Thanks everyone for the help on this. Another follow-on question below.
Burke, S (Stephen) wrote:
> Just to add to what Maarten said, the problem is that the castorftp
> ip name resolves to several underlying servers. Those servers have
> host certificates for their real names, but older gridftp clients
> expect the name in the host certificate to match what they used to
> connect with.
So now I am remembering the post to LCG-ROLLOUT on this issue. I should
have been able to put that together myself. Anyway, the follow-up
problem is that the LHCb user in question does not and will not (for the
forseeable future) have a "full" LCG or Globus installation at the site.
The user can only install "local" software without root permissions
and needs a grid-ftp client that will work in this scenario.
I think this is quite a reasonable situation to be in. Many users will
need *just* the grid-ftp client. Presumably a statically-linked binary
with an appropriate set of CA certs and certificate policy should be
enough to run a grid-ftp client. Where would one find this?
Cheers,
Ian.
--
Ian Stokes-Rees [log in to unmask]
Particle Physics, Oxford http://grid.physics.ox.ac.uk/~stokes
|