I'm not sure what you mean by 'not configured BY DEFAULT'. This
file should be created when YAIM is run, and thus by default the crls will
be downloaded.
An
ls -lrt /etc/grid-security/certificates/
on your node will show clearly whether or not the crls have been
downloaded recently (should be every 6 hours).
Are you saying that this file exists on your system but the crls
are not downloaded?
-Oliver
--------------------------------------------------------------------
Oliver Keeble Information Technology Department
[log in to unmask] CERN
+41 22 76 74929 CH-1211 Geneva 23
On Mon, 31 Jan 2005, Lev Shamardin wrote:
> On Mon, Jan 31, 2005 at 05:01:07PM +0100, Javier Fontan wrote:
> > Hello,
> >
> > In my installation there is this file:
> >
> > /etc/cron.d/edg-fetch-crl
> >
> > I hope it helps
>
> It is surely installed, I know, but it is not configured BY DEFAULT. If we
> are now relying on the YAIM configuration tool, it MUST configure crontab to
> update CRLs. Ignoring this is a breach hole in LCG security!
>
> --
> Lev.
>
|