-->CERNグリッド日記
CERN CA(Certificate Authority)
ATLAS Software basic
CERN November 2024 (recommended)
HANS-ON Tutorial Twiki
setupATLAS | voms-proxy-init -voms atlas | diagnostics | setMeUp cern-nov2024
RUCIO: using_the_client
2016講習会 rucio
getting-HELP
Microsoft Edge：プロキシを設定する方法 ? Windows11
ICEPPグリッド上のファイルにアクセスする方法
whoami | list-rses | grep TOKYO | list-scopes | list-dids "user.kondo:*" | list-dids "user.kondo:user.kondo%" | list-dids | list-files (listup contents) | list-content |
rucio list-rses (RSE(Rucio Storage Elements)) | list-dataset-replicas | download --nrandom 1
-----2025.12.24--------------------------------
grid上のfileをみるbatch jobs --> grid.htmlみよ
-----2025.12.22--------------------------------
Ask new user certificate for ICEPP with EmiAsahi2025ICEPP
lxplus/grid_ami_rucio/memo.hereにあり。
> rucio list-file-replicas "user.kondo:user.kondo.mc16_13TeV.410470.PhPy8EG_A14_ttbar_hdamp258p75_nonallhad.simul.HITS.e6337_s3126_der1766133906"
| SCOPE | NAME | FILESIZE | ADLER32 | RSE: REPLICA |
| mc16_13TeV | HITS.12458448._050752.pool.root.1 | 899.090 MB | f081c390 | RALLCG2_MCTAPE: davs://antares.stfc.ac.uk:9000/eos/antares/prod/atlas/simRaw/atlasmctape/mc16_13TeV/HITS/e6337_e5984_s3126/mc16_13TeV.410470.PhPy8EG_A14_ttbar_hdamp258p75_nonallhad.simul.HITS.e6337_e5984_s3126_tid12458448_00/HITS.12458448._050752.pool.root.1 |
| mc16_13TeV | HITS.12458448._050752.pool.root.1 | 899.090 MB | f081c390 | TOKYO-LCG2_LOCALGROUPDISK: davs://lcg-se01.icepp.jp:18443/dpm/icepp.jp/home/atlas/atlaslocalgroupdisk/rucio/mc16_13TeV/52/44/HITS.12458448._050752.pool.root.1
---> looks RAL TAPE---> TOKYO DISK lcg-se01.icepp:18443...........
root -l -b -q read_icepp.C
TDavixFile* https://lcg-se01.icepp.jp:18443/dpm/icepp.jp/home/atlas/atlaslocalgroupdisk/rucio/mc16_13TeV/52/44/HITS.12458448._050752.pool.root.1
KEY: TTree ##Shapes;1 ##Shapes
KEY: TTree ##Links;1 ##Links
KEY: TTree ##Params;1 ##Params
KEY: TTree CollectionTree;1 CollectionTree
KEY: TTree POOLContainerForm;1 POOLContainerForm
KEY: TTree POOLContainer;1 POOLContainer
KEY: TTree MetaData;1 MetaData
KEY: TTree MetaDataHdrForm;1 MetaDataHdrForm
KEY: TTree MetaDataHdr;1 MetaDataHdr
# of entries in CollectionTree = 1000
-----2025.12.19--------------------------------
icepp澤田くんに聞いたら、
CERN Root Certification Authority 2
CERN Certification Authority Certification Authorities
CERNでGRID証明書を作成 -> myCertificate.p12 をダウンロード-> ファイルをWindows上でダブルクリックする--> 証明書欄にインストールされる
また、そのWindowsで今まで一度もGRID証明書を使っていなかった場合、他にCERN Root Certification Authority 2 と CERN Certification Authority
Certification Authoritiesの二つもインストールする必要があります。インストール方法はhttps://ca.cern.ch/cafiles/certificates/list.aspx?ca=cernにある。
> > https://rucio-ui.cern.ch/r2d2/request をWindows11 MS Edgeで開いたら、
> >
> > ----- Original Message -----
近藤先生
テープ上にあるものについては、一度GRID上のディスクに落とす必要があります。
https://rucio-ui.cern.ch/r2d2/requestからリクエストをお願いします。
1. Select Data Identifiers (DIDs)
Data patternとして mc16_13TeV.410470.PhPy8EG_A14_ttbar_hdamp258p75_nonallhad.simul.HITS.e6337_s3126
を入力。その右の Container を選択し、Select All Continue
2. Select Rucio Storage Elements (RSEs)RSE に TOKYO-LCG2_LOCALGROUPDISK を入力し
Check Quota
I want to ask for approvalにチェックをつけてから Continue
3. Options
Create sampleを有効にして、必要な統計分のファイル数を入れてください。
このデータセットに関しては、1ファイルに1000イベントはいっていて、900MB
程度のサイズです。合計は100TB以下になるようにお願いします。
Commentは短い説明で結構です。(ICEPP-RCのスタッフが承認する時に参照します)
Lifetimeを適当に設定してください。それを過ぎるとファイルが消されるようになっているはずです。
Continue
4. Summary
ご確認いただき問題なければ、Submit requestをクリックしてください。
そのあと、メールが来ます。
そのメールの中のRucio UIのリンクから、ダウンロードの状態が確認でき
ます。
TOKYO-LCG2_LOCALGROUPDISKへのダウンロードが終わった後に、
rucio download user.kondo.mc16_13TeV.410470.PhPy8EG_A14_ttbar_
hdamp258p75_nonallhad.simul.HITS.e6337_s3126
でICEPP-RCへダウンロードしてください。
よろしくお願いします。
澤田
-----2025.12.18--------------------------------
iceppにvinit成功（alias vinit='voms-proxy-init --voms atlas -hours 200 --valid 200:00'）
しかしrucio whoamiは
2025-12-19 11:24:31,813 ERROR ConnectionError: HTTPSConnectionPool(host='atlas-rucio-auth.cern.ch', port=443): Max retries exceeded with url: /auth/x509_proxy (Caused by SSLError("Can't connect to HTTPS URL because the SSL module is not available."))
2025-12-19 11:24:31,813 ERROR Cannot connect to the Rucio server.
