Andreas Gellrich wrote:
> Hi Sam,
> The entries in your 'grid-voms.desy.de.lsc' are wrong! Must be:
>
> cat /etc/grid-security/vomsdir/ilc/grid-voms.desy.de.lsc
> /C=DE/O=GermanGrid/OU=DESY/CN=host/grid-voms.desy.de
> /C=DE/O=GermanGrid/CN=GridKa-CA
>
> Note the extra '/C=DE' of the host DN!
>
When did this change, Andreas? I got the old version from one of the
various official lists of VO entries...
Anyway, I've made the relevant alteration on the srm and pool nodes.
Sam
P.S
Can you actually /run/ stuff on our CE, then? That's still using the
"old" DN as well...
> Cheers
> Andreas
>
> P.S.: As broadcasted, the change was necessary due to the changed DN
> from our CA.
>
> On Wed, 2 Jul 2008, Sam Skipsey wrote:
>
>> Hi, all,
>>
>> We're a bit confused about why our DPM (srm.glite.ecdf.ed.ac.uk) isn't
>> happy
>> with the ILC VO.
>>
>> Users trying to connect get:
>> 530 Login incorrect. : VOMS error when processing cert
>>
>>
>> We've checked the contents of /etc/grid-security/vomsdir/ilc/
>> which contains a single file:
>> grid-voms.desy.de.lsc
>>
>>> cat grid-voms.desy.de.lsc
>>
>> /O=GermanGrid/OU=DESY/CN=host/grid-voms.desy.de
>> /C=DE/O=GermanGrid/CN=GridKa-CA
>>
>>
>> And our CAs are up-to-date (indeed, the DPM can be confirmed to work for
>> ATLAS, LHCb, dteam VOs, and passes SAM tests with the ops VO).
>>
>> Any idea about what to check next?
>>
>
> ----
> Andreas Gellrich <[log in to unmask]>
> DESY IT / Grid Computing
> http://www.desy.de/~gellrich
>
|