How can I switch between different certificates to connect to TeraGrid and non-TeraGrid resources simultaneously?
Note: After ten years of service to the national science and engineering community, the TeraGrid project has ended. It is succeeded by a new National Science Foundation (NSF) program, the Extreme Science and Engineering Discovery Environment (XSEDE). You should move any data stored on TeraGrid systems to an alternate storage resource. If you have leftover service units on your TeraGrid allocation, or if your research requires further use of high performance computational, visualization, storage, and network resources, consider applying for an allocation on one or more XSEDE digital services.
You may need to access TeraGrid and other non-TeraGrid
resources simultaneously using grid certificates. In some cases, the
TeraGrid and non-TeraGrid resources may not accept each other's
certificates. If you're having this problem, email
help@teragrid.org , and administrators will
work to resolve the problem.
To continue your work in the interim, you can use the following process (using the X509_USER_PROXY environment variable) to switch between two certificates, which will let you access both sets of resources:
- Create the two proxies in different files.
For a TeraGrid resource, use MyProxy as you normally would (see Creating a Proxy Using myproxy-logon), adding
-oto store the resulting credential file: % myproxy-logon -s myproxy.teragrid.org -o /tmp/teragrid.pemFor the non-TeraGrid resource, create the proxy as you normally would, adding a similar
% myproxy-logon -s myproxy.other.domain.org -o /tmp/other.pem-ooption if you usemyproxy-logon:Or, if you use
% grid-proxy-init -cert cert -key key -out /tmp/other.pemgrid-proxy-init, add-out: - Use X509_USER_PROXY to change between the two certificates: % setenv X509_USER_PROXY /tmp/teragrid.pem % ...do teragrid stuff... % setenv X509_USER_PROXY /tmp/other.pem % ...do stuff on other resource... % (...repeat as needed...)
Last modified on September 07, 2011.







