Hi Sam,
The entries in your 'grid-voms.desy.de.lsc' are wrong! Must be:
cat /etc/grid-security/vomsdir/ilc/grid-voms.desy.de.lsc
/C=DE/O=GermanGrid/OU=DESY/CN=host/grid-voms.desy.de
/C=DE/O=GermanGrid/CN=GridKa-CA
Note the extra '/C=DE' of the host DN!
Cheers
Andreas
P.S.: As broadcasted, the change was necessary due to the changed DN
from our CA.
On Wed, 2 Jul 2008, Sam Skipsey wrote:
> Hi, all,
>
> We're a bit confused about why our DPM (srm.glite.ecdf.ed.ac.uk) isn't happy
> with the ILC VO.
>
> Users trying to connect get:
> 530 Login incorrect. : VOMS error when processing cert
>
>
> We've checked the contents of /etc/grid-security/vomsdir/ilc/
> which contains a single file:
> grid-voms.desy.de.lsc
>
>> cat grid-voms.desy.de.lsc
>
> /O=GermanGrid/OU=DESY/CN=host/grid-voms.desy.de
> /C=DE/O=GermanGrid/CN=GridKa-CA
>
>
> And our CAs are up-to-date (indeed, the DPM can be confirmed to work for
> ATLAS, LHCb, dteam VOs, and passes SAM tests with the ops VO).
>
> Any idea about what to check next?
>
----
Andreas Gellrich <[log in to unmask]>
DESY IT / Grid Computing
http://www.desy.de/~gellrich
|