> > Any attempt to block the voms
> > server from issuing, for example, an AC to a chained proxy,
> > would cripple myproxy functionality too.
>
> What if it declined to issue an AC if the proxy it was presented with
> had existing ACs which were expired?
Good idea!
However, I believe it is possible to strip ACs before trying renewing them,
and then this case is probably indistinguishable from a genuine creation of a
full voms-proxy, where first grid-proxy is created and then ACs are added...
If this is not true, then the idea can be used...
Regards, Antun
>
> > you are probably on a bit of a loosing side with this one, as
> > I know that atlas(5 days), cms(8 days) and lhcb(7 days) have
> > all increased the max time their cern voms servers will
> > provide ACs for...
>
> That's supposed to be a temporary exemption until the glite WMS is fully
> in production ...
>
> Stephen
------- End of Original Message -------
|