DUS: Setting up the User Interface account
De e-Ciencia
Before using the User Interface to access the Grid, a user must perform some preliminary tasks to set up her work environment.
The following steps should be taken:
- Your first step should be to upload to the UI the Digital Certificate you must have obtained previously. See: Exporting your Certificate to the Grid UI.
- Set the environment variables required by your infrastructure. For example, if you want to access the NGI infrastructure, you should execute:
- Initialize your proxy (using your digital certificate password to encode it) on the VO you plan to use, using your digital certificate password to encode it. For example, on ifusion VO you would write:
% source /gpfs/csic_projects/grid/etc/env/ngi-env.sh
The /gpfs/csic_projects/grid/etc/env/ directory should contain a file that is suitable for you. For your convenience, you should include the above line (or the one corresponding to your infrastructure) in some shell initialization file, such as .bashrc or .tcshrc, so that it's automatically read and executed each time you log in.
% voms-proxy-init --voms ifusion Your identity: /C=ES/O=DATAGRID-ES/O=BIFI/CN=Isabel Campos Plasencia Enter GRID pass phrase: Creating temporary proxy ................................................. Done Contacting i2g-voms.lip.pt:20005 [/C=PT/O=LIPCA/O=LIP/OU=Lisboa/CN=i2g-voms.lip.pt] "ifusion" Done Creating proxy ................................................. Done Your proxy is valid until Tue Dec 19 22:44:45 2006
Your proxy will be valid for a 12 hours period by default. This obviously means that the proxy initialization needs to be done at least once every work day. Use the flag -hours H to obtain a proxy valid for H hours.
The voms-proxy-init command will generate a X.509 certificate that will be placed in your home directory by default. The X509_USER_PROXY environment variable controls the name of this certificate file, and its value defaults to $HOME/.x509up_u$uid, where "$HOME" is your home dir, and $uid is your user ID number, as shown by the id command:
% id uid=7054(silanes) gid=10403(chemistry) groups=1002(computacion),7001(aeuser),7500(tests)
You could change the location of the certificate by modifying the value of the correspondig variable:
% export X509_USER_PROXY=/your/alternate/location/here
Troubleshooting
"Could not establish authenticated connection with the server"
Ocasionally you could get an error like the following:
% voms-proxy-init --voms icompchem
Cannot find file or dir: /home/username/.glite/vomses
Enter GRID passphrase:
Your identity: /DC=es/DC=irisgrid/O=ifca/CN=your_cn
Creating temporary proxy .....................................
Done
Contacting i2g-voms.lip.pt:20012 [/C=PT/O=LIPCA/O=LIP/OU=Lisboa/CN=i2g-voms.lip.pt] "icompchem" Failed
Error: Could not establish authenticated connection with the server.
globus_gss_assist token :-1: read failure: unknown
Trying next server for icompchem.
Creating temporary proxy ............................................ Done
Contacting i2g-voms.lip.pt:20012 [/C=PT/O=LIPCA/O=LIP/OU=Lisboa/CN=i2g-voms.lip.pt] "icompchem" Failed
Error: Could not establish authenticated connection with the server.
globus_gss_assist token :-1: read failure: unknown
None of the contacted servers for icompchem were capable
of returning a valid AC for the user.
If this happens, do not despair. It means there is some kind of problem with the proxy server. There is apparently nothing you can do, except trying again later.
