Hi Markus,
is it true that all we have to do is to get a certificate for the MON box
and we don't have to rerun any configuration script? If this is not all we
have to do, could we have a wiki with detailed instructions rather than a
long thread on lcg-rollout?
thanks
cheers
alessandra
On Mon, 5 Dec 2005, Markus Schulz wrote:
> Dear ROC, CIC, and Site Managers,
>
> since quite a while an authenticated version of R-GMA has been around. Up to
> now we have run R-GMA in a mode where the service could be used
> with or without authorization.
> As most of you are aware, in depth discussions between the grid security
> experts have taken place and it became clear that switching to the more
> secure authenticated access will be a significant improvement.
>
> We are currently finishing our tests using R-GMA-5 and will start an upgrade
> shortly.
>
> To prepare for this switch and make a smooth transition sites can do the
> following:
>
> All sites:
> get a host certificate for you Mon-box and archivers (we are not aware of any
> run outside CERN or RAL)
>
> Large sites:
> Due to the need to migrate clients and servers at the same time, it might
> help to run during the upgrade two R-GMA MON-boxes side by side.
> This would allow to migrate without interrupting the service for an extended
> period. If you choose this path you might want to look for an additional
> machine.
>
> We look forward to your comments, questions, and suggestions.
>
>
> markus
>
--
********************************************
* Dr Alessandra Forti *
* Technical Coordinator - NorthGrid Tier2 *
* http://www.hep.man.ac.uk/u/aforti *
********************************************
|