CRAB

Reference page

1. Certification (with NICE account)

• We should Renew here
• Click on "Request or renew user certificate using Internet Explorer" and follow the guide and then the install information shown.

2. Getting the "private key" following as here

Export from Internet Explorer

• Run Internet Explorer
• Menu Tools -> Internet Options
• Select Tab Content -> Click Certificates
• Select Tab Personal
• Select your certificate (issued to yourlogin by CERN Trusted Certification Authority)
• Click Export -> Click Next
• Select Yes Export the Private Key -> Click Next
• Select Enable strong protection -> Click Next
• Type in a password and DO NOT FORGET IT -> Click Next
• Select a filename (myCert.p12) to save your certificate to, better save it into your My Documents folder -> Click Next
• Click Finish
  • Then you might have to rename the file myCert.p12.pfx to myCert.p12 before moving on.

Moving "myCert.p12.pfx" to "the place to want to run" and make the "pem" key

• Copy the above PKCS#12 myCert.p12 file to the computer where you will run grid-proxy-init.
• Extract your certificate (which contains the public key) and the private key:
  • Certificate:
    • openssl pkcs12 -in myCert.p12 -clcerts -nokeys -out $HOME/.globus/usercert.pem
  • To get the encrypted private key:
    • openssl pkcs12 -in myCert.p12 -nocerts -out $HOME/.globus/userkey.pem
  • You must set the mode on your userkey.pem file to read/write only by the owner, otherwise grid-proxy-init will not use it (chmod go-rw $HOME/.globus/userkey.pem).
• chmod 600 user*
• Delete the myCert.p12 file created above to avoid security issues.

In order to confirm

]ls -al  $HOME/.globus
]-rw-r--r--  1 dmoon zh 2678 Jul  5 22:50 usercert.pem
]-rw-------  1 dmoon zh 1206 Jul  5 22:51 userkey.pem

VO registration

• Please visit here
• click the "member info" *1) Instructions for users of VOs using the VOMRS registration interface
  • using below link here
• to check my status
  • click "search" and see my status
  • if the status is expired, you should send e-mail to Martti Pimia

• if the VO ok, you can go to next step SiteDB? registration

SiteDB? registration

• follow this below instruction here

] rm -rf ~/.cms_sitedbcache
] rm -rf /tmp/jsonparser_USER

Running CRAB

• Referencing page here
  • As soon as you login, you should do source1, in order to void python version problem
  • source 1 : source /afs/cern.ch/cms/LCG/LCG-2/UI/cms_ui_env.csh
  • moving work directory and cmsenv
  • source 2 : source /afs/cern.ch/cms/ccs/wm/scripts/Crab/crab.csh
  • getting "crab.cfg"
  • How to make crab.cfg file

• crab commend and options
  • crab -create
  • crab -submit -c "crab folder"
  • crab -status -c "crab folder"
  • crab -getoutput -c "crab folder"
  • crab -resubmit numbers
  • examples

    ] crab -create
    ] crab -submit
    ] crab -status
             

-- DongHoMoon - 20 Aug 2009