[HTCondor-users] x509UserProxy not refreshing proxy (correctly)

["Koschmieder, Lukas" <Lukas.Koschmieder@xxxxxxxxxxxxxxxxxxx>]

Hi Condor users,

I'm using x509UserProxy to delegate my GSI credentials to my execute nodes. Condor is supposed to refresh the proxy before it expires. But for some reason, the proxy's "expiration date" (Validity > Not Before) is not updated at all. Condor only keeps updating the "activation date" (Validity > Not After) as soon as the remaining time left hits the 30 minutes mark.

--
Tue May 22 18:25:43 CEST 2018
        Validity
            Not Before: May 22 17:55:22 2018 CEST
            Not After : May 22 19:00:10 2018 CEST
--
Tue May 22 18:30:43 CEST 2018
        Validity
            Not Before: May 22 17:55:22 2018 CEST
            Not After : May 22 19:00:10 2018 CEST
--
Tue May 22 18:35:43 CEST 2018
        Validity
            Not Before: May 22 18:27:43 2018 CEST
            Not After : May 22 19:00:10 2018 CEST
--
Tue May 22 18:40:43 CEST 2018
        Validity
            Not Before: May 22 18:27:43 2018 CEST
            Not After : May 22 19:00:10 2018 CEST
--
Tue May 22 18:45:43 CEST 2018
        Validity
            Not Before: May 22 18:37:43 2018 CEST
            Not After : May 22 19:00:10 2018 CEST


I've already tried to enable ignore_globus_limited_proxy_flag in /etc/myproxy-server.config. But this doesn't make any difference.

Do you have any ideas?

This is the test job which produces the above log:

#!/bin/bash
while true; do
echo --
date
openssl x509 -in $X509_USER_PROXY -text | grep -A2 Valid
sleep 300
done

Cheers,
Lukas

--
Lukas Koschmieder
Steel Institute IEHK
RWTH Aachen University
Intzestraße 1
52072 Aachen
Germany