-----2025.12.17--------------------------------
rucio UIに入るためx509必要。CERN CAで新たに作ろうかな わからないなあ。
-----2025.12.16--------------------------------
rucio_download_filesに従ってやったが、tapeからなのでdownloadできない。 --allow-tapeでも。
rucio download --nrandom 1 --allow-tape "mc16_13TeV:mc16_13TeV.410470.PhPy8EG_A14_ttbar_hdamp258p75_nonallhad.simul.HITS.e6337_s3126" ダウンロードできない
rucio download --nrandom 1 --allow-tape "mc23_13p6TeV:mc23_13p6TeV.601229.PhPy8EG_A14_ttbar_hdamp258p75_SingleLep.merge.HITS.e8514_e8528_s4369_s4370_tid40005971_00"
2025-12-16 06:49:47,334 INFO Processing 1 item(s) for input
2025-12-16 06:49:47,375 INFO Selecting 1 random replicas from DID(s): ['mc23_13p6TeV:mc23_13p6TeV.601229.PhPy8EG_A14_ttbar_hdamp258p75_SingleLep.merge.HITS.e8514_e8528_s4369_s4370_tid40005971_00']
2025-12-16 06:50:11,153 INFO No preferred protocol impl in rucio.cfg: No section: 'download'
2025-12-16 06:50:11,154 WARNING The requested DID mc23_13p6TeV:HITS.40005971._004965.pool.root.1 only has replicas on tape. Direct download from tape is prohibited. Please request a transfer to a non-tape endpoint.
2025-12-16 06:50:11,154 INFO Using main thread to download 1 file(s)
2025-12-16 06:50:11,154 INFO Preparing download of mc23_13p6TeV:HITS.40005971._004965.pool.root.1
2025-12-16 06:50:11,155 WARNING No available source found for file: mc23_13p6TeV:HITS.40005971._004965.pool.root.1
2025-12-16 06:50:11,188 ERROR None of the requested files have been downloaded.
> grid_ami_rucio% rucio download --nrandom 1 --allow-tape "data23_13p6TeV:data23_13p6TeV.00450445.physics_Main.merge.AOD.f1342_m2167"
2025-12-16 07:27:23,731 INFO Processing 1 item(s) for input
2025-12-16 07:27:23,784 INFO Selecting 1 random replicas from DID(s): ['data23_13p6TeV:data23_13p6TeV.00450445.physics_Main.merge.AOD.f1342_m2167']
2025-12-16 07:27:29,178 INFO No preferred protocol impl in rucio.cfg: No section: 'download'
2025-12-16 07:27:29,178 WARNING The requested DID data23_13p6TeV:data23_13p6TeV.00450445.physics_Main.merge.AOD.f1342_m2167._lb0566._0001.1 only has replicas on tape. Direct download from tape is prohibited. Please request a transfer to a non-tape endpoint.
2025-12-16 07:27:29,179 INFO Using main thread to download 1 file(s)
2025-12-16 07:27:29,179 INFO Preparing download of data23_13p6TeV:data23_13p6TeV.00450445.physics_Main.merge.AOD.f1342_m2167._lb0566._0001.1
2025-12-16 07:27:29,180 WARNING No available source found for file: data23_13p6TeV:data23_13p6TeV.00450445.physics_Main.merge.AOD.f1342_m2167._lb0566._0001.1
2025-12-16 07:27:29,216 ERROR None of the requested files have been downloaded.
-----2025.12.15--------------------------------
rucio list-dids "mc16_13TeV:mc16_13TeV.410470%" > outmc16_13TeVB.txt <=============rucioで見付かった！！
-----2025.12.14--------------------------------
Job Configurationで ATestRun_eljob.py --> "worker finished successfully"まで
list rucio files までやった。
-----2025.12.13--------------------------------
setup_rucio.sh , memo.rucio
18:00 did up to https://atlassoftwaredocs.web.cern.ch/analysis-software/AnalysisSWTutorial/setup_compile/
-----2025.12.12--------------------------------
Run Query : Current run | Data Summary | TrigConf (Run 2) | AMI Data Search | Tier-0 Monitoring | DQ Monitoring | Operations | LHC
MC dataset
Signal Validation
AMI
-----2025.12.11--------------------------------
SetMeUp <--- /eos/user/k/kondo/TUTORIALを指定したらOKだった。 /eos/user/k/kondo/memo.here
CERN November 2024 (recommended)に進む
-----2025.12.10--------------------------------
https://www.sdcc.bnl.gov/information/installing-grid-certificate <-----------BNL
setupATLAS
(1) https://ca.cern.ch/ca/でNew Grid User certiicateをクリックしてみる。<------ emailで通知が来た！
down load ---> download to PC
(2) using SCP myCertificate.p12 to LXPLUS
(3) openssl pkcs12 -in myCertificate.p12 -clcerts -nokeys -out ~/.globus/usercert.pem
Enter Import Password: EmiAsahi2025
(4) openssl pkcs12 -in myCertificate.p12 -nocerts -out ~/.globus/userkey.pem
Enter Import Password: EmiAsahi2025
Enter PEM pass phrase: EmiAsahi2025
Verifying - Enter PEM pass phrase: EmiAsahi2025
(5) chmod 0444 ~/.globus/usercert.pem
chmod 0400 ~/.globus/userkey.pem
-r--------. 1 kondo zp 2010 Dec 10 07:16 userkey.pem
-r--r--r--. 1 kondo zp 3434 Dec 10 07:31 usercert.pem
(6) voms-proxy-init -voms atlas
Enter GRID pass phrase: EmiAsahi2025
Your identity: /DC=ch/DC=cern/OU=Organic Units/OU=Users/CN=kondo/CN=405775/CN=Taka Kondo
Creating temporary proxy ....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Done
Contacting voms-atlas-auth.cern.ch:443 [/DC=ch/DC=cern/OU=computers/CN=atlas-auth.cern.ch] "atlas" Done
Creating proxy ......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Done
Your proxy is valid until Wed Dec 10 19:31:44 2025
SUCCESS!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
----------------2025.11.29-----------------------
SayukaでVO起動できない。
https://ca.cern.ch/ca/user/MyCertificates.aspxで調べた。
------
Serial Number: 6e00614b41b3755fb334dddffe000100614b41
Template: Grid User
Effective Date: 28/04/2025 10:10:55
Expiration Date: 02/06/2026 10:10:55
Requester Name: Taka Kondo (kondo)
Common Name: kondo 405775 Taka Kondo
Distinguished Name: CN=Taka Kondo, CN=405775, CN=kondo, OU=Users, OU=Organic Units, DC=cern, DC=ch
Hash: 23 67 f4 9b 8d d1 ae 0a ec 2c 71 6f c6 9c a2 10 85 77 87 8f
Algorithm: RSA RSA
Key Length: 2048
Status: Issued
--------と有効みたい。
-----202i5.11.28-------------------
[kondo@lxplus913]~/SCTcalib/Sayuka_2024% voms-proxy-init -voms atlas
Enter GRID pass phrase for this identity:
Certificate validation error: Certificate has expired on: Wed May 28 03:35:57 CEST 2025
Certificate validation error: CRL for an expired certificate was not resolved Cause: No CRLs found for issuer "cn=CERN Grid Certification Authority,dc=cern,dc=ch"
User credential is not valid!
