On Wed, 9 Nov 2005, Kristof Doms wrote:
> Hello all,
>
> I was wondering if it's is possible to have both a SE and a CE behind
> the same internet connection using NAT. Looking at the LCG-porttable
> shows me that there are no commonly used ports between CE and SE. But
Both have a gridftp server; a single node can be configured to be _both_
a CE and an SE, provided the SE is of type Classic, DPM or CASTOR
(the dCache gridftp server is incompatible with the usage on the CE).
> because the certificates get checked by their hostnames, would it be
> possible to have 2 canonical DNS names sharing the same IP-address and
> still be OK for the certificate check.
No. Globus will do a reverse DNS lookup of the IP address, which shall
result in a single canonical hostname, which shall appear in the host
certificate.
|