Maarten, thanks for the answer.
I have already replaced the host certificates for the PIC CE and SEs and I have checked that:
-For the SEs: replacing the certificate files is totally transparent. There's no need to restart the gridftp server. The new connections after the
files change will use the new certificates automatically.
-For the CE: I restarted the gatekeeper while 6 atlas jobs were running and they are still there. It seems that they have indeed survived the
gatekeeper restart.
We will now again open the PBS queues at PIC.
cheers,
Gonzalo
Maarten Litmaath wrote:
> Gonzalo Merino wrote:
>
>> Hello,
>>
>> We are going to change the host certificates for the PIC CE, SEs, RB and
>> proxy machines to substitute the present ones (whose CA expires tomorrow)
>> with the ones signed by the new Spanish CA.
>> Once the file substitution has been done, we know we need to restart the
>> gatekeeper so that it realises about the certificate change.
>> Probably we will need to do it as well for the gridftp and srm servers.
>> Could somebody confirm this, and wether the jobs currently running in
>> the CE
>> will 'survive' a gatekeeper restart?
>
>
> We think jobs in steady state will survive, so go ahead and let us know
> the result.
--
Gonzalo Merino ([log in to unmask])
Port d'Informació Científica, PIC
Edifici-D, Universitat Autònoma de Barcelona
08193 Bellaterra (Barcelona) SPAIN
Tel: +34 93 5813322 / Fax: +34 93 5814110
|