----------------2025.4.28-----------------------
28/04/2025にThe certificate issued to CERN\kondo will expire in 30 days.が来てたのでupdateした。２つやってしまったよう。
----------------2024.4.24------------------------
[kondo@lxplus706]~/SCTcalib/Sayuka% voms-proxy-init -voms atlas でVO起動
Enter GRID pass phrase for this identity:EmiAsahi2024
Contacting lcg-voms2.cern.ch:15001 [/DC=ch/DC=cern/OU=computers/CN=lcg-voms2.cern.ch] "atlas"...
Remote VOMS server contacted succesfully.
VOMS server lcg-voms2.cern.ch:15001 returned the following errorsa: <========ここでエラーが出ている
User is currently suspended!
Suspension reason: User failed to sign the AUP in time. <========なんだこれは？？
Contacting voms2.cern.ch:15001 [/DC=ch/DC=cern/OU=computers/CN=voms2.cern.ch] "atlas"...
Remote VOMS server contacted succesfully.
VOMS server voms2.cern.ch:15001 returned the following errors:
User is currently suspended!
Suspension reason: User failed to sign the AUP in time.
Contacting voms-atlas-auth.app.cern.ch:443 [/DC=ch/DC=cern/OU=computers/CN=atlas-auth.web.cern.ch] "atlas"...
Remote VOMS server contacted succesfully.
Created proxy in /tmp/x509up_u14739.
Your proxy is valid until Wed Apr 24 14:52:59 CEST 2024
[kondo@lxplus706]~/SCTcalib/Sayuka% grid-proxy-info
subject : /DC=ch/DC=cern/OU=Organic Units/OU=Users/CN=kondo/CN=405775/CN=Taka Kondo/CN=1454841171
issuer : /DC=ch/DC=cern/OU=Organic Units/OU=Users/CN=kondo/CN=405775/CN=Taka Kondo
identity : /DC=ch/DC=cern/OU=Organic Units/OU=Users/CN=kondo/CN=405775/CN=Taka Kondo
type : RFC 3820 compliant impersonation proxy
strength : 2048 bits
path : /tmp/x509up_u14739
timeleft : 11:59:55
grid-proxy-info で確かめた
-------
subject : /DC=ch/DC=cern/OU=Organic Units/OU=Users/CN=kondo/CN=405775/CN=Taka Kondo/CN=858222041
issuer : /DC=ch/DC=cern/OU=Organic Units/OU=Users/CN=kondo/CN=405775/CN=Taka Kondo
identity : /DC=ch/DC=cern/OU=Organic Units/OU=Users/CN=kondo/CN=405775/CN=Taka Kondo
type : RFC 3820 compliant impersonation proxy
strength : 2048 bits
path : /tmp/x509up_u14739
timeleft : 11:36:24
-------
----------------2024.4.23------------------------
[1] CERN CAでSerial Number: 6e005ea788d06e0063144f5d9e0001005ea788をRevokeし新しく
------------------------------------------
Serial Number: 6e005eaa999bbf24b861d6bd5c0001005eaa99
Template: Grid User
Effective Date: 23/04/2024 03:35:57
Expiration Date: 28/05/2025 03:35:57
Requester Name: Taka Kondo (kondo)
Common Name: kondo 405775 Taka Kondo
Distinguished Name: CN=Taka Kondo, CN=405775, CN=kondo, OU=Users, OU=Organic Units, DC=cern, DC=ch
Hash: 0c 69 00 73 e0 11 91 2b 7b cf 88 be 27 3f e2 1f 8f cf 52 26
Algorithm: RSA RSA
Key Length: 2048
Status: Issued
------------------------------------------
を（EmiAsahi2024をパスワードに設定して）作成しmyCertificate（Personal Information Exchange (.p12)）をdown loadした。
[2] MSedgeの右から2番にある…を開くー＞その他のツールー＞インターネットオプション（インターネットのプロパティ）ー＞コンテンツー＞証明書ー＞インポートー＞myCertificate.p12
[3] パスワードにEmiAsahi2024を入れた。
[4] 証明書ストア 証明書.PNGができた。
[5] 詳細設定でエクスポート形式にPKCS#7証明書(*.p7b)を選び、「証明のパスにあるすべての証明書を含める」をクリック
[6] エクスポートでは秘密キー付けないらしい。形式選択したらGridCA2024.pfx.p7bができた。
[7] GridCA2024.pfx.p7bをlxplus/.globusにGridCA2024.p12に変えてコピーした。
[8] openssl pkcs12 -nocerts -in GridCA2024.p12 -out userkey.pem
pkcs12: Can't open "userkey.pem" for writing, Permission denied <==
昔の-r--------. 1 kondo zp 2047 Dec 27 2016 userkey.pemが邪魔してる。chmodしてからrmした。
[kondo@lxplus909]~/.globus% openssl pkcs12 -nocerts -in GridCA2024.p12 -out userkey.pem
80AB689EA37F0000:error:068000A8:asn1 encoding routines:asn1_check_tlen:wrong tag:crypto/asn1/tasn_dec.c:1188:
80AB689EA37F0000:error:0688010A:asn1 encoding routines:asn1_d2i_ex_primitive:nested asn1 error:crypto/asn1/tasn_dec.c:752:
80AB689EA37F0000:error:0688010A:asn1 encoding routines:asn1_template_noexp_d2i:nested asn1 error:crypto/asn1/tasn_dec.c:685:Field=version, Type=PKCS12
[1] Try oroginal certificate from CERN--> Success!
