On 15/01/14 11:20, Jeremy Coles wrote:
> Dear All,
>
> For anyone wanting a good summary of the history, current observations and plans regarding the OpenSSL (and Java 7) issue affecting us please see Maarten's GDB talk from today: http://indico.cern.ch/materialDisplay.py?contribId=5&sessionId=0&materialId=slides&confId=272795.
>
> A reminder that we are in the process of updating UK core services (particularly the WMS - CERN's will be done next Tuesday) before recommending sites updating nodes to the latest OpenSSL. More news on progress to come.
>
My tests yesterday to UK sites came to the following conclusion:
There are still problems with the WMSs - but it looks like they only
apply when proxies are renewed.
I've posted to lcg-rollout,
https://www.jiscmail.ac.uk/cgi-bin/webadmin?A2=LCG-ROLLOUT;17600067.1401
but am posting here to fill in a few more UK specific details.
Some jobs fail on all WMSs for various reasons I haven't explored.
Imperial:
All jobs have a 1024 bit proxy, but some fail with an expired proxy.
RAL and Glasgow:
Most jobs have at least a 1024 bit proxy (Glasgow and RAL have updated
WMSs). Some end up with a 512 bit proxy.
Notably for one batch of jobs sent to the same WMS and CE, but different
queues, (lcgwms04 ->ce05 at QMUL) one job has a 512 bit key (but more
delegations).
output-jobIDfile-lcgwms04.gridpp.rl.ac.uk-ce05.esc.qmul.ac.uk/walker_GaDi7lr3KPRq80eU3svKDg
Public-Key: (1024 bit)
Public-Key: (2048 bit)
Public-Key: (512 bit)
Public-Key: (2048 bit)
Public-Key: (2048 bit)
Public-Key: (2048 bit)
Public-Key: (2048 bit)
output-jobIDfile-lcgwms04.gridpp.rl.ac.uk-ce05.esc.qmul.ac.uk/walker_K-K9zmVyy1Mp1_3Rloh_Rg
Public-Key: (1024 bit)
Public-Key: (2048 bit)
Public-Key: (1024 bit)
Public-Key: (1024 bit)
Public-Key: (2048 bit)
output-jobIDfile-lcgwms04.gridpp.rl.ac.uk-ce05.esc.qmul.ac.uk/walker_XOWMV7dbstMbMcnvFgR_lg
Public-Key: (1024 bit)
Public-Key: (2048 bit)
Public-Key: (1024 bit)
Public-Key: (1024 bit)
Public-Key: (2048 bit)
output-jobIDfile-lcgwms04.gridpp.rl.ac.uk-ce05.esc.qmul.ac.uk/walker_XQWBfLS-d_4E1Ljxvn5_fQ
Public-Key: (1024 bit)
Public-Key: (2048 bit)
Public-Key: (1024 bit)
Public-Key: (1024 bit)
Public-Key: (2048 bit)
The extra keys on the job where the proxy has 512 bits suggest it has
one more level of delegation (which I assume is due to proxy renewal).
Chris
|