Installing sagrid.ac.za: incorrect VOMS DN about devops

[brucellino]

Can you show us the lsc files ? is it the one currently in this repo ?

[brucellino]

Can you check the content of $GLITE_LOCATION/yaim/etc//vo.d/sagrid.ac.za ?
Should be similar to :
VOMS_SERVERS="vomss://voms.sagrid.ac.za:8443/voms/sagrid.ac.za"
VOMSES="voms.sagrid.ac.za 15003 /C=IT/O=INFN/OU=Host/L=ZA-UFS/CN=voms.sagrid.ac.za sagrid.ac.za"
VOMS_CA_DN="/C=IT/O=INFN/CN=INFN CA"

[shaze]

LSC file -- this was already there and I have no recollection of putting it there -- May 2014

[root@store02 ~]# more /etc/grid-security/vomsdir/sagrid.ac.za/voms.sagrid.ac.za.lsc
/C=IT/O=INFN/OU=Host/L=ZA-UFS/CN=voms.sagrid.ac.za
/C=IT/O=INFN/CN=INFN CA

[root@store02 ~]# more /opt/glite/yaim/etc/wits/vo.d/sagrid.ac.za

SW_DIR=$VO_SW_DIR/sagrid.ac.za
DEFAULT_SE=$DPM_HOST
QUEUES="sagrid"
VOMS_SERVERS="vomss://voms.sagrid.ac.za:8443/voms/sagrid.ac.za"
VOMSES="voms.sagrid.ac.za 15003 /C=IT/O=INFN/OU=Host/L=ZA-UFS/CN=voms.sagrid.ac.za sagrid.ac.za"
VOMS_CA_DN="/C=IT/O=INFN/CN=INFN CA"

[brucellino]

You may need an extra field in the vomses :
-VOMSES="voms.sagrid.ac.za 15003 /C=IT/O=INFN/OU=Host/L=ZA-UFS/CN=voms.sagrid.ac.za"
+VOMSES="sagrid.ac.za voms.sagrid.ac.za 15003 /C=IT/O=INFN/OU=Host/L=ZA-UFS/CN=voms.sagrid.ac.za"

[shaze]

Now the reyaiming on the DPM machine works but fails on CE and UI

INFO: Executing function: config_vomses
ERROR: VOMSES parameter for VO 'sagrid.ac.za' has incorrect DN or alias
ERROR: Error during the execution of function: config_vomses
ERROR: Error during the configuration.Exiting. [FAILED]
ERROR: One of the functions returned with error without specifying its nature !

The current config file looks like

more /opt/glite/yaim/etc/wits/vo.d/sagrid.ac.za

SW_DIR=$VO_SW_DIR/sagrid.ac.za
DEFAULT_SE=$DPM_HOST
QUEUES="sagrid"
VOMS_SERVERS="vomss://voms.sagrid.ac.za:8443/voms/sagrid.ac.za"
VOMSES="sagrid.ac.za voms.sagrid.ac.za 15003 /C=IT/O=INFN/OU=Host/L=ZA-UFS/CN=voms.sagrid.ac.za"

[brucellino]

Looks like you're missing VOMS_CA_DN ?

[shaze]

No, sorry it's there. Just got left off in the copy and paste.

[brucellino]

Setting this to on hold at the moment. Can take a look later, after testing on UFS and Meraka.

[brucellino]

Hi Scott.

Just to let you know that this issue has not been forgotten but is still on
hold for lack of time at the moment. I hope to have some time next week.

On 11 June 2014 10:19, shaze [email protected] wrote:

No, sorry it's there. Just got left off in the copy and paste.

—
Reply to this email directly or view it on GitHub
#15 (comment).

Dr. Bruce Becker,
Coordinator, South African National Grid
Meraka Institute, CSIR
Meiring Naude Road
Pretoria 0001 South Africa
[phone] (w) | [phone] (f) |
[phone] (m) | + 39 392 622 9279
AIM/GTalk/Skype/MSN/Jabber : brucellino
http://www.sagrid.ac.za

[brucellino]

just an update - got this issue again today. Removing the "on-hold" tag

[brucellino]

fixed by 927374f