[kondo@lxplus948]~/.globus% openssl pkcs12 -nocerts -in myCertificate.p12 -out userkey.pem
Enter Import Password: EmiAsahi2024
Enter PEM pass phrase: EmiAsahi2024
Verifying - Enter PEM pass phrase: EmiAsahi2024
[2] [kondo@lxplus948]~/.globus% openssl pkcs12 -clcerts -nokeys -in myCertificate.p12 -out usercert.pem
Enter Import Password: EmiAsahi2024
[3] > chmod 0600 usercert.pem
> chmod 0400 userkey.pem
-r--------. 1 kondo zp 1998 Apr 23 13:36 userkey.pem
-rw-------. 1 kondo zp 3454 Apr 23 13:40 usercert.pem
これでいいかも！！
----------------2024.4.21------------------------
-------------2019.4.8 (samedi)-----------------に成功しているのかも
Starting on the Grid
でto obtain a Digital Certificate and then join the ATLAS Virtual Organization (VO).がある(kondo TWikiのも）
26/05/202521/04/2024 kondo 405775 Taka Kondo
Grid User (6e005ea788d06e0063144f5d9e0001005ea788)をクリックしたら
----------------------------------------------
Serial Number: 6e005ea788d06e0063144f5d9e0001005ea788
Template: Grid User
Effective Date: 21/04/2024 17:40:16
Expiration Date: 26/05/2025 17:40:16
Requester Name: Taka Kondo (kondo)
Common Name: kondo 405775 Taka Kondo
Distinguished Name: CN=Taka Kondo, CN=405775, CN=kondo, OU=Users, OU=Organic Units, DC=cern, DC=ch
Hash: 8f 45 8b 9f 24 7b 2c 45 10 ae 3c 51 ec a0 b6 1a 05 20 8f b4
Algorithm: RSA RSA
Key Length: 2048
Status: Issued
----------------------------------------------
How to use your certificate with voms-proxy-init
に従ってやろう
chmod 600 $HOME/.globus/userkey.pem
chmod 600 $HOME/.globus/usercert.pem
ができればいいのか！
lxplusに.globus/というdirectoryがある。/afs/cern.ch/user/k/kondo/.globus
２つあったので
26/05/202521/04/2024 kondo 405775 Taka Kondo
Grid User (6e005ea77d82fe220db0a3e93d0001005ea77d)
をrevokeした。
「織田からメール来た」あたりで１回成功しているみたい HVscanにout...は消えてたが。
BNLのinstalling-grid-certificateにMSedgeの場合
--------------------------------------------------
Export the certificate
In Microsoft Internet Explorer or Edge: Click the Search icon
(or Windows+R keys for the Run dialog), type certmgr.msc and press Enter.
Under Certificates - Current User, click Personal -> Certificates,
in the right-hand pane, right-click your certificate,
and select All Tasks -> Export. In the Export wizard, be sure
to export the private key, include all certificates and extended properties,
and protect the key with a password.
--------------------------------------------------
Select your new certificate, click Backup (or Export), remember the password
you use when exporting (else this exported file becomes useless),
and save this file to a safe location on your computer or in your directory.
--------------------------------------------------
とある。
織田からメール来た。のところに
--------------------------------------------------------
Web-->ツールー＞インターネットオプションー＞コンテンツー＞証明書ー＞個人ー＞TakaKondoをエクスポートー＞はい、秘密キーをエクスポートしますー＞GridCA.pfx
GridCA.pfxをlxplusに移し.globus/で拡張子を.p12に変えて
--------------------------------------------------------
MSedgeの右から2番にある…を開くー＞その他のツールー＞インターネットオプションでインターネットのプロパティが出てくる。いいぞ！
Certificate取るときにPassword設定しよう。
----------------2024.4.21------------------------
・Sayuka KitaさんからSCTAxAODのやり方もらったが、voms-proxy-init -voms atlas
が必要。
New Grid User Certificateを開いてDo not use a certificate passwordでGet Grid User Certificateをクリックした。
Download certificateで
https://ca.cern.ch/ca/user/MyCertificates.aspxで
myCertificate（種類は Personal Information Exchange (.p12)のようだ。
-----------------------------------------------------------
26/05/202521/04/2024 kondo 405775 Taka Kondo
Grid User (6e005ea77d82fe220db0a3e93d0001005ea77d)
26/05/202521/04/2024 kondo 405775 Taka Kondo
Grid User (6e005ea788d06e0063144f5d9e0001005ea788)
-----------------------------------------------------------
という2つのvalid certificateが出来てる。
----------------2019.11.29------------------------
newを申請する
1. Protect your certificate with a password (recommended)
EmiAsahi_2019 とした。-->Get Grid User certificateに行く。
2. Your certificate is ready to be downloaded でDownload certificateをクリック(F1.jpg）
3．保存 F2,jpg, F3.jpg
4. フォルダーを開く F4 ---> myCertificateがダウンロードにあった。まずは成功
5. https://ca.cern.ch/ca/user/MyCertificates.aspxをもたら F6があった。期限は02/01/2021となっている
6. comp/グリッドgrid/にmyCertificateを移した。
****************************************
EmiAsahi_2019EmiAsahi_2019EmiAsahi_2019
**********************************************
------------2019.10.24 (jeudi) --------------------
https://www.racf.bnl.gov/docs/howto/grid/pemtopkcs12 から再スタート
openssl pkcs12 -export -in usercert.pem -inkey userkey.pem -out usercert.p12 -name "myCert.pfx"
[kondo@lxplus700]~/.globus% openssl pkcs12 -export -in usercert.pem -inkey userkey.pem -out usercert.p12 -name "myCert.pfx"
Enter pass phrase for userkey.pem: emiasahi2019
unable to load private key エラーだ！
140446946035600:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt:evp_enc.c:592:
140446946035600:error:23077074:PKCS12 routines:PKCS12_pbe_crypt:pkcs12 cipherfinal error:p12_decr.c:108:
140446946035600:error:2306A075:PKCS12 routines:PKCS12_item_decrypt_d2i:pkcs12 pbe crypt error:p12_decr.c:139:
140446946035600:error:0907B00D:PEM routines:PEM_READ_BIO_PRIVATEKEY:ASN1 lib:pem_pkey.c:141:
mv myCert.pfx myCert.p12と変えておいて
[kondo@lxplus700]~/.globus% openssl pkcs12 -export -in usercert.pem -inkey userkey.pem -out usercert.p12 -name "myCert.p12"
Enter pass phrase for userkey.pem:
unable to load private key
140235569633168:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt:evp_enc.c:592:
140235569633168:error:23077074:PKCS12 routines:PKCS12_pbe_crypt:pkcs12 cipherfinal error:p12_decr.c:108:
140235569633168:error:2306A075:PKCS12 routines:PKCS12_item_decrypt_d2i:pkcs12 pbe crypt error:p12_decr.c:139:
140235569633168:error:0907B00D:PEM routines:PEM_READ_BIO_PRIVATEKEY:ASN1 lib:pem_pkey.c:141:
やっぱりだめだ。
ではもう一度作り直す
------------2019.10.24 (jeudi) --------------------
[3] voms-proxy-init -voms atlasで入ってみたら
[kondo@lxplus739]~% voms-proxy-init -voms atlas
Enter GRID pass phrase for this identity: emiasahi16
Certificate validation error: Certificate has expired on: Wed Jan 31 06:03:16 CET 2018
Certificate validation error: CRL for an expired certificate was not resolved Cause: No CRLs found for issuer "cn=CERN Grid Certification Authority,dc=cern,dc=ch"
User credential is not valid!
