Hi,
maybe you are "hit" by the problem mentioned in the
https://gus.fzk.de/ws/ticket_info.php?ticket=45474 - that seems ....
start spreading! Maybe a more deeper investigation should be done.
The solution was to remove the voms.cern.ch.lsc file.
Cristina
Peter Love wrote:
> Well, VOs have stopped listing lcg-voms.cern.ch in their CiC cards.
> I'm actually chasing another problem when I saw these errors, will
> treat this as mostly harmless now.
>
> Stephen, no idea about the user-side, maybe chase later.
>
> Thanks all for replying so late!
>
> 2009/2/4 <[log in to unmask]>:
>
>> On Wed, 4 Feb 2009, Peter Love wrote:
>>
>>
>>> Yeah, I looked at this. We had this:
>>>
>>> # cat /etc/grid-security/vomsdir/atlas/voms.cern.ch.lsc
>>> /DC=ch/DC=cern/OU=computers/CN=voms.cern.ch
>>> /DC=ch/DC=cern/CN=CERN Trusted Certification Authority
>>>
>>> Then I added this after asking another site, but pretty sure this host
>>> is defunct now.
>>>
>>> # cat /etc/grid-security/vomsdir/atlas/lcg-voms.cern.ch.lsc
>>> /DC=ch/DC=cern/OU=computers/CN=lcg-voms.cern.ch
>>> /DC=ch/DC=cern/CN=CERN Trusted Certification Authority
>>>
>> That host is _not_ defunct! You need both, but see below.
>>
>>
>>> # rpm -q lcg-CA lcg-vomscerts
>>> lcg-CA-1.26-1
>>> lcg-vomscerts-5.3.0-1
>>>
>> AFAIK the VOMS client still looks for certificates when the *.lsc files
>> fail to authenticate the VOMS server that issued the VOMS extensions.
>>
>> Since you did have the host cert of lcg-voms.cern.ch, it would not have
>> been a problem that there was no *.lsc file for that server...
>>
>> Anyway, people having a problem using your CE can open a ticket... :-)
>>
>>
>>
>
>
|