Setup: GRID authentication

Introduction

After installation of the user's certificate on the user's machine (GRID credentials) and the initialization of the UI (User interface), the user has to create a valid proxy of his certificate. Although CRAB is doing this automatically if no valid proxy can be found, the following instructions describe the creation process.

Proxy generation

After installation of the certificate in the user's home directory, the following command creates a user proxy:

voms-proxy-init -voms cms

using the passphrase defined during installation.

To check how long the user's proxy is valid, use the following command:

voms-proxy-info -all

A valid proxy should produce a similar output like:

subject   : /DC=org/DC=doegrids/OU=People/CN=Oliver Gutsche 103748/CN=proxy
issuer    : /DC=org/DC=doegrids/OU=People/CN=Oliver Gutsche 103748
identity  : /DC=org/DC=doegrids/OU=People/CN=Oliver Gutsche 103748
type      : proxy
strength  : 512 bits
path      : /tmp/x509up_u12840
timeleft  : 11:59:54
VO        : cms
subject   : /DC=org/DC=doegrids/OU=People/CN=Oliver Gutsche 103748
issuer    : /C=CH/O=CERN/OU=GRID/CN=host/lcg-voms.cern.ch
attribute : /cms/Role=NULL/Capability=NULL
attribute : /cms/analysis/Role=NULL/Capability=NULL
attribute : /cms/uscms/Role=NULL/Capability=NULL
timeleft  : 11:59:54

Authentication test

A good test if the user's certificate is valid and if his proxy is valid uses the following globus tool trying to authenticate to FNAL:

globusrun -a -r cmsosgce.fnal.gov