From FarmShare

Revision as of 13:46, 18 January 2012

To obtain and cache Kerberos ticket-granting ticket:

kinit

To list cached Kerberos tickets:

klist

Next, you'll want to ensure you have a valid AFS token.

To obtain tokens for authentication to AFS:

aklog

To display the issuer's tokens:

tokens

Then you can just submit jobs to the resource manager, and the jobs will be able to read/write to/from your AFS directories.

To submit a batch job to Grid Engine:

echo "sleep 3600" | qsub

A simple, complete example:

ssh corn-image-new
kinit
aklog
echo "sleep 3600" | qsub

Use "klist -f" and "tokens" for any troubleshooting.

Links

• https://itservices.stanford.edu/service/afs/intro
• https://itservices.stanford.edu/service/kerberos/user_guide/how
• http://fnal.gov/docs/strongauth/user.html

keeping your tokens for more than 24hrs

If you're using cardinal/corn, you should use "keeptoken" per https://itservices.stanford.edu/service/afs/learningmore/tokens

If you're submitting to the barleys (from the corns), you should _not_ use keeptokens, as the AUKS/SGE integration will handle the krenew/aklog process for you. You should see something like "Auks API request succeeded." when you run qsub.

If you have have Kerberos credentials when you submit your job, the queuing system should:

    - Store your credentials on a remote server at submission time
    - Renew those stored credentials while your job is waiting to run
    - Retrieve your credentials on the execution host before your job starts there
    - Renew your credentials on the execution host while the job is running