On 16/03/2020 11:00, Daniela Bauer wrote:
> But they have to turn it off, so that no more old proxies are around
> before they change the cert, no ?
But if they turn it off, how can we (automatically) get the details of
the new certificate they have installed?
Catch 22.
Suggest they leave server up (to allow certificate to be read) but stop
VOMS-style services on it.
Best of both worlds? Let me know if that idea would work or if it's
nonsense.
Ste
>
> On Mon, 16 Mar 2020 at 09:23, Stephen Jones <[log in to unmask]
> <mailto:[log in to unmask]>> wrote:
>
> On 15/03/2020 13:51, Daniela Bauer wrote:
> > Wisconsin have turned their voms server off in preparation
>
> That is, from my point of view, the wrong thing to do, since the Ops
> Portal (the canonical source of VOMS info) queries each VOMS
> server for
> the DN/CA_DN. By turning the VOMS server off, the ops portal cannot
> determine the DN or CA_DN so they go blank. And, once they are
> blank,
> no-one can update since the values to update to are undefined (unless
> they update by hand, as you suggest.) And updating by hand is the
> worst,
> most error prone and inefficient way to update.
>
> OK, it's without doubt a rubbish system that is unthoughtout, but we
> still got to deal with it.
>
> So this is what I'll do. I'll omit LZ from the query to the Ops
> Portal,
> and insert the LZ record(s) by hand, adjusted as you say, leaving the
> Imperial records as they are. It's a PITA but it will work.
>
> I'll let you know.
>
> Cheers,
>
> Ste
>
>
>
> --
> Steve Jones [log in to unmask] <mailto:[log in to unmask]>
> Grid System Administrator office: 220
> High Energy Physics Division tel (int): 43396
> Oliver Lodge Laboratory tel (ext): +44 (0)151 794 3396
> University of Liverpool http://www.liv.ac.uk/physics/hep/
>
> ########################################################################
>
> To unsubscribe from the TB-SUPPORT list, click the following link:
> https://www.jiscmail.ac.uk/cgi-bin/webadmin?SUBED1=TB-SUPPORT&A=1
>
>
>
> --
> Sent from the pit of despair
>
> -----------------------------------------------------------
> [log in to unmask] <mailto:[log in to unmask]>
> HEP Group/Physics Dep
> Imperial College
> London, SW7 2BW
> Tel: +44-(0)20-75947810
> http://www.hep.ph.ic.ac.uk/~dbauer/
>
> ------------------------------------------------------------------------
>
> To unsubscribe from the TB-SUPPORT list, click the following link:
> https://www.jiscmail.ac.uk/cgi-bin/webadmin?SUBED1=TB-SUPPORT&A=1
>
--
Steve Jones [log in to unmask]
Grid System Administrator office: 220
High Energy Physics Division tel (int): 43396
Oliver Lodge Laboratory tel (ext): +44 (0)151 794 3396
University of Liverpool http://www.liv.ac.uk/physics/hep/
########################################################################
To unsubscribe from the TB-SUPPORT list, click the following link:
https://www.jiscmail.ac.uk/cgi-bin/webadmin?SUBED1=TB-SUPPORT&A=1
|