[gridengine users] Installing GE in CSP mode?

[Joshua Baker-LePain]

On Thu, 17 May 2012 at 1:21pm, Orlando Richards wrote

>> Date: Wed, 16 May 2012 11:09:35 -0400
>> From: Prentice Bisbal<prentice at ias.edu>
>>
>> When I started using about 8 years ago, I was using CSP. In fact, CSP
>> was one of the main reasons I chose SGE over the other options (torque).
>> Unfortunately, I started getting SSL  errors when using the certs, which
>> are outlined in the this e-mail the the mailing list from September of
>> 2007:
>> 
>> http://arc.liv.ac.uk/pipermail/gridengine-users/2007-September/015678.html
>> 
>> I didn't get any replies from the list on how to fix this problem. I
>> dealt with this problem by generating new certificates, but then this
>> problem showed up again about 6 months later, so I generated new
>> certificates again. When I switched employers and implemented SGE again,
>> I opted not to use CSP to avoid having these errors again. I think CSP
>> is a great feature, one that I would use and advocate if it worked, but
>> unfortunately, it has issues, and no seems to want the feature enough to
>> make those issues a priority for developers.
>> 
>
> We suffered from exactly that problem too - and worked around it by setting 
> up a weekly cron job to create new a qmaster cert. That was under 6.1 I 
> think, not sure if it still persists in our 6.2u5 deployment but we're still 
> running the cron job anyway.

Throwing a "me too" in here, I've also suffered from the main SSL certs 
being reported as expired by SGE, even though they're still valid.  I 
would just generate new ones as needed.  I will say that I had it happen 
twice relatively quickly, and it hasn't happened for a while since.  This 
was also with 6.1.

-- 
Joshua Baker-LePain
QB3 Shared Cluster Sysadmin
UCSF