Hi Stephen,
On 04/16/2012 12:48 PM, Stephen Burke wrote:
> Is it a particular WMS that fails? You're trying to distinguish the
> two renewal proxies using the proxy name but the WMS doesn't know
> about that, it just retrieves a proxy by DN, so it's possible that it
> isn't selecting the right one, although I suppose it may be clever
> enough to use the one which it's authorised to renew.
Yes - uncertainly undermines trust. The mechanism needs to be
predictable, and standard components need to exhibit standard
behaviour. I wonder who we can get to address this requirement. Is it
already fully written up anywhere, with a flowchart etc?
Steve
--
Steve Jones [log in to unmask]
System Administrator office: 220
High Energy Physics Division tel (int): 42334
Oliver Lodge Laboratory tel (ext): +44 (0)151 794 2334
University of Liverpool http://www.liv.ac.uk/physics/hep/
|