Hi all,
Since voms1.fnal.gov changed yesterday, I'll update documentation for
that right away.
But voms2.fnal.gov remains as it is until 23rd April (3 weeks).
I'll update documentation for that when it is closer.
Note: staggering the updates like this gives a time margin, so any
particular site can have at least one service properly configured at any
time.
But it does mean that two site updates are needed; one now, and one in
three weeks...
However, since it's sufficient for only one (of the two) voms servers
to be configured properly, sites could save effort and wait until (say)
19th April, then update both at once.
(But I can't dictate what site admins should do. It's their call.)
Cheers,
Ste
GridPP/Liverpool
On 02/04/2019 09:14, Stephen Jones wrote:
> Thanks,
>
> In the UK, we determine the bulk of our voms settings from the EGI
> Portal. DUNE is not in that, so we have a special manual file for
> that VO (and a couple of others).
>
> I'll update the file, with the data given by Steven Timm.
>
> I'll create a new "Approved VOs" document showing the new settings.
> I'll mention it in the ops meeting bulletin (today). I'll create a new
> set of RPMs for all approved VOs (some sites use those instead of
> manual updates.) I'll send a message of this (TB_SUPPORT) when that's
> done.
>
> I think that's all we need to do; obviously sites with DUNE services
> need to update using whatever method they employ.
>
> Cheers,
>
> Ste Jones
> GridPP/Liverpool
>
>
>
>
>
> On 01/04/2019 17:09, Daniela Bauer wrote:
>> For anyone supporting DUNE, this just came in.
>>
>> Regards,
>> Daniela
>>
>> ---------- Forwarded message ---------
>> From: *Steven C Timm* <[log in to unmask] <mailto:[log in to unmask]>>
>> Date: Mon, 1 Apr 2019 at 15:57
>> Subject: INFO on VOMS DN changes at Fermilab EFFECTIVE TODAY!
>> To: dune-computing-sites <[log in to unmask]
>> <mailto:[log in to unmask]>>
>>
>>
>> The VOMS servers at Fermilab, voms1.fnal.gov <http://voms1.fnal.gov>
>> and voms2.fnal.gov <http://voms2.fnal.gov>, will be changing their
>> Distinguished Name.
>>
>>
>> voms2.fnal.gov <http://voms2.fnal.gov> will change TODAY April 1
>>
>>
>> voms1.fnal.gov <http://voms1.fnal.gov> will change Tuesday April 23
>>
>>
>> The new DN's will be as follows
>>
>>
>> -bash-4.1$ openssl x509 -in ./voms1.fnal.gov-cert.pem -noout -subject
>> -issuer
>>
>> subject= /DC=org/DC=incommon/C=US/ST=IL/L=Batavia/O=Fermi Research
>> Alliance/OU=Fermilab/CN=voms1.fnal.gov <http://voms1.fnal.gov>
>>
>> issuer= /C=US/O=Internet2/OU=InCommon/CN=InCommon IGTF Server CA
>>
>>
>> -bash-4.1$ openssl x509 -in ./voms2.fnal.gov-cert.pem -noout -subject
>> -issuer
>>
>> subject= /DC=org/DC=incommon/C=US/ST=IL/L=Batavia/O=Fermi Research
>> Alliance/OU=Fermilab/CN=voms2.fnal.gov <http://voms2.fnal.gov>
>>
>> issuer= /C=US/O=Internet2/OU=InCommon/CN=InCommon IGTF Server CA
>>
>>
>> -------
>>
>>
>> Correct vomses entries:
>>
>>
>> "dune" "voms1.fnal.gov <http://voms1.fnal.gov>" "15042"
>> "/DC=org/DC=incommon/C=US/ST=IL/L=Batavia/O=F
>>
>> ermi Research Alliance/OU=Fermilab/CN=voms1.fnal.gov
>> <http://voms1.fnal.gov>" "dune"
>>
>> "dune" "voms2.fnal.gov <http://voms2.fnal.gov>" "15042"
>> "/DC=org/DC=incommon/C=US/ST=IL/L=Batavia/O=F
>>
>> ermi Research Alliance/OU=Fermilab/CN=voms2.fnal.gov
>> <http://voms2.fnal.gov>" "dune"\
>>
>>
>>
>> Correct LSC files
>>
>> [timm@snowball dune]$ cat voms1.fnal.gov.lsc
>>
>> /DC=org/DC=incommon/C=US/ST=IL/L=Batavia/O=Fermi Research
>> Alliance/OU=Fermilab/CN=voms1.fnal.gov <http://voms1.fnal.gov>
>>
>> /C=US/O=Internet2/OU=InCommon/CN=InCommon IGTF Server CA
>>
>>
>> [timm@snowball dune]$ cat voms2.fnal.gov.lsc
>>
>> /DC=org/DC=incommon/C=US/ST=IL/L=Batavia/O=Fermi Research
>> Alliance/OU=Fermilab/CN=voms2.fnal.gov <http://voms2.fnal.gov>
>>
>> /C=US/O=Internet2/OU=InCommon/CN=InCommon IGTF Server CA
>>
>>
>>
>> Request any help available from the European sites to get these
>> deployed on the European side.
>>
>> US transition is in progress with the OSG software team.
>>
>>
>> Thanks
>>
>>
>> Steve Timm
>>
>>
>>
>>
>> --
>> Sent from the pit of despair
>>
>> -----------------------------------------------------------
>> [log in to unmask] <mailto:[log in to unmask]>
>> HEP Group/Physics Dep
>> Imperial College
>> London, SW7 2BW
>> Tel: +44-(0)20-75947810
>> http://www.hep.ph.ic.ac.uk/~dbauer/
>>
>> ------------------------------------------------------------------------
>>
>> To unsubscribe from the TB-SUPPORT list, click the following link:
>> https://www.jiscmail.ac.uk/cgi-bin/webadmin?SUBED1=TB-SUPPORT&A=1
>>
>
--
Steve Jones [log in to unmask]
Grid System Administrator office: 220
High Energy Physics Division tel (int): 43396
Oliver Lodge Laboratory tel (ext): +44 (0)151 794 3396
University of Liverpool http://www.liv.ac.uk/physics/hep/
########################################################################
To unsubscribe from the TB-SUPPORT list, click the following link:
https://www.jiscmail.ac.uk/cgi-bin/webadmin?SUBED1=TB-SUPPORT&A=1
|