[gin-auth] [Fwd: gsi proxy compatibility test]

[Vincenzo Ciaschini]

On an interesting note, voms-proxy-init can also generate RFC-compliant 
files if the --proxyver=3 option is specified in conjunction with the 
--pl and --policy options.

Bye,
    Vincenzo




Oxana Smirnova wrote:
> Hi,
> 
> this is something to be tested even within a Grid: I believe I was the 
> first to test it 5 minutes ago for ARC job submission (surprisingly, it 
> works :-) ), but we have no GT4-based storage available yet. Something 
> to improve.
> 
> Cheers,
> Oxana
> 
> Erwin Laure пишет:
>> Hi Olle,
>>
>> OK - that would be the way forward. But what do we do for now where 
>> most Grids are not RFC compliant? Would it be useful to have such a 
>> compatibility test Alex is proposing? Does something like that exist?
>>
>> Cheers,
>>
>> -- Erwin
>>
>> Olle Mulmo wrote:
>>>
>>> I believe GIN-auth recommended that RFC compliant proxies should be  
>>> used.
>>>
>>> In practice, this means that software from any GT2 or GT3  
>>> distributions will _not_ be able to handle this proxy format, 
>>> whereas  the same libraries shipped with GT4 (and also native openssl 
>>> 0.9.7g  and beyond) can.
>>>
>>> Note also that in GT4.0.x, the grid-proxy-init command line tool 
>>> does  not  generate RFC-compliant proxies by default for backwards  
>>> compatibility reasons:
>>>
>>> You have to type "grid-proxy-init -rfc"
>>>
>>> /Olle
>>>
>>> On Mar 16, 2006, at 08:49, Erwin Laure wrote:
>>>
>>>> Not sure this message went through.
>>>>
>>>> Cheers,
>>>>
>>>> -- Erwin
>>>>
>>>> -------- Original Message --------
>>>> Subject:     gsi proxy compatibility test
>>>> Date:     Wed, 15 Mar 2006 12:45:28 -0800
>>>> From:     Alex Sim <asim at lbl.gov>
>>>> Reply-To:     <asim at lbl.gov>
>>>> Organization:     Lawrence Berkeley National Laboratory
>>>> To:     <gin-auth at ggf.org>
>>>> CC:     <asim at lbl.gov>, "'Erwin Laure'" <Erwin.Laure at cern.ch>
>>>>
>>>>
>>>>
>>>> I have not been subscribing to this mailing list, and I'm not sure
>>>> if this issue has been discussed previously.
>>>>  From GIN-DATA mailing list, we came across that GSI proxy format
>>>> compatibility testing needs to be addressed.
>>>> In many practices, gsi proxy format is not compatible and different
>>>> version and implementations of gridftp servers reject the  
>>>> authentication
>>>> without too much clue. So, if it could be tested as gridftp
>>>> interoperability, it'll be great.
>>>>
>>>> --Alex
>>>>
>>>
>>
>