Thanks,
In the UK, we determine the bulk of our voms settings from the EGI
Portal. DUNE is not in that, so we have a special manual file for that
VO (and a couple of others).
I'll update the file, with the data given by Steven Timm.
I'll create a new "Approved VOs" document showing the new settings. I'll
mention it in the ops meeting bulletin (today). I'll create a new set of
RPMs for all approved VOs (some sites use those instead of manual
updates.) I'll send a message of this (TB_SUPPORT) when that's done.
I think that's all we need to do; obviously sites with DUNE services
need to update using whatever method they employ.
Cheers,
Ste Jones
GridPP/Liverpool
On 01/04/2019 17:09, Daniela Bauer wrote:
> For anyone supporting DUNE, this just came in.
>
> Regards,
> Daniela
>
> ---------- Forwarded message ---------
> From: *Steven C Timm* <[log in to unmask] <mailto:[log in to unmask]>>
> Date: Mon, 1 Apr 2019 at 15:57
> Subject: INFO on VOMS DN changes at Fermilab EFFECTIVE TODAY!
> To: dune-computing-sites <[log in to unmask]
> <mailto:[log in to unmask]>>
>
>
> The VOMS servers at Fermilab, voms1.fnal.gov <http://voms1.fnal.gov>
> and voms2.fnal.gov <http://voms2.fnal.gov>, will be changing their
> Distinguished Name.
>
>
> voms2.fnal.gov <http://voms2.fnal.gov> will change TODAY April 1
>
>
> voms1.fnal.gov <http://voms1.fnal.gov> will change Tuesday April 23
>
>
> The new DN's will be as follows
>
>
> -bash-4.1$ openssl x509 -in ./voms1.fnal.gov-cert.pem -noout -subject
> -issuer
>
> subject= /DC=org/DC=incommon/C=US/ST=IL/L=Batavia/O=Fermi Research
> Alliance/OU=Fermilab/CN=voms1.fnal.gov <http://voms1.fnal.gov>
>
> issuer= /C=US/O=Internet2/OU=InCommon/CN=InCommon IGTF Server CA
>
>
> -bash-4.1$ openssl x509 -in ./voms2.fnal.gov-cert.pem -noout -subject
> -issuer
>
> subject= /DC=org/DC=incommon/C=US/ST=IL/L=Batavia/O=Fermi Research
> Alliance/OU=Fermilab/CN=voms2.fnal.gov <http://voms2.fnal.gov>
>
> issuer= /C=US/O=Internet2/OU=InCommon/CN=InCommon IGTF Server CA
>
>
> -------
>
>
> Correct vomses entries:
>
>
> "dune" "voms1.fnal.gov <http://voms1.fnal.gov>" "15042"
> "/DC=org/DC=incommon/C=US/ST=IL/L=Batavia/O=F
>
> ermi Research Alliance/OU=Fermilab/CN=voms1.fnal.gov
> <http://voms1.fnal.gov>" "dune"
>
> "dune" "voms2.fnal.gov <http://voms2.fnal.gov>" "15042"
> "/DC=org/DC=incommon/C=US/ST=IL/L=Batavia/O=F
>
> ermi Research Alliance/OU=Fermilab/CN=voms2.fnal.gov
> <http://voms2.fnal.gov>" "dune"\
>
>
>
> Correct LSC files
>
> [timm@snowball dune]$ cat voms1.fnal.gov.lsc
>
> /DC=org/DC=incommon/C=US/ST=IL/L=Batavia/O=Fermi Research
> Alliance/OU=Fermilab/CN=voms1.fnal.gov <http://voms1.fnal.gov>
>
> /C=US/O=Internet2/OU=InCommon/CN=InCommon IGTF Server CA
>
>
> [timm@snowball dune]$ cat voms2.fnal.gov.lsc
>
> /DC=org/DC=incommon/C=US/ST=IL/L=Batavia/O=Fermi Research
> Alliance/OU=Fermilab/CN=voms2.fnal.gov <http://voms2.fnal.gov>
>
> /C=US/O=Internet2/OU=InCommon/CN=InCommon IGTF Server CA
>
>
>
> Request any help available from the European sites to get these
> deployed on the European side.
>
> US transition is in progress with the OSG software team.
>
>
> Thanks
>
>
> Steve Timm
>
>
>
>
> --
> Sent from the pit of despair
>
> -----------------------------------------------------------
> [log in to unmask] <mailto:[log in to unmask]>
> HEP Group/Physics Dep
> Imperial College
> London, SW7 2BW
> Tel: +44-(0)20-75947810
> http://www.hep.ph.ic.ac.uk/~dbauer/
>
> ------------------------------------------------------------------------
>
> To unsubscribe from the TB-SUPPORT list, click the following link:
> https://www.jiscmail.ac.uk/cgi-bin/webadmin?SUBED1=TB-SUPPORT&A=1
>
--
Steve Jones [log in to unmask]
Grid System Administrator office: 220
High Energy Physics Division tel (int): 43396
Oliver Lodge Laboratory tel (ext): +44 (0)151 794 3396
University of Liverpool http://www.liv.ac.uk/physics/hep/
########################################################################
To unsubscribe from the TB-SUPPORT list, click the following link:
https://www.jiscmail.ac.uk/cgi-bin/webadmin?SUBED1=TB-SUPPORT&A=1
|