Hi John,
Yes; I suspect that's a manual transcription error. It's virtually
impossible to keep such documents up to date without scripting it. Maybe
they should use VomsSnooper to update the document, like we do?
BTW: The ops portal is now working properly and VomsSnooper downloads well.
Steve
On 04/08/2014 09:41 AM, John Hill wrote:
> Hi Steve,
> I'll raise a ticket. I had expected that VomsSnooper had extracted
> the information correctly from the Ops Portal, but thought I should
> give you the chance to confirm this before raising a ticket!
> Cheers,
> John
>
> On 08/04/2014 09:38, Stephen Jones wrote:
>> Hi John,
>>
>> In the operations portal (operations-portal.egi.eu/vo/search) the
>> servers at lcg-voms2.cern.ch and voms2.cern.ch
>> <https://goc.egi.eu/portal/index.php?Page_Type=Service&id=5391> use port
>> 15002.
>>
>> I believe that is generally assumed to be the canonical source.
>>
>> Therefore the wiki at VOMSLSCfileConfiguration is assumed to be wrong
>> (!)
>>
>> Maybe we should ticket the maintainer of that page.
>>
>> BTW: VomsSNooper is broken now because the Ops Portal XML dump is no
>> longer available in the new release.
>>
>> I'll try to get it fixed. However, I did an updated of the Approved VOs
>> just before, so the VO records could be OK for a bit.
>>
>> Cheers,
>>
>> Steve
>>
>>
>>
>> On 04/07/2014 05:11 PM, John Hill wrote:
>>> Hi all,
>>> I was just cross-checking the vo.d information produced by
>>> VomsSnooper with that on the Wiki page at
>>> https://twiki.cern.ch/twiki/bin/view/LCG/VOMSLSCfileConfiguration and
>>> have discovered a discrepancy in the "ops" configurations. From
>>> VomsSnooper, the VOMSES entry has (reformatted by me for clarity and
>>> ease of comparison)
>>>
>>> VOMSES="\
>>> 'ops lcg-voms.cern.ch 15009 \
>>> /DC=ch/DC=cern/OU=computers/CN=lcg-voms.cern.ch ops 24'
>>> 'ops lcg-voms2.cern.ch 15002 \
>>> /DC=ch/DC=cern/OU=computers/CN=lcg-voms2.cern.ch ops 24'
>>> 'ops voms.cern.ch 15009 \
>>> /DC=ch/DC=cern/OU=computers/CN=voms.cern.ch ops 24'
>>> 'ops voms2.cern.ch 15002 \
>>> /DC=ch/DC=cern/OU=computers/CN=voms2.cern.ch ops 24'
>>> "
>>>
>>> On the Wiki, the equivalent is
>>>
>>> VOMSES="\
>>> 'ops lcg-voms.cern.ch 15009 \
>>> /DC=ch/DC=cern/OU=computers/CN=lcg-voms.cern.ch ops 24' \
>>> 'ops voms.cern.ch 15009 \
>>> /DC=ch/DC=cern/OU=computers/CN=voms.cern.ch ops 24' \
>>> 'ops lcg-voms2.cern.ch 15009 \
>>> /DC=ch/DC=cern/OU=computers/CN=lcg-voms2.cern.ch ops 24' \
>>> 'ops voms2.cern.ch 15009 \
>>> /DC=ch/DC=cern/OU=computers/CN=voms2.cern.ch ops 24' \
>>> "
>>>
>>> Note the change 15009 ==> 15002 for lcg-voms2.cern.ch and
>>> voms2.cern.ch. Which is right (I would assume that it should be 15009
>>> everywhere)? ALICE, ATLAS, CMS and LHCb records don't have this
>>> discrepancy.
>>>
>>> John
>>>
>>> On 07/04/2014 10:41, Stephen Jones wrote:
>>>> Hi,
>>>>
>>>> Looking at these records, there are:
>>>>
>>>> 3 x VOMS_SERVERS, and
>>>> 4 x VOMSES/VOMS_CA_DN
>>>>
>>>> This is because lcg-voms.cern.ch still exists but is no longer a
>>>> "VomsAdminServer", and is thus
>>>> not included in the list of VOMS_SERVERS.
>>>>
>>>> Should we assume that lcg-voms.cern.ch is being removed, but is left
>>>> in-situ for the time
>>>> being to provide a systematic phase-out?
>>>>
>>>> Cheers,
>>>>
>>>> Steve
>>>>
>>>>
>>>>
>>>>
>>>> On 04/04/2014 02:41 PM, Stephen Jones wrote:
>>>>> Hopefully unscrambled version of ALICE records!!!
>>>>>
>>>>> VO_ALICE_VOMS_SERVERS="'vomss://lcg-voms2.cern.ch:8443/voms/alice?/alice'
>>>>>
>>>>>
>>>>> 'vomss://voms.cern.ch:8443/voms/alice?/alice'
>>>>> 'vomss://voms2.cern.ch:8443/voms/alice?/alice' "
>>>>>
>>>>> VO_ALICE_VOMSES="'alice lcg-voms.cern.ch 15000
>>>>> /DC=ch/DC=cern/OU=computers/CN=lcg-voms.cern.ch alice' 'alice
>>>>> lcg-voms2.cern.ch 15000
>>>>> /DC=ch/DC=cern/OU=computers/CN=lcg-voms2.cern.ch alice' 'alice
>>>>> voms.cern.ch 15000 /DC=ch/DC=cern/OU=computers/CN=voms.cern.ch alice'
>>>>> 'alice voms2.cern.ch 15000
>>>>> /DC=ch/DC=cern/OU=computers/CN=voms2.cern.ch alice' "
>>>>>
>>>>> VO_ALICE_VOMS_CA_DN="'/DC=ch/DC=cern/CN=CERN Trusted Certification
>>>>> Authority' '/DC=ch/DC=cern/CN=CERN Grid Certification Authority'
>>>>> '/DC=ch/DC=cern/CN=CERN Trusted Certification Authority'
>>>>> '/DC=ch/DC=cern/CN=CERN Grid Certification Authority' "
>>>>>
>>>>> Steve
>>>>
>>>>
>>
>>
--
Steve Jones [log in to unmask]
System Administrator office: 220
High Energy Physics Division tel (int): 42334
Oliver Lodge Laboratory tel (ext): +44 (0)151 794 2334
University of Liverpool http://www.liv.ac.uk/physics/hep/
|