Difference: QueryLDAP (1 vs. 2)

Revision 22011-03-15 - AlessandroPaolini

Line: 1 to 1
 -- AlessandroPaolini - 2011-02-03

[paolini@lcg-ui paolini]$ ldapsearch -LLL -x -H ldap://spaci01.na.infn.it:2170 -b mds-vo-name=SPACI-NAPOLI-IA64,o=grid 'objectclass=GlueCE' GlueCEStateRunningJobs GlueCEStateWaitingJobs GlueCEAccessControlBaseRule GlueCEInfoTotalCPUs


[paolini@lcg-ui paolini]$ ldapsearch -x -LLL -H ldap://gridit-cert-rb.cnaf.infn.it:2170 -b "mds-vo-name=local,o=grid" 'GlueServiceType=srm_v1' GlueForeignKey srm_v1


[paolini@lcg-ui paolini]$ ldapsearch -x -LLL -H ldap://gridit-cert-rb.cnaf.infn.it:2170 -b "mds-vo-name=local,o=grid" 'GlueHostApplicationSoftwareRunTimeEnvironment=LCG_SC3' GlueChunkKey GlueHostApplicationSoftwareRunTimeEnvironment LCG_SC3


[paolini@lcg-ui paolini]$ ldapsearch -x -LLL -H ldap://gridit-cert-rb.cnaf.infn.it:2170 -b "mds-vo-name=local,o=grid" 'GlueServiceType=ResourceBroker' GlueForeignKey GlueServiceType


[paolini@lcg-ui paolini]$ ldapsearch -x -LLL -H ldap://egee-bdii.cnaf.infn.it:2170 -b "mds-vo-name=local,o=grid" 'GlueServiceType=VOBOX' GlueForeignKey GlueServiceType GlueServiceUniqueID GlueServiceAccessControlRule


[paolini@lcg-ui paolini]$ ldapsearch -x -LLL -H ldap://gridit-cert-rb.cnaf.infn.it:2170 -b "mds-vo-name=local,o=grid" 'GlueSEControlProtocolType=srm_v1'


[paolini@lcg-ui paolini]$ ldapsearch -x -LLL -H ldap://beagle14.ba.itb.cnr.it:2170 -b mds-vo-name=ITB-BARI,o=grid 'objectClass=GlueCESEBind'


[paolini@lcg-ui paolini]$ ldapsearch -LLL -x -h gridit-ce-001.cnaf.infn.it -p 2135 -b mds-vo-name=local,o=grid '(&(|(objectclass=GlueVOView)(objectclass=GlueCE))(GlueCEAccessControlBaseRule=VO:atlas))' GlueCEStateTotalJobs GlueCEStateWaitingJobs GlueCEStateRunningJobs GlueCEAccessControlBaseRule


[paolini@lcg-ui paolini]$ ldapsearch -x -LLL -H ldap://gridit-bdii-01.cnaf.infn.it:2170/ -b mds-vo-name=local,o=grid GlueSEControlProtocolType=classic

Line: 11 to 11
  ldapsearch -x -LLL -H ldap://bdii-site.frascati.enea.it:2170 -b mds-vo-name=GRISU-ENEA-GRID,o=grid 'objectClass=GlueHostProcessor' GlueHostProcessorOtherDescription
Added:
>
>

[paolini@ui ~]$ ldapsearch -x -LLL -H ldap://gridit-bdii-01.cnaf.infn.it:2170 -b mds-vo-name=local,o=grid '(|(&(objectclass=GlueService)(GlueServiceType=*))(GlueServiceDataKey=glite-version))' GlueServiceDataValue GlueServiceVersion GlueServiceType
 
