[Go-essp-tech] certificate updates

Neill Miller neillm at mcs.anl.gov
Tue Feb 28 08:08:04 MST 2012


Hello Jennifer,

If you're using the version I modified that can take the -o OpenID, then there's a -h option which shows the other possible switches.  If it's that version, I believe -P is what you're looking for.  Also, there's a -nogui option to not bring up the GUI.

Let me know.  If you're not using that version, I can dig it up for, as it's in the devel branch of the original MyProxyLogon-ESG.

-Neill.

----- Original Message -----
From: "stephen pascoe" <stephen.pascoe at stfc.ac.uk>
To: jma at cola.iges.org, go-essp-tech at ucar.edu
Sent: Tuesday, February 28, 2012 4:08:05 AM
Subject: Re: [Go-essp-tech] certificate updates





Hi Jennifer, 



MyProxyLogon-ESG.jar isn't designed to work in a script but there are alternatives. Some work has been done on making the jar work without the GUI but I'm not sure of the status right now. If you install the Globus toolkit[1] you can use the command myproxy-logon to retrieve the certificate. BADC has also written a more lightweight client to MyProxy written in python [2]. Both of these clients don't have a GUI so should be easier to automate. Some further details are at [3]. If you choose one of these options we can help you git it working. 



Cheers, 

Stephen. 



[1] http://www.globus.org/toolkit/ 

[2] http://pypi.python.org/pypi/MyProxyClient 

[3] http://cmip-gw.badc.rl.ac.uk/help/download-help.htm 






--- 

Stephen Pascoe +44 (0)1235 445980 

Centre of Environmental Data Archival 

STFC Rutherford Appleton Laboratory, Harwell Oxford, Didcot OX11 0QX, UK 





From: go-essp-tech-bounces at ucar.edu [mailto:go-essp-tech-bounces at ucar.edu] On Behalf Of Jennifer Adams 
Sent: 28 February 2012 01:31 
To: go-essp-tech at ucar.edu 
Subject: [Go-essp-tech] certificate updates 




Dear Experts, 


I have noticed that my certificates need to be updated about 3x daily in order to keep working 24/7. I would like to automate this process. Currently, I use this command, and I invoke it manually: 


> /usr/java/default/bin/java -jar $HOME/.esg/MyProxyLogon-ESG.jar -u jennifer -h pcmdi3.llnl.gov -p 2119 


This pops up a little window where I type in my password and wait a bit for the certificates to update. 





But looking more carefully at the error message in wget log, I see there is a -o option to feed the script my openID and then it will update the certificates if necessary -- clever! But how do I feed it my password when a cron job is launching the wget script -- will it work if I set an environment variable called 'pass' that contains my password? Or can I just set it inside the shell script that invokes the wget script (see below)? 


Thanks! 


--Jennifer 










#!/bin/sh 

pass=MyPasswordGoesHere 
if [ -f ./dashi ] ; then 





./wget.sh -v -i -o https://youknow > wget.log 2>&1 & 


else 


./wget.sh -v -o https://youknow > wget.log 2>&1 & 


fi 











-- 


Jennifer M. Adams 


IGES/COLA 


4041 Powder Mill Road, Suite 302 


Calverton, MD 20705 


jma at cola.iges.org 











-- 
Scanned by iCritical. 

_______________________________________________
GO-ESSP-TECH mailing list
GO-ESSP-TECH at ucar.edu
http://mailman.ucar.edu/mailman/listinfo/go-essp-tech


More information about the GO-ESSP-TECH mailing list