On Fri, 24 Dec 2004, Gonzalo Merino wrote:
> Hello,
>
> I have a question concerning the MyProxy nodes configuration: what is the
> format of the information that should be published in the info system for
> GlueServiceAccessControlRule?
>
> Some sites are now publishing there the same list of host certificate DNs
> of the trusted RB nodes, some others publish just the RB hostnames.
> The LCFGng installation guide for release LCG-2_3_0 doesn't say anything
> about this. It just says that a macro should be defined with the list of RB
> DNs, which goes then to the /etc/myproxy-server.config configuration file,
> but it is not clear wether the GlueServiceAccessControlRule in the lcginfo
> component should contain also DNs or just hostnames.
> Is there a rule to follow? If some mw is using these attributes, does
> somebody know which format it expects?
Currently there is no MW that looks at GlueServiceAccessControlRule for a
MyProxy node: it is just for human inspection. In the past it was suggested
to put the hostnames of the trusted RBs, but we decided it would be better
(and easier) to publish the trusted DNs instead, such that the information
is complete. So, please publish the DNs. Note: you need to upgrade your
LCFGng server for that; a bugfix is included in LCG-2_3_0.
|