[paolini@lcg-ui paolini]$ lcg-cr -v --vo infngrid -d grid001.oat.ts.astro.it -l lfn:kiu.jdl file:///home/paolini/rank.jdl
Using grid catalog type: edg
Source URL: file:///home/paolini/rank.jdl
File size: 259
VO name: infngrid
Destination specified: grid001.oat.ts.astro.it
Destination URL for copy: gsiftp://grid001.oat.ts.astro.it/flatfiles/SE00/infngrid/generated/2006-01-30/filefebebb0d-1a9b-4728-af64-ed90a6aff08e
# streams: 1
# set timeout to 0 seconds
Alias registered in Catalog: lfn:kiu.jdl
0 bytes 0.00 KB/sec avg 0.00 KB/sec inst
Transfer took 3960 ms
Destination URL registered in Catalog: sfn://grid001.oat.ts.astro.it/flatfiles/SE00/infngrid/generated/2006-01-30/filefebebb0d-1a9b-4728-af64-ed90a6aff08e
guid:42abefd9-5897-4327-81b1-329fb7c40981


[paolini@lcg-ui paolini]$ lcg-rep -v --vo infngrid -d cmsse01.na.infn.it lfn:kiu.jdl
Using grid catalog type: edg
Source URL: lfn:kiu.jdl
File size: 259
VO name: infngrid
Destination specified: cmsse01.na.infn.it
Source URL for copy: gsiftp://grid001.oat.ts.astro.it/flatfiles/SE00/infngrid/generated/2006-01-30/filefebebb0d-1a9b-4728-af64-ed90a6aff08e
Destination URL for copy: gsiftp://cmsse01.na.infn.it/data/exp_soft/infngrid/generated/2006-01-30/file9fd56299-29a3-4915-b370-ca212600be27
# streams: 1
# set timeout to 0
0 bytes 0.00 KB/sec avg 0.00 KB/sec inst
Transfer took 4070 ms
Destination URL registered in LRC: sfn://cmsse01.na.infn.it/data/exp_soft/infngrid/generated/2006-01-30/file9fd56299-29a3-4915-b370-ca212600be27


[paolini@lcg-ui paolini]$ lcg-lg -v --vo infngrid lfn:kiu.jdl
guid:42abefd9-5897-4327-81b1-329fb7c40981

[paolini@lcg-ui paolini]$ lcg-la -v --vo infngrid guid:42abefd9-5897-4327-81b1-329fb7c40981
lfn:kiu.jdl

[paolini@lcg-ui paolini]$ lcg-del -v --vo infngrid -a guid:42abefd9-5897-4327-81b1-329fb7c40981
VO name: infngrid
set timeout to 0 seconds

[paolini@lcg-ui paolini]$ lcg-del -v --vo infngrid sfn://grid007g.cnaf.infn.it/flatfiles/SE00/infngrid/generated/2006-01-30/file7a6a25ea-b831-4f4d-8cf1-68f3321fae18

[paolini@lcg-ui paolini]$ openssl s_client -ssl3 -connect beagle14.ba.itb.cnr.it:2119 | openssl x509 -noout -dates

[root@rb02 root]# /opt/condor/bin/condor_q -long | grep -i UserSubjectName | grep Carrillo | wc -l
1145

[root@gridit-rb-01 root]# grep -c ' g$' /var/edgwl/jobcontrol/queue.fl
3302

the command "myproxy-init" overwrites the voms credentials generated by the "voms-proxy-init -voms <VO>" command

Differently from the RB, in the WMS there is the proxy_renewal mechanism: so you can submit with a short voms proxy, and if the job is still running, its proxy will be renewed half an hour before its expiration


grep -B2 "jobStart operation completed" /var/log/glite/wmproxy.log | grep fqan | sed 's/.*fqan=//g'|sort|uniq -c


[apaolini@ui ~]$ openssl s_client -connect gridit-wms-01.cnaf.infn.it:7443 | openssl x509 -noout -dates

[apaolini@ui ~]$ openssl s_client -connect gridit-wms-01.cnaf.infn.it:7443 -showcerts

Revision 12011-02-03 - AlessandroPaolini

Line: 1 to 1
Added:
>
>
-- AlessandroPaolini - 2011-02-03

[paolini@lcg-ui paolini]$ ldapsearch -LLL -x -H ldap://spaci01.na.infn.it:2170 -b mds-vo-name=SPACI-NAPOLI-IA64,o=grid 'objectclass=GlueCE' GlueCEStateRunningJobs GlueCEStateWaitingJobs GlueCEAccessControlBaseRule GlueCEInfoTotalCPUs