とあり、やっぱり2018.1.31に切れていた
とにかくCertificate validationをやるべし。元に戻ってやるか
------------2019.10.23 (mercredi) --------------------
[kondo@lxplus755]~/.globus% ll
-r--------. 1 kondo zp 2047 Dec 27 2016 userkey.pem
-rw-r--r--. 1 kondo zp 24 Dec 27 2016 memo.here ＜＝＝＝passPhrase = emiasahi16とあるなあ。
-r--------. 1 kondo zp 3641 Dec 27 2016 usercert.pem ＜＝＝＝＝＝ちゃんとある昔のがそのまあある。
これでダメか見てみよう。
次にATLAS VOへの登録を行います。
?ATLAS VOへ登録する方法: 参考1 https://www.racf.bnl.gov/docs/howto/grid/voatlas
?ATLAS VOMS user page <---りんくなし
chmodやってあった！途中で行けなくなるのでMS edgeで開いてみる。
https://lcg-voms2.cern.ch:8443/voms/atlas/user/home.actionを開こうとしたが
サイトで古いか安全でない TLS セキュリティ設定が使用されている可能性があります。この問題が解決しない場合は、Web サイトの所有者に連絡してください
と先に行けない。2016.12.27にも似たようなことが起っていた。
進めないので、ATLAS TWikiからやってみよう。
computing portal-->
https://twiki.cern.ch/twiki/bin/viewauth/AtlasComputing/WorkBookStartingGrid
なんだ、kondo TWikiにlink張ってある（tutorialも）
(1) Before you can use the Grid you need to obtain a Digital Certificate and then join the ATLAS Virtual Organisation (VO).
(2) The digital certificate needs to be renewed every year. 1年毎！とあるなあ。
(3) After its renewal, you need to "Re-sign Grid and VO AUPs" for the ATLAS Virtual Organisation (VO).
Joining the ATLAS Virtual Organisationをやってみよう ドキドキ
[1] Before joining the atlas VO
you need a CERN account with group zp (atlas).
The nickname and the email in your VO registration MUST be the same as your CERN account and the email associated to it.
see https://cern.ch/account/ to confirm your CERN account and the associated email address.
--------------------https://account.cern.ch/account/Management/MyAccounts.aspx-------
-- PrimaryAccount: Taka Kondo (kondo)
Login:kondo
Mail: taka.kondo@kek.jp, Mail aliases: Taka.Kondo@cern.ch, takahiko.kondo@cern.ch
-------------------------------------とにかくmail addressあり
[2] To join the atlas VO
To join the LCG
you need to go to https://lcg-voms2.cern.ch:8443/voms/atlas. <--やっぱりつながらないなあ。
New members will be presented with the initial registration phase.
Existing members who want to renew a certificate etc will be presented with an AUP re-sign option when accessing the registration page.
Register your CERN username (for group zp) as nickname, and the same email address associated to the account.
[3] voms-proxy-init -voms atlasで入ってみたら
[kondo@lxplus739]~% voms-proxy-init -voms atlas
Enter GRID pass phrase for this identity: emiasahi16
Certificate validation error: Certificate has expired on: Wed Jan 31 06:03:16 CET 2018
Certificate validation error: CRL for an expired certificate was not resolved Cause: No CRLs found for issuer "cn=CERN Grid Certification Authority,dc=cern,dc=ch"
User credential is not valid!
とあり、やっぱり2018.1.31に切れていた
とにかくCertificate validationをやるべし。元に戻ってやるか
=====================2019.10.23 (mercredi) ======================
SCT weekly --> Gridとらなくては
TempS_singleプロットをやっとTWikiに上げた。
https://wiki.kek.jp/pages/viewpage.action?pageId=104204608
からGrid登録やってみよう。
参考１--> https://www.racf.bnl.gov/docs/howto/grid/installcertでは
ATLAS users: visit the CERN CA site to request a new certificate or renew an existing one
--> the CERN CA site https://ca.cern.ch/ca/
Check certificate eligibilityやってみたら
The account kondo can request Grid user certificates on the CERN Grid Certification Authority.
