[? BODY] Re: [gin-auth] RE: tests
Alex Sim
ASim at lbl.gov
Fri Sep 1 09:45:27 CDT 2006
Can Cindy make sure she got her voms proxy against GIN-VO ?
If SDSC CA were not with NIKHEF before, how did she get her voms proxy for
GIN effort?
dmx09.[8]% voms-proxy-info -all
[...]
=== VO gin.ggf.org extension information ===
VO : gin.ggf.org
subject : /DC=org/DC=doegrids/OU=People/CN=Alexander Sim 546622
issuer : /O=dutchgrid/O=hosts/OU=nikhef.nl/CN=kuiken.nikhef.nl
attribute : /gin.ggf.org/Role=NULL/Capability=NULL
timeleft : 12:00:17
> -----Original Message-----
> From: owner-gin-auth at ggf.org [mailto:owner-gin-auth at ggf.org]
> On Behalf Of Oscar Koeroo
> Sent: Friday, September 01, 2006 7:31 AM
> To: Erwin Laure
> Cc: const at takas.lt; zhengc at sdsc.edu;
> o.van-der-aa at imperial.ac.uk; David Colling;
> somsak_sr at thaigrid.net; sugree_ph at thaigrid.or.th;
> parzberg at ucsd.edu; phil at sdsc.edu; gin-auth at ggf.org
> Subject: [? BODY] Re: [gin-auth] RE: tests
>
> Hi,
>
> As a curtacy to CindyZ's effort in the GIN effort, I've
> installed the SDSC CA on my fully IGTF compliant VOMS server.
> I would still recommend Cindy and collegues to gain a DoE CA
> certificate for the reasons that Erwin already written about.
>
> <Disclaimer
> warningMessage="I could be very very wrong about the
> following statement">
> The SDSC CA is not planned to be approval in the IGTF
> but rather assimilated into another IGTF accredited CA.
> </Disclaimer>
>
>
> cheers,
>
> Oscar
>
>
> Erwin Laure wrote:
>
> >Hi,
> >
> >[strange, I only got this message, never Cindy's original one]
> >
> >If the SDSC CA has been added to the VOMS server that
> doesn't mean it
> >is available at other services of the EGEE infrastructure.
> By default,
> >EGEE deploys the IGTF approved CAs but of course sites are free to
> >install whatever additional CA they would like.
> >
> >In general, I believe the only way forward for
> interoperability is to
> >rely on the IGTF approved CAs, but in order to let the tests
> continue,
> >could imperial please install the SDSC CA for now?
> >
> >Is it planned to have the SDSC CA IGTF approved?
> >
> >Cheers,
> >
> >-- Erwin
> >
> >
> >
> >>-----Original Message-----
> >>From: owner-gin-auth at ggf.org
> [mailto:owner-gin-auth at ggf.org] On Behalf
> >>Of Aleksandr Konstantinov
> >>Sent: Friday, September 01, 2006 8:49 AM
> >>To: Erwin Laure
> >>Cc: zhengc at sdsc.edu; o.van-der-aa at imperial.ac.uk; David Colling;
> >>somsak_sr at thaigrid.net; sugree_ph at thaigrid.or.th;
> parzberg at ucsd.edu;
> >>phil at sdsc.edu; gin-auth at ggf.org
> >>Subject: Re: [gin-auth] RE: tests
> >>
> >>
> >> Looks like not.
> >>
> >>On Thu, 31 Aug 2006 17:33:48 -0700
> >>"Cindy Zheng" <zhengc at sdsc.edu> wrote:
> >>
> >>
> >>
> >>>No, SDSC is not in IGTF yet.
