Skip to content

Switch from X.509 to SciTokens

X-Pipeline needs to be upgraded from using X.509 for authentication to using SciTokens, as described at https://computing.docs.ligo.org/guide/compsoft/roadmap/LVK/x509_retirement/ . We currently use X.509 for finding frames and for generating segment lists.

Note: A successful run using SciTokens to access Virgo data was performed on CIT at /home/patrick.sutton/Runs/O4b/Vela/run9/ . Here are the relevant notes from that run:

  • Running with V1 using info from this page to access Virgo frames: https://computing.docs.ligo.org/guide/htcondor/credentials/#scitokens-examples-cvmfs Specifically:
    1. run grb.py on ldas-pcdev5 (not osg3 because osg3 doesn't have the right version of ncurses).
    2. manually added these lines to xsearch.sub: use_oauth_services = scitokens environment = "BEARER_TOKEN_FILE=$$(CondorScratchDir)/.condor_creds/scitokens.use"
    3. submitted from ldas-osg3

The x-pipeline docco (on the old trac wiki) has four places where ligo-proxy-init is referenced and which need to be updated:

Edited by Patrick Sutton