Hello Steve,
lcg-voms.cern.ch and lcg-voms.cern.ch are not valid for atlas since yesterday. UI should be reconfigured to use lcg-voms2.cern.ch and voms2.cern.ch.
Elena
On 25 Nov 2014, at 16:50, Steve Lloyd <[log in to unmask]> wrote:
> [lloyd@atlastest tests]$ voms-proxy-init --voms atlas
> Enter GRID pass phrase for this identity:
> Contacting lcg-voms.cern.ch:15001 [/DC=ch/DC=cern/OU=computers/CN=lcg-voms.cern.ch] "atlas"...
> Error contacting lcg-voms.cern.ch:15001 for VO atlas: Connection refused
> Error contacting lcg-voms.cern.ch:15001 for VO atlas: Connection refused
> Error contacting lcg-voms.cern.ch:15001 for VO atlas: REST and legacy VOMS endpoints failed.
> Contacting voms.cern.ch:15001 [/DC=ch/DC=cern/OU=computers/CN=voms.cern.ch] "atlas"...
> Error contacting voms.cern.ch:15001 for VO atlas: Connection refused
> Error contacting voms.cern.ch:15001 for VO atlas: Connection refused
> Error contacting voms.cern.ch:15001 for VO atlas: REST and legacy VOMS endpoints failed.
> None of the contacted servers for atlas were capable of returning a valid AC for the user.
> User's request for VOMS attributes could not be fulfilled.
>
> ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
> + Prof Steve Lloyd Head of School +
> + E-mail: [log in to unmask] School of Physics and Astronomy +
> + Phone: +44-(0)207-882-6967 Queen Mary University of London +
> + Fax: +44-(0)207-882-7033 Mile End Road, London E1 4NS, UK +
> ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
>
>
>
>
>> On 25 Nov 2014, at 15:49, Winnie Lacesso <[log in to unmask]> wrote:
>>
>> Good afternoon! (was held prisoner in IT StaffConference most of day)
>> Daniela wrote:
>>> The right syntax is:
>>> voms-proxy-init --voms cms
>>
>> I was trying to force it to use one of the new servers since apparently on
>> 26 Nov (tomorrow) the old ones are to retire?! Or something like that.
>> (I could be wrong about that)
>>
>> Steve & Ewan, THANKS**N for info. Using Steve's HowTo on the OX UI:
>>
>> lacesso@pplxint8> voms-proxy-init --voms cms --vomses /etc/vomses/cms-lcg-voms2.cern.ch
>> Enter GRID pass phrase for this identity:
>> Contacting lcg-voms2.cern.ch:15002
>> [/DC=ch/DC=cern/OU=computers/CN=lcg-voms2.cern.ch] "cms"...
>> Remote VOMS server contacted succesfully.
>>
>> WARNING: VOMS AC validation for VO cms failed for the following reasons:
>> LSC signature validation failed: matching AA cert
>> CN=lcg-voms2.cern.ch,OU=computers,DC=cern,DC=ch fails signature
>> verification.
>> AC signature verification failure: no valid VOMS server
>> credential found.
>>
>> Created proxy in /tmp/x509up_u1152.
>>
>> Your proxy is valid until Tue Nov 25 22:52:03 GMT 2014
>>
>> Not sure if that's success or fail! Same output using
>> /etc/vomses/cms-voms2.cern.ch
>>
>> With voms-proxy-init --voms cms --vomses /etc/vomses/cms-lcg-voms.cern.ch
>> No such error messages.
>>
>> However not likely any CMS users at Oxford so suppose not matter!
>>
>> On the Bristol UI, both the new ones work fine:
>>
>> phpwl@lcgui02> voms-proxy-init --voms cms --vomses /etc/vomses/cms-lcg-voms2.cern.ch
>> Enter GRID pass phrase for this identity:
>> Contacting lcg-voms2.cern.ch:15002 [/DC=ch/DC=cern/OU=computers/CN=lcg-voms2.cern.ch] "cms"...
>> Remote VOMS server contacted succesfully.
>> Created proxy in /tmp/x509up_u50895.
>> Your proxy is valid until Wed Nov 26 03:41:56 GMT 2014
>>
>> ditto using --vomses /etc/vomses/cms-voms2.cern.ch Hurrah!
>>
>> They had consistently errored out before (first tried this several days
>> ago). Suspect someone at remote end may've noticed something wrong & fixed
>> it - it all works now.
>>
>> Thanks as ever for the good TB-SUPPORT!
>>
>> Winnie Lacesso / Bristol University Particle Physics Computing Systems
>> HH Wills Physics Laboratory, Tyndall Avenue, Bristol, BS8 1TL, UK
|