[paolini@lcg-ui paolini]$ ldapsearch -x -LLL -H ldap://gridit-cert-rb.cnaf.infn.it:2170 -b "mds-vo-name=local,o=grid" 'GlueServiceType=srm_v1' GlueForeignKey srm_v1


[paolini@lcg-ui paolini]$ ldapsearch -x -LLL -H ldap://gridit-cert-rb.cnaf.infn.it:2170 -b "mds-vo-name=local,o=grid" 'GlueHostApplicationSoftwareRunTimeEnvironment=LCG_SC3' GlueChunkKey GlueHostApplicationSoftwareRunTimeEnvironment LCG_SC3


[paolini@lcg-ui paolini]$ ldapsearch -x -LLL -H ldap://gridit-cert-rb.cnaf.infn.it:2170 -b "mds-vo-name=local,o=grid" 'GlueServiceType=ResourceBroker' GlueForeignKey GlueServiceType


[paolini@lcg-ui paolini]$ ldapsearch -x -LLL -H ldap://egee-bdii.cnaf.infn.it:2170 -b "mds-vo-name=local,o=grid" 'GlueServiceType=VOBOX' GlueForeignKey GlueServiceType GlueServiceUniqueID GlueServiceAccessControlRule


[paolini@lcg-ui paolini]$ ldapsearch -x -LLL -H ldap://gridit-cert-rb.cnaf.infn.it:2170 -b "mds-vo-name=local,o=grid" 'GlueSEControlProtocolType=srm_v1'


[paolini@lcg-ui paolini]$ ldapsearch -x -LLL -H ldap://beagle14.ba.itb.cnr.it:2170 -b mds-vo-name=ITB-BARI,o=grid 'objectClass=GlueCESEBind'


[paolini@lcg-ui paolini]$ ldapsearch -LLL -x -h gridit-ce-001.cnaf.infn.it -p 2135 -b mds-vo-name=local,o=grid '(&(|(objectclass=GlueVOView)(objectclass=GlueCE))(GlueCEAccessControlBaseRule=VO:atlas))' GlueCEStateTotalJobs GlueCEStateWaitingJobs GlueCEStateRunningJobs GlueCEAccessControlBaseRule


[paolini@lcg-ui paolini]$ ldapsearch -x -LLL -H ldap://gridit-bdii-01.cnaf.infn.it:2170/ -b mds-vo-name=local,o=grid GlueSEControlProtocolType=classic


[paolini@ui ~]$ ldapsearch -x -H ldap://gridit-bdii-01.cnaf.infn.it:2170 -b "mds-vo-name=local,o=grid" objectClass=GlueCEState GlueCEStateFreeJobSlots GlueCEPolicyAssignedJobSlots GlueCEInfoTotalCPUs GlueCEStateRunningJobs GlueCEStateFreeCPUs GlueCEStateTotalJobs

[paolini@ui ~]$ ldapsearch -x -LLL -H ldap://gridit-bdii-01.cnaf.infn.it:2170 -b mds-vo-name=local,o=grid '(&(objectClass=GlueCE)(!(GlueCECapability=unset)))' GlueCECapability

ldapsearch -x -LLL -H ldap://gridit-bdii-01.cnaf.infn.it:2170 -b mds-vo-name=local,o=grid '(&(objectclass=GlueSite)(GlueSiteOtherInfo=*WLCG))'

ldapsearch -x -LLL -H ldap://gridit-bdii-01.cnaf.infn.it:2170 -b mds-vo-name=local,o=grid '(&(objectclass=GlueCE)(!(GlueCECapability=Share*)))' GlueCECapability GlueCEHostingCluster

ldapsearch -x -LLL -H ldap://bdii-site.frascati.enea.it:2170 -b mds-vo-name=GRISU-ENEA-GRID,o=grid 'objectClass=GlueHostProcessor' GlueHostProcessorOtherDescription