> >>>We went thru this with EGEE and EGEE had added SDSC in their VOMS
> >>>database. Are you sharing VOMS data with EGEE? Or you can get the
> >>>files at http://goc.pragma-grid.net/secure/certificates/3deda549.0
> >>>
> >>>
> >>>
> >>http://goc.pragma-grid.net/secure/certificates/3deda549.sign
> ing_policy
> >>
> >>
> >>>Cindy
> >>>
> >>>
> >>On Fri, 1 Sep 2006 08:34:23 +0200
> >>"Erwin Laure" <Erwin.Laure at cern.ch> wrote:
> >>
> >>
> >>
> >>>Hi Cindy,
> >>>
> >>>Gridftp works perfectly for me:
> >>>
> >>>lxplus060[erwin]: globus-url-copy -vb file:$PWD/HelloWorld.jdl
> >>>gsiftp://cmsdsk00.hep.ph.ic.ac.uk/hello1.txt
> >>> 156 bytes 0.19 KB/sec avg 0.19
> KB/sec inst
> >>>
> >>>Is your CA approved by the IGTF? I copy gin-auth for
> >>>
> >>>
> >>further details.
> >>
> >>
> >>>Cheers,
> >>>
> >>>-- Erwin
> >>>
> >>>
> >>>
> >>>>-----Original Message-----
> >>>>From: Cindy Zheng [mailto:zhengc at sdsc.edu]
> >>>>Sent: Friday, September 01, 2006 8:09 AM
> >>>>To: Erwin Laure; o.van-der-aa at imperial.ac.uk; David Colling
> >>>>Cc: somsak_sr at thaigrid.net; 'Sugree Phatanapherom';
> >>>>parzberg at ucsd.edu; phil at sdsc.edu
> >>>>Subject: RE: tests
> >>>>
> >>>>Thanks, Erwin! I installed all IGTF accredited Cas.
> >>>>But still getting errors. The Ukescience certificate files are
> >>>>appended after the test output. Please check and let me know if I
> >>>>missed something. Thanks!
> >>>>
> >>>>[zhengc at rocks-52 ~]$ voms-proxy-info
> >>>>subject : /C=US/O=SDSC/OU=SDSC/CN=Cindy
> >>>>
> >>>>
> >>Zheng/USERID=zhengc/CN=proxy
> >>
> >>
> >>>>issuer : /C=US/O=SDSC/OU=SDSC/CN=Cindy Zheng/USERID=zhengc
> >>>>identity : /C=US/O=SDSC/OU=SDSC/CN=Cindy Zheng/USERID=zhengc
> >>>>type : proxy
> >>>>strength : 512 bits
> >>>>path : /home/zhengc/.globus/.proxy
> >>>>timeleft : 6:05:56
> >>>>[zhengc at rocks-52 ~]$ globusrun -a -r gw39.hep.ph.ic.ac.uk
> >>>>
> >>>>GRAM Authentication test failure: connecting to the job manager
> >>>>failed.
> >>>>Possible reasons: job terminated, invalid job contact, network
> >>>>problems, ...
> >>>>[zhengc at rocks-52 ~]$ globus-job-run
> >>>>gw39.hep.ph.ic.ac.uk:2119/jobmanager-lcgpbs date GRAM Job
> >>>>
> >>>>
> >>submission
> >>
> >>
> >>>>failed because the connection to the server failed (check
> >>>>
> >>>>
> >>host and
> >>
> >>
> >>>>port) (error code 12)
> >>>>[zhengc at rocks-52 ~]$ globus-url-copy
> >>>>file:///export/home/zhengc/test.txt
> >>>>gsiftp://cmsdsk00.hep.ph.ic.ac.uk/tmp/cindy-test.txt
> >>>>
> >>>>error: globus_ftp_client: the server responded with an error
> >>>>535 Authentication failed: GSSException: Failure unspecified at
> >>>>GSS-API level [Caused by: Unknown CA]
