Hi,
As the originator of the thread I can confirm that it works if you tunnel to
CERN (although I admit the logic behind restricting that page to just CERN
does escape me).
Once you've mapped you certificate it works fine with the shibboleth auth
without the tunnel.
Yours,
Chris.
> -----Original Message-----
> From: Testbed Support for GridPP member institutes [mailto:TB-
> [log in to unmask]] On Behalf Of John Kewley
> Sent: 30 November 2012 13:57
> To: [log in to unmask]
> Subject: Re: Mapping UK Certificates to CERN accounts
>
> As I recall the 2B one didn't have the same issue, but it sounds like from
> other posters that it isn't a certificate issue this time round.
>
> Cheers
>
> JK
>
> > -----Original Message-----
> > From: Testbed Support for GridPP member institutes [mailto:TB-
> > [log in to unmask]] On Behalf Of John Gordon
> > Sent: Friday, November 30, 2012 1:12 PM
> > To: [log in to unmask]
> > Subject: Re: Mapping UK Certificates to CERN accounts
> >
> > We've been round this loop a couple of times before. Jens knows the
> > history best as he negotiated in the past and even gave a special
version of
> the UK Cert.
> >
> > - It is not as simple as them not supporting the 2B cert.
> > - nothing to do with VOMS/VOMSRS
> >
> > The MS software used at CERN for the central authentication didn't
> > like some attribute in the UK CA cert. It wasn't in the user cert as
> > Jens gave them a specially signed version of the UK CA cert which worked
> and got things working for everyone.
> > It may be a simple as Jens needing to do that again for the 2B cert.
> >
> > John
> >
> > -----Original Message-----
> > From: Testbed Support for GridPP member institutes [mailto:TB-
> > [log in to unmask]] On Behalf Of Andrew Elwell
> > Sent: 30 November 2012 11:23
> > To: [log in to unmask]
> > Subject: Re: Mapping UK Certificates to CERN accounts
> >
> > > So has someone submitted a ticket to CERN to open it ? (If not, I'll
do it).
> > > If we don't tell them, they'll never know there's a problem.
> >
> > not ticketed, but have mailed the person concerned - he's
> > investigating
> > --
> > Scanned by iCritical.
> --
> Scanned by iCritical.
|