Hi Maarten,
That's really good to hear! Thanks for the reassurance.
Cheers,
--john
[log in to unmask] wrote:
> Hi John,
>
>> Whether the documentation clearly states something or not may not matter
>> much in the wider world.
>>
>> A great deal of existing software (all of the OSG auth infrastructure,
>> for example) assumes that the first FQAN in a VOMS proxy is the special
>> one that was specifically requested. And a great many users and their
>> custom-written client software uses voms-proxy-init without --order, and
>> these applications will break if VOMS servers no longer place the
>> explicitly requested FQAN first.
>>
>> I'd say in this case the specification has been superceded by reality,
>> and "explicity-requested-first" is the de facto standard.
>>
>> Why can't --order simply be set as the default? This is a very big issue
>> that shut down ATLAS production for ~1/2 day a few weeks ago.
>
> The old behavior essentially will be restored in the next version:
> the specified FQANs will appear in the given order, any extra groups
> will follow in an unspecified order; the "-order" option, when provided,
> will have precedence.
--
John R. Hover
RHIC/ATLAS Computing Facility, Bldg. 510M
Physics Department
Brookhaven National Laboratory
Upton, NY 11973
email: [log in to unmask]
tel: 631-344-5828
|