> >>>>[zhengc at rocks-52 ~]$ cat /etc/grid-security/certificates/adc*
> >>>>-----BEGIN CERTIFICATE-----
> >>>>MIID1DCCArygAwIBAgIBATANBgkqhkiG9w0BAQUFADBUMQswCQYDVQQGEwJVSzEV
> >>>>MBMGA1UEChMMZVNjaWVuY2VSb290MRIwEAYDVQQLEwlBdXRob3JpdHkxDTALBgNV
> >>>>BAcTBFJvb3QxCzAJBgNVBAMTAkNBMB4XDTA2MDcxNDE2MzI1NVoXDTExMDcxNTE2
> >>>>MzI1NVowQzELMAkGA1UEBhMCVUsxEzARBgNVBAoTCmVTY2llbmNlQ0ExEjAQBgNV
> >>>>BAsTCUF1dGhvcml0eTELMAkGA1UEAxMCQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
> >>>>DwAwggEKAoIBAQC08S40q4YSCt4sNNM9T5qB133eCLW5B0Qg0YWHgViSVc6f6f2B
> >>>>VJS4MBpOth6sdwvca7mO7C+dOnMEBwyRdFu7wtVOyRR86dbStMkKyljvOOwM6AYf
> >>>>lz52x9XnVPvTj+FN9mLD5/NmboSRv86Kw6erKJhAQQwuHVPkCOjtWorhdmpcHVci
> >>>>oA4FfVEBZGeAND5IPrOXTYH281baPBciDqfPOESNEh4xltyUrbFnhmAgYGb7IGoP
> >>>>b0sNOEOIWOivKuSHMU+dthIBZuytXzctcAtGa4yIGZluj0vs7Ak2HunA2PuXw6/c
> >>>>v2j41jBBNpil5WgxYNwt4FsFjLUvWy+gS7mPAgMBAAGjgcEwgb4wDwYDVR0TAQH/
> >>>>BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFP+lqRpuD2+U6TfRwKVG
> >>>>Haghk2pLMHwGA1UdIwR1MHOAFHF3LsIiojijsKfITB2XKpWJ2oKjoVikVjBUMQsw
> >>>>CQYDVQQGEwJVSzEVMBMGA1UEChMMZVNjaWVuY2VSb290MRIwEAYDVQQLEwlBdXRo
> >>>>b3JpdHkxDTALBgNVBAcTBFJvb3QxCzAJBgNVBAMTAkNBggEAMA0GCSqGSIb3DQEB
> >>>>BQUAA4IBAQCBuqI6gcY6/BpOTSYHb4B6ga9LBPK9zo96pVOy4IFfoMN6VS9Bo2fK
> >>>>lBCK+OOSWy5KpN1q6UOyWh8Dcf/hc2lmEBo92gFqG+4gRKBa4IrTDJBARVWXd379
> >>>>kOAl68sqUDGcciUrQJwVclTO+KsgaVYmo3BvAhqJf4gnLm6XVUgHKl9+WPqDAQdf
> >>>>DeBCGOOPd0pPMy6RUgXIE+HAgh14yyGfJkiFlYHqaeqqL7A8gxrGSABcqbcUHnH1
> >>>>kTdHshE2ulkcpqV9wwWldr8S26tIYg9ZvYO1KNNgkwgoLIcKIc22r5IvQ8c7zeI7
> >>>>8tqPk/TcVznFNfvmsrJSn2urKL4pKJrT
> >>>>-----END CERTIFICATE-----
> >>>>http://ca.grid-support.ac.uk/pub/crl/escience-ca-crl.crl
> >>>>#
> >>>># @(#)$Id: adcbc9ef.info,v 1.1 2006/07/19 15:09:40
> >>>>
> >>>>
> >>pmacvsdg Exp $ #
> >>
> >>
> >>>>Information for CA UKeScience eScience subordinate CA # alias =
> >>>>UKeScienceCA url = http://www.grid-support.ac.uk/ca/ crl_url =
> >>>>http://ca.grid-support.ac.uk/pub/crl/escience-ca-crl.crl
> >>>>email = support at grid-support.ac.uk
> >>>>status = accredited:classic
> >>>>version = 1.8
> >>>>sha1fp.0 =
> >>>>0A:E0:5B:0C:64:99:18:2B:4F:FB:15:33:6F:77:33:F9:8E:F2:6D:C7
> >>>> # Signing policy for UK e-Science CA # This file should be
> >>>>installed in # /etc/grid-security/certificates # as
> >>>><hash>.signing_policy along with # the CA certificate as
> >>>><hash>.<digit> # -- here <hash> is the output of # openssl x509
> >>>>-hash -noout -in <certificate> # and <digit> is the
> >>>>
> >>>>
> >>lowest single
> >>
> >>
> >>>>(decimal) # digit that makes the file unique (in case #
> >>>>
> >>>>
> >>you have
> >>
> >>
