Hi Daniela,
Is the Biomed VOMS server set up using .lsc-based stuff in vomsdir, or
do you actually have an up-to-date VOMS server cert for it?
We've found that a lot of VOs break horribly if they have to use the
.lsc standard, despite this being the way people were supposed to be
moving to.
Sam
On 24 November 2010 13:35, Daniela Bauer
<[log in to unmask]> wrote:
> Hi All,
>
> I can support biomed just fine on the SE, provided I let them authenticate
> via the gridmap file. Which I did until a couple of days ago. The certs etc
> are up-to-date.
>
> The problem is that a) the dcache implementation of this (gridmapfile
> authentication) is rather dodgy (just in case somebody wanted to ramp up the
> security challenge...) and b) - this is the actual issue I am trying to
> solve - it loses all information about the groups/roles, so all users get
> mapped to plain vanilla users.
>
> I use the same authentication mechanism for other VOs and it works just fine
> there (typos in my hand generated access list aside), so there is something
> special about the biomed VO.
>
> Daniela
>
>
> On 24 November 2010 13:14, Stephen Burke <[log in to unmask]> wrote:
>>
>> Testbed Support for GridPP member institutes [mailto:TB-
>> > [log in to unmask]] On Behalf Of J Coles said:
>> > More specifically by this I meant that they do not appear to have run
>> > any biomed work this year.
>>
>> OK, but they could presumably be asked to test it to see if the same
>> problem appears.
>>
>> Stephen
>
>
>
> --
> -----------------------------------------------------------
> [log in to unmask]
> HEP Group/Physics Dep
> Imperial College
> Tel: +44-(0)20-75947810
> http://www.hep.ph.ic.ac.uk/~dbauer/
>
|