Dear ROC, CIC, and Site Managers,
since quite a while an authenticated version of R-GMA has been
around. Up to now we have run R-GMA in a mode where the service could
be used
with or without authorization.
As most of you are aware, in depth discussions between the grid
security experts have taken place and it became clear that switching
to the more secure authenticated access will be a significant
improvement.
We are currently finishing our tests using R-GMA-5 and will start an
upgrade shortly.
To prepare for this switch and make a smooth transition sites can do
the following:
All sites:
get a host certificate for you Mon-box and archivers (we are not
aware of any run outside CERN or RAL)
Large sites:
Due to the need to migrate clients and servers at the same time, it
might help to run during the upgrade two R-GMA MON-boxes side by side.
This would allow to migrate without interrupting the service for an
extended period. If you choose this path you might want to look for
an additional machine.
We look forward to your comments, questions, and suggestions.
markus
|