On 30/11/2012 13:11, John Gordon wrote:
> We've been round this loop a couple of times before. Jens knows the history best as he negotiated in the past and even gave a special version of the UK Cert.
>
> - It is not as simple as them not supporting the 2B cert.
> - nothing to do with VOMS/VOMSRS
>
> The MS software used at CERN for the central authentication didn't like some attribute in the UK CA cert. It wasn't in the user cert as Jens gave them a specially signed version of the UK CA cert which worked and got things working for everyone. It may be a simple as Jens needing to do that again for the 2B cert.
It really does work if you use the mapping page from a CERN
IP address. After that it works from any IP address as far
as I can tell.
I don't think the certificate level problem is still there.
Cheers,
Andrew
--------------------------------------------------------------
Dr Andrew McNab, High Energy Physics, University of Manchester
www.hep.manchester.ac.uk/u/mcnab Skype/GTalk: andrew.mcnab.uk
|