|
| 1 | +### Interactive file access |
1 | 2 |
|
2 | | -> ## Note: The justin get-token method for authentication does not currently work on AL9 |
3 | | -> The justin get-token command is not distributed on AL9/Spack currently. |
4 | | -> Please use [SL7]({{ site.baseurl }}/sl7_setup) if you need to use rucio. |
5 | | -> |
6 | | -> normal tokens (below) for `xroot` access do work |
7 | | -> |
8 | | -{: .caution} |
9 | | - |
10 | | -### getting a token for xroot access in AL9 |
11 | 3 | Make certain you have [al9 set up]({{ site.baseurl }}/al9_setup) |
12 | 4 |
|
13 | | -<!-- Get rucio: |
14 | | -
|
15 | | -~~~ |
16 | | -spack load r-m-dd-config experiment=dune lab=fnal.gov # r stands for rucio |
17 | | -export RUCIO_ACCOUNT=justinreadonly |
18 | | -~~~ |
19 | | -{: .language-bash} |
20 | | ---> |
21 | | - |
22 | | -Then use htgettoken to get a token so you can read the files you find. |
| 5 | +Then use `htgettoken` to get a token so you can read the files you find. |
23 | 6 |
|
24 | 7 | ~~~ |
25 | 8 | htgettoken -i dune --vaultserver htvaultprod.fnal.gov -r interactive |
@@ -49,3 +32,42 @@ YgZTGDqHQg6NOO77NsCY5J88uyIkkoZ1tRb6iTXK0j5RsX0AjA |
49 | 32 | You should be able to read files at remote sites now. |
50 | 33 | You may need to repeat the `htgettoken` as the interactive tokens are pretty short-lived. Batch jobs do their own tokens. |
51 | 34 |
|
| 35 | +### Accessing rucio and justIn resources requires a bit more |
| 36 | + |
| 37 | +You should already be set up above. Now you can use `justIn` to get you a token. |
| 38 | + |
| 39 | +1. First tell `justIn` knows about you |
| 40 | + |
| 41 | +~~~ |
| 42 | +justin time |
| 43 | +~~~ |
| 44 | +{: ..language-bash} |
| 45 | + |
| 46 | +The first time you do this you will get asked (after the `justin time` command) |
| 47 | + |
| 48 | +~~~ |
| 49 | +To authorize this computer to run the justin command, visit this page with your |
| 50 | +usual web browser and follow the instructions within the next 10 minutes: |
| 51 | +https://dunejustin.fnal.gov/authorize/XXXXX |
| 52 | +
|
| 53 | +Check that the Session ID displayed on that page is BfhVBmQ |
| 54 | +
|
| 55 | +Once you've followed the instructions on that web page, please run the command |
| 56 | +you tried again. You won't need to authorize this computer again for 7 days. |
| 57 | +~~~ |
| 58 | +{: ..output} |
| 59 | + |
| 60 | +Once again go to the website that appears and authenticate. |
| 61 | + |
| 62 | +2. After the first authentication to justIn you need to do a second justin call |
| 63 | + |
| 64 | +~~~ |
| 65 | +justin get-token |
| 66 | +~~~ |
| 67 | +{: ..language-bash} |
| 68 | + |
| 69 | +You will need to do this sequence weekly as your justin access expires. |
| 70 | + |
| 71 | +> ## Note: |
| 72 | +> Despite the name of this command it gets you both a token and a special X.509 proxy and it is the latter you are actually using to talk to rucio in these SL7 examples |
| 73 | +{: .callout} |
0 commit comments