Hi Steve,
I'll raise a ticket. I had expected that VomsSnooper had extracted
the information correctly from the Ops Portal, but thought I should give
you the chance to confirm this before raising a ticket!
Cheers,
John
On 08/04/2014 09:38, Stephen Jones wrote:
> Hi John,
>
> In the operations portal (operations-portal.egi.eu/vo/search) the
> servers at lcg-voms2.cern.ch and voms2.cern.ch
> <https://goc.egi.eu/portal/index.php?Page_Type=Service&id=5391> use port
> 15002.
>
> I believe that is generally assumed to be the canonical source.
>
> Therefore the wiki at VOMSLSCfileConfiguration is assumed to be wrong (!)
>
> Maybe we should ticket the maintainer of that page.
>
> BTW: VomsSNooper is broken now because the Ops Portal XML dump is no
> longer available in the new release.
>
> I'll try to get it fixed. However, I did an updated of the Approved VOs
> just before, so the VO records could be OK for a bit.
>
> Cheers,
>
> Steve
>
>
>
> On 04/07/2014 05:11 PM, John Hill wrote:
>> Hi all,
>> I was just cross-checking the vo.d information produced by
>> VomsSnooper with that on the Wiki page at
>> https://twiki.cern.ch/twiki/bin/view/LCG/VOMSLSCfileConfiguration and
>> have discovered a discrepancy in the "ops" configurations. From
>> VomsSnooper, the VOMSES entry has (reformatted by me for clarity and
>> ease of comparison)
>>
>> VOMSES="\
>> 'ops lcg-voms.cern.ch 15009 \
>> /DC=ch/DC=cern/OU=computers/CN=lcg-voms.cern.ch ops 24'
>> 'ops lcg-voms2.cern.ch 15002 \
>> /DC=ch/DC=cern/OU=computers/CN=lcg-voms2.cern.ch ops 24'
>> 'ops voms.cern.ch 15009 \
>> /DC=ch/DC=cern/OU=computers/CN=voms.cern.ch ops 24'
>> 'ops voms2.cern.ch 15002 \
>> /DC=ch/DC=cern/OU=computers/CN=voms2.cern.ch ops 24'
>> "
>>
>> On the Wiki, the equivalent is
>>
>> VOMSES="\
>> 'ops lcg-voms.cern.ch 15009 \
>> /DC=ch/DC=cern/OU=computers/CN=lcg-voms.cern.ch ops 24' \
>> 'ops voms.cern.ch 15009 \
>> /DC=ch/DC=cern/OU=computers/CN=voms.cern.ch ops 24' \
>> 'ops lcg-voms2.cern.ch 15009 \
>> /DC=ch/DC=cern/OU=computers/CN=lcg-voms2.cern.ch ops 24' \
>> 'ops voms2.cern.ch 15009 \
>> /DC=ch/DC=cern/OU=computers/CN=voms2.cern.ch ops 24' \
>> "
>>
>> Note the change 15009 ==> 15002 for lcg-voms2.cern.ch and
>> voms2.cern.ch. Which is right (I would assume that it should be 15009
>> everywhere)? ALICE, ATLAS, CMS and LHCb records don't have this
>> discrepancy.
>>
>> John
>>
>> On 07/04/2014 10:41, Stephen Jones wrote:
>>> Hi,
>>>
>>> Looking at these records, there are:
>>>
>>> 3 x VOMS_SERVERS, and
>>> 4 x VOMSES/VOMS_CA_DN
>>>
>>> This is because lcg-voms.cern.ch still exists but is no longer a
>>> "VomsAdminServer", and is thus
>>> not included in the list of VOMS_SERVERS.
>>>
>>> Should we assume that lcg-voms.cern.ch is being removed, but is left
>>> in-situ for the time
>>> being to provide a systematic phase-out?
>>>
>>> Cheers,
>>>
>>> Steve
>>>
>>>
>>>
>>>
>>> On 04/04/2014 02:41 PM, Stephen Jones wrote:
>>>> Hopefully unscrambled version of ALICE records!!!
>>>>
>>>> VO_ALICE_VOMS_SERVERS="'vomss://lcg-voms2.cern.ch:8443/voms/alice?/alice'
>>>>
>>>> 'vomss://voms.cern.ch:8443/voms/alice?/alice'
>>>> 'vomss://voms2.cern.ch:8443/voms/alice?/alice' "
>>>>
>>>> VO_ALICE_VOMSES="'alice lcg-voms.cern.ch 15000
>>>> /DC=ch/DC=cern/OU=computers/CN=lcg-voms.cern.ch alice' 'alice
>>>> lcg-voms2.cern.ch 15000
>>>> /DC=ch/DC=cern/OU=computers/CN=lcg-voms2.cern.ch alice' 'alice
>>>> voms.cern.ch 15000 /DC=ch/DC=cern/OU=computers/CN=voms.cern.ch alice'
>>>> 'alice voms2.cern.ch 15000
>>>> /DC=ch/DC=cern/OU=computers/CN=voms2.cern.ch alice' "
>>>>
>>>> VO_ALICE_VOMS_CA_DN="'/DC=ch/DC=cern/CN=CERN Trusted Certification
>>>> Authority' '/DC=ch/DC=cern/CN=CERN Grid Certification Authority'
>>>> '/DC=ch/DC=cern/CN=CERN Trusted Certification Authority'
>>>> '/DC=ch/DC=cern/CN=CERN Grid Certification Authority' "
>>>>
>>>> Steve
>>>
>>>
>
>
|