Steve, are you also adding the entries for people who haven't yet renewed their certs?
John
-----Original Message-----
From: Testbed Support for GridPP member institutes [mailto:[log in to unmask]] On Behalf Of Steve Traylen
Sent: 14 December 2011 14:08
To: [log in to unmask]
Subject: Re: Update on the CERN VOMS problem
On Dec 14, 2011, at 2:55 PM, Jens Jensen wrote:
> Normally, one would run VOMS servers with -skipcacheck which bypasses
> the bug that insists on registering the issuer name as a part of the
> user's name. However, CERN apparently don't do this, because, as Steve
> says, it only helps as long as the old credential is valid - apparently
> if it expires before you can sign the AUP then you're stuffed?
>
Just to clear we do run with the skipcacheck but for the reason you mention above
it is of limited help.
> Steve Traylen is fixing it now by duplicating entries in the database.
> This should also do the trick, and require no special magic from the users.
Indeed CMS now has the additional entries added, I'll wait a couple of days just in case
of bad feedback.
More details in today WLCGs daily meeting minutes happening now.
Steve.
|