Tomas Kouba wrote:
> Hello all,
>
> we have a new voms server for our regional VO and the proxy is issued fine,
> but I get the following error for voms-proxy-info -all:
>
> [koubat@ui2 ~]$ voms-proxy-info -file voms1.proxy -all
> WARNING: Unable to verify signature! Server certificate possibly not installed.
> Error: Unable to determine hostname from AC.
> subject : /DC=cz/DC=cesnet-ca/O=Institute of Physics of the Academy of Sciences of the CR/CN=Tomas Kouba/CN=proxy
> issuer : /DC=cz/DC=cesnet-ca/O=Institute of Physics of the Academy of Sciences of the CR/CN=Tomas Kouba
> ...
> the rest is fine
>
> What hostname is meant here? I have straced the command and I don't see it opening the
> lsc files in /etc/grid-security/vomsdir/<VO>/
>
> I think it is the reason of the problem.
>
> Thank you for any hint,
>
It means that the server is configured incorrectly.
On the server machine, one fo the following two MUST be true:
* The 'hostname' and 'domainname' commands return the correct values.
* the --uri <fully qualified hostname>:<port> option is present in
voms.conf.
In your machine none of the two are incorrect, and the result is that
when the verification procedure tries to get the hostname to select the
correct *.lsc file, it fails, and the error message you see is returned.
Ciao,
Vincenzo
|