of the status right now.  If you install the Globus toolkit[1] you can use the command myproxy-logon to retrieve the certificate.  BADC has also written a more lightweight client to MyProxy written in python [2].  Both of these clients don't have a GUI so should be easier to automate.  Some further details are at [3].  If you choose one of these options we can help you git it working.

Cheers,
Stephen.

[1] http://www.globus.org/toolkit/
[2] http://pypi.python.org/pypi/MyProxyClient
[3] http://cmip-gw.badc.rl.ac.uk/help/download-help.htm


---
Stephen Pascoe  +44 (0)1235 445980
Centre of Environmental Data Archival
STFC Rutherford Appleton Laboratory, Harwell Oxford, Didcot OX11 0QX, UK

From: go-essp-tech-bounces at ucar.edu [mailto:go-essp-tech-bounces at ucar.edu] On Behalf Of Jennifer Adams
Sent: 28 February 2012 01:31
To: go-essp-tech at ucar.edu
Subject: [Go-essp-tech] certificate updates

Dear Experts,
I have noticed that my certificates need to be updated about 3x daily in order to keep working 24/7. I would like to automate this process. Currently, I use this command, and I invoke it manually:
> /usr/java/default/bin/java -jar $HOME/.esg/MyProxyLogon-ESG.jar -u jennifer -h pcmdi3.llnl.gov<http://pcmdi3.llnl.gov> -p 2119
This pops up a little window where I type in my password and wait a bit for the certificates to update.

But looking more carefully at the error message in wget log, I see there is a -o option to feed the script my openID and then it will update the certificates if necessary -- clever! But how do I feed it my password when a cron job is launching the wget script -- will it work if I set an environment variable called 'pass' that contains my password? Or can I just set it inside the shell script that invokes the wget script (see below)?
Thanks!
--Jennifer


#!/bin/sh
pass=MyPasswordGoesHere
if [ -f ./dashi ] ; then

  ./wget.sh -v -i -o https://youknow > wget.log 2>&1 &
else
  ./wget.sh -v -o https://youknow > wget.log 2>&1 &
fi



--
Jennifer M. Adams
IGES/COLA
4041 Powder Mill Road, Suite 302
Calverton, MD 20705
jma at cola.iges.org<mailto:jma at cola.iges.org>





-- 
Scanned by iCritical.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ucar.edu/pipermail/go-essp-tech/attachments/20120228/bb675d93/attachment-0001.html