とあった。しめしめ。2019.4.8 (samedi)と同じだ。
Overview--------------------------------------------------
Serial Number:1a688e5d000000074d2d
Template:Grid User
Effective Date 26/10/2018 15:48:04
Expiration Date:30/11/2019 14:48:04
Requester Name:Taka Kondo (kondo)
Common Name:kondo 405775 Taka Kondo
Distinguished Name:CN=Taka Kondo, CN=405775, CN=kondo, OU=Users, OU=Organic Units, DC=cern, DC=ch
Hash:9c 38 c1 02 4e c9 e9 95 59 28 d6 7d 31 f0 6a 74 da eb e0 f0
Algorithm:RSA RSA
Key Length:2048
Status:Issued
Attributes-------------------------------------------------------------
CertificateTemplate EE2User
UserAgentString Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; MAFSJS; rv:11.0) like Gecko
ccm CERNPKI06.cern.ch
-----------------------------------------------------------
とある。Expiration Date:30/11/2019 14:48:04 とあるのだからUser certificateは持っているのだと信じよう。
参考2には「作成直後にDownload certificateと表示され、そこをクリックするとPKCS12形式(.p12拡張子)でダウンロードできます。」とある。参考2をクリックすると、https://ca.cern.ch/ca/Help/?kbid=024010でpkcs12などが出てきた。IEをクリックしたら 2CPUが必要とかあるなあ？
https://ca.cern.ch/ca/Help/?kbid=031015
ではThoiryに帰ってからやろう。Target machineはLXPLUSだ。必要ないはず。
On the source machine where the certificate is installed:
Run Internet Explorer
Menu Tools -> Internet Options
Select Tab Content -> Click Certificates
Select Tab Personal
Select your certificate (issued to yourlogin by CERN Trusted Certification Autemiasahi2019hority)
Click Export -> Click Next
Select Yes Export the Private Key -> Click Next
Select Enable strong protection -> Click Next
Type in a password and DO NOT FORGET IT -> Click Next ＜＜＜emiasahi2019にした。
Select a filename (myCert.pfx) to save your certificate to, better save it into your My Documents folder -> Click Next
Click ＦＩＮＩＳＨ＜＜myCert.pfxをcomp/グリッドgrid/に保存した。
LXPLUSにはどう移すんだっけ？
----------2016.12.27---------------------には
織田からメール来た。
Web-->ツールー＞インターネットオプションー＞コンテンツー＞証明書ー＞個人ー＞TakaKondoをエクスポートー＞はい、秘密キーをエクスポートしますー＞GridCA.pfx
GridCA.pfxをlxplusに移し.globus/で拡張子を.p12に変えて
***********************************
[kondo@lxplus039]~/.globus% openssl pkcs12 -nocerts -in GridCA.p12 -out userkey.pem
Enter Import Password:敬!洋!信子05
MAC verified OK
Enter PEM pass phrase:emiasahi16
Verifying - Enter PEM pass phrase:emiasahi16「恵美朝日１６」
[kondo@lxplus039]~/.globus% ll
total 15
-rw-r--r--. 1 kondo zp 1667 Aug 29 2011 usercert_old.pem
-r--------. 1 kondo zp 1172 Aug 29 2011 userkey_old.pem
-rw-r--r--. 1 kondo zp 8426 Dec 27 06:19 GridCA.p12
-rw-r--r--. 1 kondo zp 2047 Dec 27 15:41 userkey.pem ＜ーーー出来た！
***********************************
[kondo@lxplus039]~/.globus% openssl pkcs12 -clcerts -nokeys -in GridCA.p12 -out usercert.pem
Enter Import Password:
MAC verified OK
[kondo@lxplus039]~/.globus% ll
total 20
-rw-r--r--. 1 kondo zp 1667 Aug 29 2011 usercert_old.pem
-r--------. 1 kondo zp 1172 Aug 29 2011 userkey_old.pem
-rw-r--r--. 1 kondo zp 8426 Dec 27 06:19 GridCA.p12
-rw-r--r--. 1 kondo zp 2047 Dec 27 15:41 userkey.pem
-rw-r--r--. 1 kondo zp 24 Dec 27 15:42 memo.here
-rw-r--r--. 1 kondo zp 3641 Dec 27 15:57 usercert.pem ＜ーーー出来た！
[kondo@lxplus039]~/.globus% chmod 400 usercert.pem
[kondo@lxplus039]~/.globus% chmod 400 userkey.pem
-r--------. 1 kondo zp 2047 Dec 27 15:41 userkey.pem
-r--------. 1 kondo zp 3641 Dec 27 15:57 usercert.pem
いま見たら
[kondo@lxplus755]~/.globus% ll
total 20
-rw-r--r--. 1 kondo zp 1667 Aug 29 2011 usercert_old.pem
-r--------. 1 kondo zp 1172 Aug 29 2011 userkey_old.pem
-rw-r--r--. 1 kondo zp 8426 Dec 27 2016 GridCA.p12
-r--------. 1 kondo zp 2047 Dec 27 2016 userkey.pem
-rw-r--r--. 1 kondo zp 24 Dec 27 2016 memo.here ＜＝＝＝passPhrase = emiasahi16とあるなあ。
-r--------. 1 kondo zp 3641 Dec 27 2016 usercert.pem ＜＝＝＝＝＝ちゃんとある昔のがそのまあある。
これでダメか見てみよう。
＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝
--------------2019.8.20 (mardi)-----------------------
明日のSCT weeklyのために
織田君から「ローカルで作るにしても入力のEVNTファイルを取って来る必要があるので、
グリッド証明書を取っておくのが良いと思います。
https://wiki.kek.jp/pages/viewpage.action?pageId=104204608
のCERNで取得する方法: 参考1, 参考2にやり方が書いてあります。簡単に取れます。」
single_mu.pyはsingle_muだけ人工的に作っているので、参考にならなさそうだ。
-------------2019.4.8 (samedi)-----------------
Grid自分でできるかチャレンジしてみよう。
TWiki kondoにsoftware basice欄を加えた。Grid User certificatesは申請できそうだ：
Check account eligibility for Grid user certificate でみたら
The account kondo can requestGrid user certificates on the CERN Grid Certification Authority.
とあったので。
http://wlcg.web.cern.ch/getting-started/certificatesでrequest a certificate.で
https://ca.cern.ch/ca/ が開いた。--> New Grid User certificate をクリックしたら
https://ca.cern.ch/ca/user/MyCertificates.aspxでは
?kondo 405775 Taka Kondo
Grid User (1a688e5d000000074d2d)
-----------Attribute-------------
Serial Number: 1a688e5d000000074d2d
Template: Grid User
Effective Date: 26/10/2018 15:48:04
Expiration Date: 30/11/2019 14:48:04 有効みたいだ！！！
Requester Name: Taka Kondo (kondo)
Common Name: kondo 405775 Taka Kondo
Distinguished Name: CN=Taka Kondo, CN=405775, CN=kondo, OU=Users, OU=Organic Units, DC=cern, DC=ch
Hash: 9c 38 c1 02 4e c9 e9 95 59 28 d6 7d 31 f0 6a 74 da eb e0 f0
Algorithm: RSA RSA
Key Length: 2048
Status: Issued
-------------------------------とあった。
?kondo-eduroam@cern.ch
EduRoam (149929b800010001015e) も
----------2016.12.27--------------------------に申し込んである！
https://lcg-voms2.cern.ch:8443/voms/atlasがないと言っている。T
サイトで古いか安全でない TLS セキュリティ設定が使用されている可能性があります。
KEK経由ではいってみよう。やっぱりだめ。
インターネットオプションの設定をリセットしてみると良さそうです。-->
----------2016.12.27---------------------------
https://cafiles.cern.ch/cafiles/certificates/windows.aspx?redir=0&ca=grid
に従ってcertificateをdownloadしたはず。-->Grod登録/GridCertificateInstallation.jpg
https://ca.cern.ch/ca/でMy certificates欄の「My User certificate」clickで
? kondo 405775 Taka Kondo
Grid User (1f66e6ec00000002d2dd)
とあるのでいいのかしら。
(12) https://www.racf.bnl.gov/docs/howto/grid/voatlas
https://lcg-voms2.cern.ch:8443/voms/atlas/register/start.actionから登録してみる
CERNのtel,roomを使うー＞
Dear taka.kondo@kek.jp,
you have requested to be a member of VO atlas.
