Hi Antun,
> > The WMS should never try to _retrieve_ a proxy. Instead it should
> > always try to _renew_ a proxy. Are you sure the WMS node is _only_
> > used as a WMS?
>
> Yes, only as WMS/LB, completely sure.
>
> Well, I certainly hope WMS does not try to retrieve a proxy but to renew it -
> this option is set for users trying to store and retrieve a proxy from another
> UI...
That is a dangerous practice. A user may upload a password-protected proxy
onto the MyProxy server and as a side effect the WMS cannot renew proxies
for that user... Maybe this is exactly what happened?
A password-protected proxy should have a different name (use "-l" option
of myproxy-init) or key ("-k" option), to avoid problems with the WMS.
But then that name or key must be made known to the service that will do
the retrieval of the proxy...
|