Hi John,
In the operations portal (operations-portal.egi.eu/vo/search) the
servers at lcg-voms2.cern.ch and voms2.cern.ch
<https://goc.egi.eu/portal/index.php?Page_Type=Service&id=5391> use port
15002.
I believe that is generally assumed to be the canonical source.
Therefore the wiki at VOMSLSCfileConfiguration is assumed to be wrong (!)
Maybe we should ticket the maintainer of that page.
BTW: VomsSNooper is broken now because the Ops Portal XML dump is no
longer available in the new release.
I'll try to get it fixed. However, I did an updated of the Approved VOs
just before, so the VO records could be OK for a bit.
Cheers,
Steve
On 04/07/2014 05:11 PM, John Hill wrote:
> Hi all,
> I was just cross-checking the vo.d information produced by
> VomsSnooper with that on the Wiki page at
> https://twiki.cern.ch/twiki/bin/view/LCG/VOMSLSCfileConfiguration and
> have discovered a discrepancy in the "ops" configurations. From
> VomsSnooper, the VOMSES entry has (reformatted by me for clarity and
> ease of comparison)
>
> VOMSES="\
> 'ops lcg-voms.cern.ch 15009 \
> /DC=ch/DC=cern/OU=computers/CN=lcg-voms.cern.ch ops 24'
> 'ops lcg-voms2.cern.ch 15002 \
> /DC=ch/DC=cern/OU=computers/CN=lcg-voms2.cern.ch ops 24'
> 'ops voms.cern.ch 15009 \
> /DC=ch/DC=cern/OU=computers/CN=voms.cern.ch ops 24'
> 'ops voms2.cern.ch 15002 \
> /DC=ch/DC=cern/OU=computers/CN=voms2.cern.ch ops 24'
> "
>
> On the Wiki, the equivalent is
>
> VOMSES="\
> 'ops lcg-voms.cern.ch 15009 \
> /DC=ch/DC=cern/OU=computers/CN=lcg-voms.cern.ch ops 24' \
> 'ops voms.cern.ch 15009 \
> /DC=ch/DC=cern/OU=computers/CN=voms.cern.ch ops 24' \
> 'ops lcg-voms2.cern.ch 15009 \
> /DC=ch/DC=cern/OU=computers/CN=lcg-voms2.cern.ch ops 24' \
> 'ops voms2.cern.ch 15009 \
> /DC=ch/DC=cern/OU=computers/CN=voms2.cern.ch ops 24' \
> "
>
> Note the change 15009 ==> 15002 for lcg-voms2.cern.ch and
> voms2.cern.ch. Which is right (I would assume that it should be 15009
> everywhere)? ALICE, ATLAS, CMS and LHCb records don't have this
> discrepancy.
>
> John
>
> On 07/04/2014 10:41, Stephen Jones wrote:
>> Hi,
>>
>> Looking at these records, there are:
>>
>> 3 x VOMS_SERVERS, and
>> 4 x VOMSES/VOMS_CA_DN
>>
>> This is because lcg-voms.cern.ch still exists but is no longer a
>> "VomsAdminServer", and is thus
>> not included in the list of VOMS_SERVERS.
>>
>> Should we assume that lcg-voms.cern.ch is being removed, but is left
>> in-situ for the time
>> being to provide a systematic phase-out?
>>
>> Cheers,
>>
>> Steve
>>
>>
>>
>>
>> On 04/04/2014 02:41 PM, Stephen Jones wrote:
>>> Hopefully unscrambled version of ALICE records!!!
>>>
>>> VO_ALICE_VOMS_SERVERS="'vomss://lcg-voms2.cern.ch:8443/voms/alice?/alice'
>>>
>>> 'vomss://voms.cern.ch:8443/voms/alice?/alice'
>>> 'vomss://voms2.cern.ch:8443/voms/alice?/alice' "
>>>
>>> VO_ALICE_VOMSES="'alice lcg-voms.cern.ch 15000
>>> /DC=ch/DC=cern/OU=computers/CN=lcg-voms.cern.ch alice' 'alice
>>> lcg-voms2.cern.ch 15000
>>> /DC=ch/DC=cern/OU=computers/CN=lcg-voms2.cern.ch alice' 'alice
>>> voms.cern.ch 15000 /DC=ch/DC=cern/OU=computers/CN=voms.cern.ch alice'
>>> 'alice voms2.cern.ch 15000
>>> /DC=ch/DC=cern/OU=computers/CN=voms2.cern.ch alice' "
>>>
>>> VO_ALICE_VOMS_CA_DN="'/DC=ch/DC=cern/CN=CERN Trusted Certification
>>> Authority' '/DC=ch/DC=cern/CN=CERN Grid Certification Authority'
>>> '/DC=ch/DC=cern/CN=CERN Trusted Certification Authority'
>>> '/DC=ch/DC=cern/CN=CERN Grid Certification Authority' "
>>>
>>> Steve
>>
>>
--
Steve Jones [log in to unmask]
System Administrator office: 220
High Energy Physics Division tel (int): 42334
Oliver Lodge Laboratory tel (ext): +44 (0)151 794 2334
University of Liverpool http://www.liv.ac.uk/physics/hep/
|