Hi,
Please send me the certificate host names of existing (or likely)
SE machines so I can add them to the GridPP GDMP servers list.
(eg /O=Grid/O=UKHEP/CN=host/gppse06.gridpp.rl.ac.uk )
The rest of this is going to be as clear as mud unless you're already
worrying about the GDMP VO's, so please feel free to skip it for now.
EDG has a VO listing GDMP servers that SE's can use to decide which
GDMP services at other sites should be trusted. I've set up a similar
GridPP GDMP servers group which is on the GridPP VO. You can get
a list of servers with
ldapsearch -x -h vo.gridpp.ac.uk -b \
'ou=gdmpservers,dc=gridpp,dc=ac,dc=uk' '(objectClass=*)'
However, this does not currently work with the mkgridmap utility
unless you remove all the auth lines from mkgridmap.conf.
(For the GridPP people list, you can use an auth line like
auth ldap://vo.gridpp.ac.uk/ou=testbed,dc=gridpp,dc=ac,dc=uk
and it will work ok. But our ou=gdmpservers one doesn't work as an auth
list.)
Until I sort out why the GDMP equivalent auth fails, anyone wanting to use
our GDMP servers _group_ for testing should make a second mkgridmap.conf
with just the gdmpservers group as "group" and "auth" lines; and
append/write the results to a static local grid-mapfile specified in their
_main_ mkgridmap.conf with gmf_local (this way you can force the GDMP
servers into the final grid-mapfile, even though the auth step has
failed.)
That is, a /opt/edg/etc/mkgridmap.gdmp.conf that just says:
group ldap://vo.gridpp.ac.uk/ou=gdmpservers,dc=gridpp,dc=ac,dc=uk gdmp
auth ldap://vo.gridpp.ac.uk/ou=gdmpservers,dc=gridpp,dc=ac,dc=uk
and in /opt/edg/etc/mkgridmap.conf all the usual stuff plus
gmf_local /opt/edg/etc/grid-mapfile-local
and you arrange to run
mkgridmap --file /opt/edg/etc/mkgridmap.gdmp.conf \
> /opt/edg/etc/grid-mapfile-local
at some regular interval.
Cheers,
Andrew
--------------------------------------------------------------------
Andrew McNab [log in to unmask]
http://www.hep.man.ac.uk/~mcnab/ +44-161-275-4227
Grid Research, High Energy Physics Group, University of Manchester
--------------------------------------------------------------------
|