In order for the registration to proceed, you should confirm this
request by going to the following url:
https://lcg-voms2.cern.ch:8443/voms/atlas/register/confirm-request.action?requestId=2908&confirmationId=4299a4b1-2b88-46b4-8b12-ad4ab7308216
In case you never requested to be a member of VO atlas, please
let us know by going to the following url:
https://lcg-voms2.cern.ch:8443/voms/atlas/register/cancel-request.action?requestId=2908&confirmationId=4299a4b1-2b88-46b4-8b12-ad4ab7308216
Your sincerely,
Voms-Admin registration service for VO atlas
メールに入っていたURLを開いてyesとしたら.
VO membership request confirmed.
You have succesfully confirmed your VO membership request. The VO administrator has been informed of your request and will handle it as soon as possible
https://lcg-voms2.cern.ch:8443/voms/atlas/register/start.action にも同じく
Welcome to the atlas VO,
takahiko kondo (KEK)
Your membership request is being handled by the VO administrators. You will receive a notification of their decision regarding your request shortly.
とあった！この次は？？
織田からメール来た。
Web-->ツールー＞インターネットオプションー＞コンテンツー＞証明書ー＞個人ー＞TakaKondoをエクスポートー＞はい、秘密キーをエクスポートしますー＞GridCA.pfx
GridCA.pfxをlxplusに移し.globus/で拡張子を.p12に変えて
***********************************
[kondo@lxplus039]~/.globus% openssl pkcs12 -nocerts -in GridCA.p12 -out userkey.pem
Enter Import Password:敬!洋!信子05
MAC verified OK
Enter PEM pass phrase:emiasahi16
Verifying - Enter PEM pass phrase:emiasahi16「恵美朝日１６」
[kondo@lxplus039]~/.globus% ll
total 15
-rw-r--r--. 1 kondo zp 1667 Aug 29 2011 usercert_old.pem
-r--------. 1 kondo zp 1172 Aug 29 2011 userkey_old.pem
-rw-r--r--. 1 kondo zp 8426 Dec 27 06:19 GridCA.p12
-rw-r--r--. 1 kondo zp 2047 Dec 27 15:41 userkey.pem ＜ーーー出来た！
***********************************
[kondo@lxplus039]~/.globus% openssl pkcs12 -clcerts -nokeys -in GridCA.p12 -out usercert.pem
Enter Import Password:
MAC verified OK
[kondo@lxplus039]~/.globus% ll
total 20
-rw-r--r--. 1 kondo zp 1667 Aug 29 2011 usercert_old.pem
-r--------. 1 kondo zp 1172 Aug 29 2011 userkey_old.pem
-rw-r--r--. 1 kondo zp 8426 Dec 27 06:19 GridCA.p12
-rw-r--r--. 1 kondo zp 2047 Dec 27 15:41 userkey.pem
-rw-r--r--. 1 kondo zp 24 Dec 27 15:42 memo.here
-rw-r--r--. 1 kondo zp 3641 Dec 27 15:57 usercert.pem ＜ーーー出来た！
[kondo@lxplus039]~/.globus% chmod 400 usercert.pem
[kondo@lxplus039]~/.globus% chmod 400 userkey.pem
-r--------. 1 kondo zp 2047 Dec 27 15:41 userkey.pem
-r--------. 1 kondo zp 3641 Dec 27 15:57 usercert.pem
ではいよいよGrid開始！！
[kondo@lxplus039]~/SCTcalib/HVscan% voms-proxy-init -voms atlas
Enter GRID pass phrase for this identity:
Contacting lcg-voms2.cern.ch:15001 [/DC=ch/DC=cern/OU=computers/CN=lcg-voms2.cern.ch] "atlas"...
Remote VOMS server contacted succesfully.
Created proxy in /tmp/x509up_u14739.
Your proxy is valid until Wed Dec 28 04:03:44 CET 2016
[kondo@lxplus039]~/SCTcalib/HVscan% lsetup rucio
************************************************************************
Requested: rucio ...
Setting up emi 3.17.1-1_v3.sl6 ...
Setting up rucio 1.8.3 ...
Info: Setting compatibility to slc6
Warning: missing 32-bit kerberos externals dir
Info: Set RUCIO_AUTH_TYPE to x509_proxy
Info: Set RUCIO_ACCOUNT to kondo
>>>>>>>>>>>>>>>>>>>>>>>>> Information for user <<<<<<<<<<<<<<<<<<<<<<<<<
emi:
Your proxy has 11h:59m:36s remaining
************************************************************************
SCTcalib/HVscanを作る。
[kondo@lxplus039]~/SCTcalib/HVscan% rucio ls data15_13TeV.00284484.physics_Main.daq.RAW > out_allfiles
*******************
----------2016.10.4---------------------------
Gridの始め方
http://wlcg.web.cern.ch/getting-started
(1) You need to be registered with a LHC-recognised VO (Virtual Organisation) before you can begin using the WLCG.
(2) See the WLCG User Guide for instructions on how to set up and get started.
(3) Users interested in other VOs, please search for your VO on the EGI Operations portal(link is external) or on the OSG Registration(link is external) database. If you can't find your VO, please open a GGUS ticket(link is external).
なのでhttp://wlcg.web.cern.ch/getting-started/VOを開いた。
(4) VO managerにコンタクトせよ。https://www.racf.bnl.gov/docs/howto/grid/joinvo開いたらなんとBNL!
You will send a request to join a VO, Then your "distinguished name" (DN), or your unique identity on the grid, will be added to the list of DNs for your VO, and all collaborating sites all around the world will recognize you as being part of your virtual organization.
US ATLAS users can (and should) begin Step 1 of the VO application process while waiting for their grid certificate
--> https://www.racf.bnl.gov/docs/howto/grid/voatlas
(5)Access to ATLAS grid resources is granted by joining the ATLAS VO. This is a three-step process that is accomplished entirely via the web using the VOMS service. Before proceeding:
(6) You'll not be able to proceed with these steps until you've obtained a grid certificate and installed it into your browser. If your organization does not provide or recommend a specific certificate authority (CA), you can request a certificate from the CERN CA.
grid certificateを取得せよと言っているのでthe CERN CAをclick。
(7) https://ca.cern.ch/ca/を開いたら
(8) Check account eligibility for Grid user certificate ->
https://ca.cern.ch/ca/certificates/CheckAccount.aspxでCheck certificate eligibilityをみたら
kondo でThe account kondo can request Grid user certificates on the CERN Grid Certification Authority.と出た！よかった。
(9) https://ca.cern.ch/ca/user/Request.aspx?template=EE2User (Request a new Grid User certificate)
This page will now create a certificate request for you.
