[Go-essp-tech] certificate updates

[Mike Berkley]

CCCma has been using BADC's python implementation in a home grown wget
script.  The ESG password can be passed on stdin to the python client,
making it very scriptable.  One can also increase the certificate
lifetime, which is very useful.


On Tue, Feb 28, 2012 at 02:08,  <stephen.pascoe at stfc.ac.uk> wrote:
> Hi Jennifer,
>
>
>
> MyProxyLogon-ESG.jar isn't designed to work in a script but there are
> alternatives.  Some work has been done on making the jar work without the
> GUI but I'm not sure of the status right now.  If you install the Globus
> toolkit[1] you can use the command myproxy-logon to retrieve the
> certificate.  BADC has also written a more lightweight client to MyProxy
> written in python [2].  Both of these clients don't have a GUI so should be
> easier to automate.  Some further details are at [3].  If you choose one of
> these options we can help you git it working.
>
>
>
> Cheers,
>
> Stephen.
>
>
>
> [1] http://www.globus.org/toolkit/
>
> [2] http://pypi.python.org/pypi/MyProxyClient
>
> [3] http://cmip-gw.badc.rl.ac.uk/help/download-help.htm
>
>
>
>
>
> ---
>
> Stephen Pascoe  +44 (0)1235 445980
>
> Centre of Environmental Data Archival
>
> STFC Rutherford Appleton Laboratory, Harwell Oxford, Didcot OX11 0QX, UK
>
>
>
> From: go-essp-tech-bounces at ucar.edu [mailto:go-essp-tech-bounces at ucar.edu]
> On Behalf Of Jennifer Adams
> Sent: 28 February 2012 01:31
> To: go-essp-tech at ucar.edu
> Subject: [Go-essp-tech] certificate updates
>
>
>
> Dear Experts,
>
> I have noticed that my certificates need to be updated about 3x daily in
> order to keep working 24/7. I would like to automate this process.
> Currently, I use this command, and I invoke it manually:
>
>> /usr/java/default/bin/java -jar $HOME/.esg/MyProxyLogon-ESG.jar -u
>> jennifer -h pcmdi3.llnl.gov -p 2119
>
> This pops up a little window where I type in my password and wait a bit for
> the certificates to update.
>
>
>
> But looking more carefully at the error message in wget log, I see there is
> a -o option to feed the script my openID and then it will update the
> certificates if necessary -- clever! But how do I feed it my password when a
> cron job is launching the wget script -- will it work if I set an
> environment variable called 'pass' that contains my password? Or can I just
> set it inside the shell script that invokes the wget script (see below)?
>
> Thanks!
>
> --Jennifer
>
>
>
>
>
> #!/bin/sh
>
> pass=MyPasswordGoesHere
> if [ -f ./dashi ] ; then
>
>   ./wget.sh -v -i -o https://youknow > wget.log 2>&1 &
>
> else
>
>   ./wget.sh -v -o https://youknow > wget.log 2>&1 &
>
> fi
>
>
>
>
>
>
>
> --
>
> Jennifer M. Adams
>
> IGES/COLA
>
> 4041 Powder Mill Road, Suite 302
>
> Calverton, MD 20705
>
> jma at cola.iges.org
>
>
>
>
>
>
>
>
> --
> Scanned by iCritical.
>
>
>
> _______________________________________________
> GO-ESSP-TECH mailing list
> GO-ESSP-TECH at ucar.edu
> http://mailman.ucar.edu/mailman/listinfo/go-essp-tech
>