From our point of view, of course, the critical thing is not when the old servers stop being used, but when the new servers start being used.
________________________________________
From: Testbed Support for GridPP member institutes [[log in to unmask]] on behalf of Jeremy Coles [[log in to unmask]]
Sent: 04 April 2014 15:53
To: [log in to unmask]
Subject: Re: New VO Records in Approved VOs
Hi John,
I’m glad you remembered the broadcast. The link to remind others is https://operations-portal.egi.eu/broadcast/archive/id/1102.
I think the VO cards have only just been updated and early May was put forward as desirable. The old servers will run for a while after that though. The move away from VOMRS is indeed hastened by the need to support SHA-2.
Jeremy
On 4 Apr 2014, at 15:34, John Hill <[log in to unmask]<mailto:[log in to unmask]>> wrote:
There was a EGI BROADCAST about this on 17 March. We are supposed to change every instance except UIs before 6 May. The broadcast suggested that it was preparation for SHA-2.
John
On 04/04/2014 15:30, Jeremy Coles wrote:
Hi Steve,
Well spotted.
I believe the plan is for the VOs to move over to those new VOMS servers in the coming months and then when ready the old ones will be removed (it is coupled with the move away from VOMRS).
The update from yesterday’s WLCG ops coordination meeting (more of which we’ll cover on Tuesday) was:
"the EGI Operations Portal VO cards for the experiments have been updated with the details of the future VOMS servers”.
Jeremy
On 4 Apr 2014, at 14:38, Stephen Jones <[log in to unmask]<mailto:[log in to unmask]>> wrote:
Hi All,
The VO records for WLCG experiments have changed quite bit.
I've updated the Approved VOs document to contain the newest XML data from the Operations Portal.
The updated document is available here: https://www.gridpp.ac.uk/wiki/GridPP_approved_VOs
And a tar file of the records is available (for inclusion in /root/glitecfg etc.) here: http://hep.ph.liv.ac.uk/VomsSnooper/glitecfg.tar
Below is a short summary of the changes I could see when I eye-balled it.
Steve
----------------------- SHORT SUMMARY ---------------------------
The VO records for ALICE, ATLAS, CMS, LHCB and OPS have all changed to include records for this set of VOMS servers:
* lcg-voms2.cern.ch<http://lcg-voms2.cern.ch>
* voms.cern.ch<http://voms.cern.ch>
* voms2.cern.ch<http://voms2.cern.ch>
I present the records for ALICE by way of example:
VO_ALICE_VOMS_SERVERS="'vomss://lcg-voms2.cern.ch:8443/voms/alice?/alice' 'vomss://voms.cern.ch:8443/voms/alice?/alice' 'vomss://voms2.cern.ch:8443/voms/alice?/alice' " VO_ALICE_VOMSES="'alice lcg-voms.cern.ch<http://lcg-voms.cern.ch> 15000 /DC=ch/DC=cern/OU=computers/CN=lcg-voms.cern.ch<http://lcg-voms.cern.ch> alice' 'alice lcg-voms2.cern.ch<http://lcg-voms2.cern.ch> 15000 /DC=ch/DC=cern/OU=computers/CN=lcg-voms2.cern.ch<http://lcg-voms2.cern.ch> alice' 'alice voms.cern.ch<http://voms.cern.ch> 15000 /DC=ch/DC=cern/OU=computers/CN=voms.cern.ch<http://voms.cern.ch> alice' 'alice voms2.cern.ch<http://voms2.cern.ch> 15000 /DC=ch/DC=cern/OU=computers/CN=voms2.cern.ch<http://voms2.cern.ch> alice' " VO_ALICE_VOMS_CA_DN="'/DC=ch/DC=cern/CN=CERN Trusted Certification Authority' '/DC=ch/DC=cern/CN=CERN Grid Certification Authority' '/DC=ch/DC=cern/CN=CERN Trusted Certification Authority' '/DC=ch/DC=cern/CN=CERN Grid Certification Authority' "
------------------------------------------------------------
--
Steve Jones [log in to unmask]<mailto:[log in to unmask]>
System Administrator office: 220
High Energy Physics Division tel (int): 42334
Oliver Lodge Laboratory tel (ext): +44 (0)151 794 2334
University of Liverpool http://www.liv.ac.uk/physics/hep/
|