[log in to unmask] [mailto:[log in to unmask]] said:
> It would make debugging proxy renewal by an RB slightly easier:
> anyone can check if the MyProxy server has got the RB's DN right.
Only if you can guarantee that the two things are identical; does the info
provider read the DN out of the myproxy config? I guess not, otherwise the
original question wouldn't have been asked! If they are configured
separately by hand you could easily have a typo in one and not the other.
And the "anyone" still has to know what the correct DN is. Also, I'm not
sure what the expectation is about the use of service certificates, but if
you were using them the DN probably wouldn't tell you the RB host name.
On the other hand, maybe this is another reason to have an RB-specific
object in the information system. I'm intending to try writing a proposal in
the new year about the bootstrapping problem, i.e. avoiding lots of
hand-configuration on a UI, and the RB-PX links are part of that.
Stephen
|