[paolini@lcg-ui paolini]$ lcg-cr -v --vo infngrid -d grid001.oat.ts.astro.it -l lfn:kiu.jdl file:///home/paolini/rank.jdl
Using grid catalog type: edg
Source URL: file:///home/paolini/rank.jdl
File size: 259
VO name: infngrid
Destination specified: grid001.oat.ts.astro.it
Destination URL for copy: gsiftp://grid001.oat.ts.astro.it/flatfiles/SE00/infngrid/generated/2006-01-30/filefebebb0d-1a9b-4728-af64-ed90a6aff08e
# streams: 1
# set timeout to 0 seconds
Alias registered in Catalog: lfn:kiu.jdl
0 bytes 0.00 KB/sec avg 0.00 KB/sec inst
Transfer took 3960 ms
Destination URL registered in Catalog: sfn://grid001.oat.ts.astro.it/flatfiles/SE00/infngrid/generated/2006-01-30/filefebebb0d-1a9b-4728-af64-ed90a6aff08e
guid:42abefd9-5897-4327-81b1-329fb7c40981


[paolini@lcg-ui paolini]$ lcg-rep -v --vo infngrid -d cmsse01.na.infn.it lfn:kiu.jdl
Using grid catalog type: edg
Source URL: lfn:kiu.jdl
File size: 259
VO name: infngrid
Destination specified: cmsse01.na.infn.it
Source URL for copy: gsiftp://grid001.oat.ts.astro.it/flatfiles/SE00/infngrid/generated/2006-01-30/filefebebb0d-1a9b-4728-af64-ed90a6aff08e
Destination URL for copy: gsiftp://cmsse01.na.infn.it/data/exp_soft/infngrid/generated/2006-01-30/file9fd56299-29a3-4915-b370-ca212600be27
# streams: 1
# set timeout to 0
0 bytes 0.00 KB/sec avg 0.00 KB/sec inst
Transfer took 4070 ms
Destination URL registered in LRC: sfn://cmsse01.na.infn.it/data/exp_soft/infngrid/generated/2006-01-30/file9fd56299-29a3-4915-b370-ca212600be27


[paolini@lcg-ui paolini]$ lcg-lg -v --vo infngrid lfn:kiu.jdl
guid:42abefd9-5897-4327-81b1-329fb7c40981

[paolini@lcg-ui paolini]$ lcg-la -v --vo infngrid guid:42abefd9-5897-4327-81b1-329fb7c40981
lfn:kiu.jdl

[paolini@lcg-ui paolini]$ lcg-del -v --vo infngrid -a guid:42abefd9-5897-4327-81b1-329fb7c40981
VO name: infngrid
set timeout to 0 seconds

[paolini@lcg-ui paolini]$ lcg-del -v --vo infngrid sfn://grid007g.cnaf.infn.it/flatfiles/SE00/infngrid/generated/2006-01-30/file7a6a25ea-b831-4f4d-8cf1-68f3321fae18

[paolini@lcg-ui paolini]$ openssl s_client -ssl3 -connect beagle14.ba.itb.cnr.it:2119 | openssl x509 -noout -dates

[root@rb02 root]# /opt/condor/bin/condor_q -long | grep -i UserSubjectName | grep Carrillo | wc -l
1145

[root@gridit-rb-01 root]# grep -c ' g$' /var/edgwl/jobcontrol/queue.fl
3302

the command "myproxy-init" overwrites the voms credentials generated by the "voms-proxy-init -voms <VO>" command

Differently from the RB, in the WMS there is the proxy_renewal mechanism: so you can submit with a short voms proxy, and if the job is still running, its proxy will be renewed half an hour before its expiration


grep -B2 "jobStart operation completed" /var/log/glite/wmproxy.log | grep fqan | sed 's/.*fqan=//g'|sort|uniq -c


[apaolini@ui ~]$ openssl s_client -connect gridit-wms-01.cnaf.infn.it:7443 | openssl x509 -noout -dates

[apaolini@ui ~]$ openssl s_client -connect gridit-wms-01.cnaf.infn.it:7443 -showcerts

 
This site is powered by the TWiki collaboration platformCopyright © 2008-2024 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback