On 17/12/12 15:32, Claire Devereux wrote:
> Hi Stephen,
>
> This is probably because the NGS/NES did not require VOs to be registered
> through the CIC portal. They weren't necessarily EGI/WLCG relevant and
> NGS had its own lightweight registration system. We should probably
> get an PMB/NGI/NES decision if all VOs now need to go down the CIC route.
Yes, probably.
My current feeling is that the CIC Stephen's VOMSsnooper tool is a very
good way of autogenerating configuration - and checking its correctness
- and in the face of VOs updating things, whether it is still current.
For VOs that aren't supported on GridPP resources, that's not an issue,
but for VOs that are, there's a considerable advantage to having these
things in one place.
I think therefore that the advice should be that if they want GridPP
sites to support it, then it's worth the effort to register in the CIC
portal. I don't recall it being too difficult - but then perhaps I
didn't do most of the work.
Chris
>
> Cheers
>
> Claire
>
> -----Original Message-----
> From: Testbed Support for GridPP member institutes [mailto:[log in to unmask]] On Behalf Of Stephen Jones
> Sent: 17 December 2012 15:27
> To: [log in to unmask]
> Subject: Re: NGS/NES VOMS server (Was re Fwd: Migration of our VOMS services)
>
>> I shall start ticketing sites soon - though clearly sites should
>> make their own judgement of the risks of making changes this close to
>> Christmas.
>
> Hi Chris,
>
> before ticketing sites, it would be appropriate to ticket Neiss, the VO. Although they are present in the "Approved VOs" list, they have the special status of "data was not taken from the CIC Portal".
>
> We can munge in the data as we imagine it should be, but no site should be deemed "off protocol" until Neiss have entered their central config data in the CIC Portal, IMHO.
>
> Steve
>
> PS: I hope my comments are "Neiss" enough! (groan)
>
>
>
> On 12/17/2012 11:48 AM, Christopher J. Walker wrote:
>> Can I remind GridPP sites that the NGS VOMS server is being
>> incorporated into the GridPP one.
>>
>> Can sites that support VOs that use this server please add the GridPP
>> server to their configuration. This can be done by adding appropriate
>> entries to the yaim config, or .lsc files.
>>
>> Please don't remove support for the NGS VOMS server just yet.
>>
>> This affects all NGS VOs at GridPP sites - notably the ngs.ac.uk and
>> neiss.org.uk VOs.
>>
>>
>> Chris
>>
>>
>> -------- Original Message --------
>> Subject: Migration of our VOMS services
>> Date: Tue, 11 Dec 2012 15:39:35 +0000
>> From: John Kewley<[log in to unmask]>
>> Reply-To: [log in to unmask]
>> To: [log in to unmask]
>>
>> Hi
>>
>> As I hope you are aware the NGS VOMS server has been incorporated into
>> the GridPP one.
>>
>> The NGS one will be turned off at the end of the year so we need to
>> move everyone over to the new server.
>>
>> Old server:
>> https://voms.ngs.ac.uk:8443
>>
>> New (to us!) server
>> https://voms.gridpp.ac.uk:8443
>>
>> What we (as Ops) need to do is ensure that all servers have moved over
>> to the support the new server before the clients do, while maintaining
>> some support for those clients still using the old one.
>>
>> I have proposed the following:
>>
>> 0. voms.gridpp supports all the operational VOs from voms.ngs (DONE)
>> 1. All servers add support for voms.gridpp so clients of (for example)
>> the ngs.ac.uk VO can use either above server for now.
>> i.e. please don't remove support for ngs.ac.uk just yet (Target:
>> this week)
>> 2. We inform clients to stop using voms.ngs and start using
>> voms.gridpp and we re-release the
>> CertWizard (and VOMS-enabled GSI-SSHTERM) with this support (Target:
>> towards end of next week)
>> 3. We drop support in our servers for voms.ngs (ASAP after above,
>> depending on Xmas period!) 4. Robert can turn off voms.ngs in early
>> Jan, if not before.
>>
>> Note that to do this you'll need new vomses files and either .lsc
>> files or VOMS server certificates.
>>
>> Attached is a tarball of ALL the VOs supported in voms.gridpp. I have
>> also provided a quick script that generates this stuff.
>> Note that if you don't want to support ALL the VOs you'll have to
>> filter the ones you do.
>>
>> Please let Robert or I know if you have any problems
>>
>> Cheers
>>
>> JK
>>
>>
>>
>
>
|