1. When the "Web Access Confirmation" message appears, click on the Yes button to allow the site to request a new certificate for you.
2.After the certificate request has been created, it will be submitted automatically to the Certification Authority.
3. When the "Web Access Confirmation" message appear again, click on the Yes button to allow the site to add the new certificate to your computer.
とある。Nextに進む。
(10) デジタル証明書の操作を実行しますCA(10)ー＞はい
The installation of your new certificate failed
CertEnroll::CX509Enrollment::InstallResponse: 証明書チェーンは処理されましたが、信頼プロバイダーが信頼していないルート証明書で強制終了しました。 0x800b0109 (-2146762487 CERT_E_UNTRUSTEDROOT) CA(10a)
なのでretryを押す 何度やってもダメ。
(11) https://ca.cern.ch/ca/user/MyCertificates.aspxでMy User Certificateをみたらなんと
----------------------------------------
User certificates for account "Taka Kondo (kondo)"
Show only valid certificates
kondo 405775 Taka Kondo 04/10/2016 08/11/2017
Grid User (1f66e6ec00000002d2dd)
----------------------------------------
とあるではないか！CA(11) ーー＞kondo 405775クリックしたら
CA(11a)が出てきた！
-------------------------------------------
Serial Number: 1f66e6ec00000002d2dd
Template: Grid User
Effective Date: 04/10/2016 19:28:54 <-----これは10/4今日の事だ！メールは2016年10月05日(水) 02:38:55ーー＞26-7=19だから19:38:55 つまり10分後にメール発行された。
Expiration Date: 08/11/2017 18:28:54
Requester Name: Taka Kondo (kondo)
Common Name: kondo 405775 Taka Kondo
Distinguished Name: CN=Taka Kondo, CN=405775, CN=kondo, OU=Users, OU=Organic Units, DC=cern, DC=ch
Hash: a7 24 fd a3 0e 5e 19 46 a6 bd 9e 91 69 9d 1b 3d 1f f7 fe 3c
Algorithm: RSA RSA
Key Length: 2048
Status: Issued
----------------------------------------
04/10/2016にやったのかな？？日記にはないなあ。<--読み間違い！！
(12) https://www.racf.bnl.gov/docs/howto/grid/voatlasで
Register with ATLAS through VOMS (Virtual Organization Management Service)の
?Install the CERN Grid Certificate Authority certificate into your browser.を行う
(13)https://cafiles.cern.ch/cafiles/certificates/list.aspx?ca=gridの画面でWindowsをclickしたら
(14)https://cafiles.cern.ch/cafiles/certificates/windows.aspx?redir=0&ca=grid
が出てきたCA(14)。
Trust the CERN Grid Certification Authority
This page contains installation instructions for Windows.
For a complete list of available installation instructions, see here: ##CERN Grid Certification Authority certificates installation instructions
(15) To install the CERN Root Certification Authority 2 certificate in the Windows Certificate Store:
1.Download the CERN Root Certification Authority 2 Certificate and open the file.
2.The certificate information dialog will inform you that the certificate must be installed in the Trusted Root Certification Authorities Store. Click on Install Certificate. certificate import wizard
3.From the Certificate Import Wizard, in the certificate store selection dialog, choose the option Place all certificates in the following store, then click browse
certificate import wizard
4.In the Select Certificate Store dialog, select the Trusted Root Certification Authorities store and click Ok.
trusted root CAs store
5.Follow the remaining steps in the Certificate Import Wizard
6.When you see the Security Warning dialog, click Yes to confirm that you want to install the certificate.
trusted root CAs store
--> Grid登録/CA(15-1~7).jpg
(16) To install the CERN Grid Certification Authority certificate in the Windows Certificate Store:
1.Download the CERN Grid Certification Authority Certificate and open the file.
2.Follow the steps in the Certificate Import Wizard, leaving all the default parameters. --> Grid登録/CA(16-1~6).jpg
Grid登録/New user certificate issued for kondo.txtがメールに入っていた!!
(17) https://www.racf.bnl.gov/docs/howto/grid/voatlasに戻って
Register for the ATLAS VOの項を進む：
1.Browse to the ATLAS VOMS server.
Note that your personal certificate DN and Certificate Authority are noted on the registration page. If they are not, then you will need to install your certificate into your browser before proceeding.
https://lcg-voms2.cern.ch:8443/voms/atlas/user/home.action開いたら
「You're not a VO user. You'll see nothing around here. 」と言われた。
install your certificate into your browserをclickしたら
https://www.racf.bnl.gov/docs/howto/installcert/は存在しない（CA(17a))が
「Install Your Grid Certificate」があるのでclickする。
-->https://www.racf.bnl.gov/docs/howto/grid/installcert CA(17b)
Download and import the certificate
To download and install your certificate:
?ATLAS users: visit [the CERN CA site] to request a new certificate or renew an existing one. []をクリックするー＞
https://ca.cern.ch/ca/に戻ってしまった。[renew an existing one]がわからないなあ。
https://www.racf.bnl.gov/docs/howto/grid/installcertには
----------------------------------------------------------------
ATLAS users must wait until their CERN registration is complete (unless they're already registered CERN users) before proceeding with registration for the ATLAS VO.
----------------------------------------------------------------
とあるので待ってみるか！ 今日はここまでだ！
2.Complete all text fields; all are required:
?Given (first) name
?Family (last) name
?Institution
?Phone number (at your institution)
?Address (at your institution)
?Email address (this address must match your primary email address as registered with your CERN user account)
3.Read The VO AUP agreement, and click the check box to acknowledge and agree to the policy terms.
4.Click Submit.
5.You will be presented with a "Confirmation Required" page, which refers to an email you will receive, including a link to confirm your registration request (or to cancel your request if it was made in error). This link will remain valid for a one-week activation period. Please use this confirmation link before the expiration date, or your registration application will be discarded automatically.
6.Following the confirmation link should result in a page that confirms your VO membership request, and informs you that a VO administrator will handle your request as soon as possible.
You will receive an other confirmation email when your request has been confirmed.
If you receive an error message that your email address is not registered at CERN, you may need to wait a day or two after your registration has been confirmed so that your information can be completely processed.
----------2016.10.3---------------------------
今坂くんのjobを走らせるにはGrid登録が必要か！ 申し込むしかないのかな。
