Hi,
David McBride wrote:
>Hi,
>
>Two problems:
>
>* The site SFT result page at
>https://lcg-sft.cern.ch:9443/sft/lastreport.cgi currently doesn't list
>_any_ sites. There used to be ~200 there the last time I looked..!
>
>
Ouch... that's bad :(
I'll see with Piotr (if he's back) or Judit (if she did not leave
already) :]
>(If you know the hostname of a CE, you can still look at site-specific
>results with the sitehistory.cgi script, eg
>https://lcg-sft.cern.ch/sft/sitehistory.cgi?site=mars-ce.mars.lesc.doc.ic.ac.uk)
>
>* The Certificate Revocation List test is currently throwing a critical
>warning at my site -- and, indeed, at the majority of other sites when I
>last checked the SFT lastreport.cgi page. However, I cannot review the
>log output of this test because I am apparently not on the ACL for
>'secure' results at my site. Is this a known problem, and should I be
>worried?
>
>
>
I'll send a test job to see what's wrong... maybe your update CRL cron
is not working well ?
Did you update the fetch-crl script ( thread : [LCG-ROLLOUT] LCG-2_6_0
updates: edg-utils-*-1.8.1-1 )
>(The inability to determine whether or not a certificate should be
>trusted is obviously a security concern..)
>
>
By default, if a CRL is out of date, the certificate will not be accepted.
So you'll have GSS minor/major failures with job submissions , gridftp
and so on for some users...
Cheers,
Fred
>Cheers,
>David
>
>
|