Print

Print


Thanks,

In the UK, we determine  the bulk of our voms settings from the EGI 
Portal. DUNE is not in that, so we have a  special manual file for that 
VO (and a couple of others).

I'll update the file, with the data given by Steven Timm.

I'll create a new "Approved VOs" document showing the new settings. I'll 
mention it in the ops meeting bulletin (today). I'll create a new set of 
RPMs for all approved VOs (some sites use those instead of manual 
updates.) I'll send a message of this (TB_SUPPORT) when that's done.

I think that's all we need to do; obviously sites with DUNE services 
need to update using whatever method they employ.

Cheers,

Ste Jones
GridPP/Liverpool





On 01/04/2019 17:09, Daniela Bauer wrote:
> For anyone supporting DUNE, this just came in.
>
> Regards,
> Daniela
>
> ---------- Forwarded message ---------
> From: *Steven C Timm* <[log in to unmask] <mailto:[log in to unmask]>>
> Date: Mon, 1 Apr 2019 at 15:57
> Subject: INFO on VOMS DN changes at Fermilab EFFECTIVE TODAY!
> To: dune-computing-sites <[log in to unmask] 
> <mailto:[log in to unmask]>>
>
>
> The VOMS servers at Fermilab, voms1.fnal.gov <http://voms1.fnal.gov> 
> and voms2.fnal.gov <http://voms2.fnal.gov>, will be changing their 
> Distinguished Name.
>
>
> voms2.fnal.gov <http://voms2.fnal.gov> will change TODAY April 1
>
>
> voms1.fnal.gov <http://voms1.fnal.gov> will change Tuesday April 23
>
>
> The new DN's will be as follows
>
>
> -bash-4.1$ openssl x509 -in ./voms1.fnal.gov-cert.pem -noout -subject 
> -issuer
>
> subject= /DC=org/DC=incommon/C=US/ST=IL/L=Batavia/O=Fermi Research 
> Alliance/OU=Fermilab/CN=voms1.fnal.gov <http://voms1.fnal.gov>
>
> issuer= /C=US/O=Internet2/OU=InCommon/CN=InCommon IGTF Server CA
>
>
> -bash-4.1$ openssl x509 -in ./voms2.fnal.gov-cert.pem -noout -subject 
> -issuer
>
> subject= /DC=org/DC=incommon/C=US/ST=IL/L=Batavia/O=Fermi Research 
> Alliance/OU=Fermilab/CN=voms2.fnal.gov <http://voms2.fnal.gov>
>
> issuer= /C=US/O=Internet2/OU=InCommon/CN=InCommon IGTF Server CA
>
>
> -------
>
>
> Correct vomses entries:
>
>
> "dune" "voms1.fnal.gov <http://voms1.fnal.gov>" "15042" 
> "/DC=org/DC=incommon/C=US/ST=IL/L=Batavia/O=F
>
> ermi Research Alliance/OU=Fermilab/CN=voms1.fnal.gov 
> <http://voms1.fnal.gov>" "dune"
>
> "dune" "voms2.fnal.gov <http://voms2.fnal.gov>" "15042" 
> "/DC=org/DC=incommon/C=US/ST=IL/L=Batavia/O=F
>
> ermi Research Alliance/OU=Fermilab/CN=voms2.fnal.gov 
> <http://voms2.fnal.gov>" "dune"\
>
>
>
> Correct LSC files
>
> [timm@snowball dune]$ cat voms1.fnal.gov.lsc
>
> /DC=org/DC=incommon/C=US/ST=IL/L=Batavia/O=Fermi Research 
> Alliance/OU=Fermilab/CN=voms1.fnal.gov <http://voms1.fnal.gov>
>
> /C=US/O=Internet2/OU=InCommon/CN=InCommon IGTF Server CA
>
>
> [timm@snowball dune]$ cat voms2.fnal.gov.lsc
>
> /DC=org/DC=incommon/C=US/ST=IL/L=Batavia/O=Fermi Research 
> Alliance/OU=Fermilab/CN=voms2.fnal.gov <http://voms2.fnal.gov>
>
> /C=US/O=Internet2/OU=InCommon/CN=InCommon IGTF Server CA
>
>
>
> Request any help available from the European sites to get these 
> deployed on the European side.
>
> US transition is in progress with the OSG software team.
>
>
> Thanks
>
>
> Steve Timm
>
>
>
>
> -- 
> Sent from the pit of despair
>
> -----------------------------------------------------------
> [log in to unmask] <mailto:[log in to unmask]>
> HEP Group/Physics Dep
> Imperial College
> London, SW7 2BW
> Tel: +44-(0)20-75947810
> http://www.hep.ph.ic.ac.uk/~dbauer/
>
> ------------------------------------------------------------------------
>
> To unsubscribe from the TB-SUPPORT list, click the following link:
> https://www.jiscmail.ac.uk/cgi-bin/webadmin?SUBED1=TB-SUPPORT&A=1
>

-- 
Steve Jones                             [log in to unmask]
Grid System Administrator               office: 220
High Energy Physics Division            tel (int): 43396
Oliver Lodge Laboratory                 tel (ext): +44 (0)151 794 3396
University of Liverpool                 http://www.liv.ac.uk/physics/hep/

########################################################################

To unsubscribe from the TB-SUPPORT list, click the following link:
https://www.jiscmail.ac.uk/cgi-bin/webadmin?SUBED1=TB-SUPPORT&A=1