LHC Computer Grid - Rollout
> [mailto:[log in to unmask]] On Behalf Of Gonzalo Merino said:
> I have a question concerning the MyProxy nodes configuration:
> what is the format of the information that should be
> published in the info system for
> GlueServiceAccessControlRule?
>
> Some sites are now publishing there the same list of host
> certificate DNs of the trusted RB nodes, some others publish
> just the RB hostnames.
I may be wrong, but I don't think there is any software interpreting that
information at the moment, it only gets read by humans so the format doesn't
matter so much. In principle it seems to me that it should be the host name;
the information is not used directly for authorization (that's part of the
internal myproxy config) but to work out which myproxy you can use for a
given broker, and in general you don't know what the DN is for a given
service (potentially it might be using a service certificate rather than the
host certificate).
Stephen
|