This is what somebody who naively tries to install any of the UK VOs encounters:
---------- Forwarded message ----------
From: Alessandro Paolini <[log in to unmask]>
Date: 5 August 2011 13:12
Subject: Re: [wms-support] Re: another strange thing with (old) new WMS
To: Daniela Bauer <[log in to unmask]>
Cc: [log in to unmask], Massimo Sgaravatto - INFN Padova
<[log in to unmask]>, Andrea Cristofori
<[log in to unmask]>, Cristina Aiftimiei
<[log in to unmask]>, [log in to unmask], Andrew McNab
<[log in to unmask]>, Zdenek Sustr <[log in to unmask]>,
[log in to unmask], Peter Solagna <[log in to unmask]>,
Tiziana Ferrari <[log in to unmask]>
Il 05/08/2011 13:13, Daniela Bauer ha scritto:
>
> Hi All,
>
> the CIC portal lists this as:
> [log in to unmask]
>
> (note the capitals)
indeed I downloaded the pem files from there, But I didn't noticed the
difference in the emailAddress field
please correct the part "other requirements" where it is written:
cat voms.gridpp.ac.uk.lsc
[log in to unmask]
/C=UK/O=eScienceCA/OU=Authority/CN=UK e-Science CA
moreover, also on the voms server it is reported a wrong DN:
https://voms.gridpp.ac.uk:8443/voms/vo.londongrid.ac.uk/configuration/configuration.action
cheers,
Alessandro
>
> Sigh.
>
> Daniela
>
> On 5 August 2011 12:08, Alessandro Paolini
> <[log in to unmask]> wrote:
>>
>> Il 05/08/2011 12:56, Zdenek Salvet ha scritto:
>>>
>>> On Fri, Aug 05, 2011 at 11:13:24AM +0100, Daniela Bauer wrote:
>>>>
>>>> Hi,
>>>>
>>>> I have to admit, I can't see a difference in the logs depending on
>>>> whether I use the vomscert or not.
>>>> This is the log without vomscert:
>>>> http://www.hep.ph.ic.ac.uk/~dbauer/wms01/t2k.debug.log
>>>> and the with the vomscert:
>>>> http://www.hep.ph.ic.ac.uk/~dbauer/wms01/t2k.withpem.log
>>>
>>> Hi,
>>> please try to replace /Email= with /emailAddress=
>>> in the .lsc file (Grisite tries to deals with noncanonical string
>>> representation
>>> of DN at some places but not when checking .lsc files, I will submit a
>>> bugreport).
>>
>> Hi,
>> indeed the subject certificate contain emailAddress:
>>
>> # openssl x509 -noout -in voms.gridpp.ac.uk.pem -dates -subject
>> notBefore=Jan 20 14:54:22 2011 GMT
>> notAfter=Feb 19 14:54:22 2012 GMT
>> subject=
>> [log in to unmask]
>>
>> different for the one written in the .lsc file
>>
>> # less /etc/grid-security/vomsdir/vo.londongrid.ac.uk/voms.gridpp.ac.uk.lsc
>> [log in to unmask]
>> /C=UK/O=eScienceCA/OU=Authority/CN=UK e-Science CA
>>
>> anyway, on UI, where there is the same "wrong" lsc file, the proxy is
>> created without any problem...
>>
>> after the modification in the lsc file on WMS, submission is working
>> fine...so it was only a configuration problem...sorry for the mess created
>>
>> cheers,
>> Alessandro
>>>
>>> Cheers,
>>>
>>> Zdenek Salvet
>>> [log in to unmask]
>>> Institute of Computer Science of Masaryk University, Brno, Czech Republic
>>> and CESNET, z.s.p.o., Prague, Czech Republic
>>> Phone: ++420-549 49 6534 Fax: ++420-541 212 747
>>>
>>> ----------------------------------------------------------------------------
>>> Teamwork is essential -- it allows you to blame someone else.
>>>
>>
>> --
>> Dr. Alessandro Paolini
>> INFN - CNAF
>> Viale Berti Pichat 6/2
>> 40127 Bologna
>> Italy
>> tel: +39 051 6092723
>> fax: +39 051 6092916
>> ICQ: 192172027
>> skype: alex.paolini
>> **********************
>> "credo nel potere del riso e delle lacrime"
>> "come antidoto all'odio ed al terrore"
>> "un giorno senza un sorriso"
>> "è un giorno perso">>> Charlie Chaplin
>>
>>
>
>
--
Dr. Alessandro Paolini
INFN - CNAF
Viale Berti Pichat 6/2
40127 Bologna
Italy
tel: +39 051 6092723
fax: +39 051 6092916
ICQ: 192172027
skype: alex.paolini
**********************
"credo nel potere del riso e delle lacrime"
"come antidoto all'odio ed al terrore"
"un giorno senza un sorriso"
"è un giorno perso">>> Charlie Chaplin
--
-----------------------------------------------------------
[log in to unmask]
HEP Group/Physics Dep
Imperial College
Tel: +44-(0)20-75947810
http://www.hep.ph.ic.ac.uk/~dbauer/
|