> >>>>other CA certificates that hash to # the same value)
> >>>> access_id_CA X509
> >>>>'/C=UK/O=eScienceCA/OU=Authority/CN=CA'
> >>>> pos_rights globus CA:sign
> >>>> cond_subjects globus '"/C=UK/O=eScience/*"'
> >>>>
> >>>>
> >>>>
> >>>>>-----Original Message-----
> >>>>>From: Erwin Laure [mailto:Erwin.Laure at cern.ch]
> >>>>>Sent: Thursday, August 31, 2006 9:31 PM
> >>>>>To: Cindy Zheng; o.van-der-aa at imperial.ac.uk; David Colling
> >>>>>Cc: somsak_sr at thaigrid.net; Sugree Phatanapherom;
> >>>>>
> >>>>>
> >>>>parzberg at ucsd.edu;
> >>>>
> >>>>
> >>>>>phil at sdsc.edu
> >>>>>Subject: RE: tests
> >>>>>
> >>>>>
> >>>>>Hi Cindy,
> >>>>>
> >>>>>I have to let Oliver answer for GRAM. But for gridftp it
> seems that
> >>>>>you don't have the UK eScience CA installed. You should
> install all
> >>>>>the IGTF approved Cas - should be available
> >>>>>
> >>>>>
> >>via the IGTF webpage.
> >>
> >>
> >>>>>Cheers,
> >>>>>
> >>>>>-- Erwin
> >>>>>
> >>>>>
> >>>>>
> >>>>>>-----Original Message-----
> >>>>>>From: Cindy Zheng [mailto:zhengc at sdsc.edu]
> >>>>>>Sent: Friday, September 01, 2006 3:49 AM
> >>>>>>To: Erwin Laure; o.van-der-aa at imperial.ac.uk; David Colling
> >>>>>>Cc: somsak_sr at thaigrid.net; 'Sugree Phatanapherom';
> >>>>>>parzberg at ucsd.edu; phil at sdsc.edu
> >>>>>>Subject: RE: tests
> >>>>>>
> >>>>>>Thanks, Erwin, for the pointer!
> >>>>>>
> >>>>>>I just did some tests manually, try to verify globus
> >>>>>>
> >>>>>>
> >>>>authentication,
> >>>>
> >>>>
> >>>>>>job submission and gridftp.
> >>>>>>So far, all failed. (See output below)
> >>>>>>
> >>>>>>Seems that at least gridftp is looking for certificate for
> >>>>>>/C=UK/O=eScience/OU=Imperial/L=Physics/CN=cmsdsk00.hep.ph.ic.a
> >>>>>>c.uk/email
> >>>>>>Address=lcg-site-admin at imperial.ac.uk
> >>>>>>But I only have the site certificate files 16da7552.0 and
> >>>>>>16da7552.signing_policy for EGEE. I appended the contents
> >>>>>>
> >>>>>>
> >>>>of these 2
> >>>>
> >>>>
> >>>>>>files after the tests output.
> >>>>>>Where can I get the required certificate files for EGEE's
> >>>>>>
> >>>>>>
> >>>>resources?
> >>>>
> >>>>
> >>>>>>Also, with NorduGrid, we need to run different
> >>>>>>
> >>>>>>
> >>commands for some
> >>
> >>
> >>>>>>tests. I don't know if this is the case too for EGEE.
> >>>>>>Appreciate any advice on that as well.
> >>>>>>
> >>>>>>Cindy
> >>>>>>
> >>>>>>[zhengc at rocks-52 ~]$ voms-proxy-info
> >>>>>>subject : /C=US/O=SDSC/OU=SDSC/CN=Cindy
> >>>>>>
> >>>>>>
> >>>>>Zheng/USERID=zhengc/CN=proxy
> >>>>>
> >>>>>
> >>>>>>issuer : /C=US/O=SDSC/OU=SDSC/CN=Cindy Zheng/USERID=zhengc
> >>>>>>identity : /C=US/O=SDSC/OU=SDSC/CN=Cindy Zheng/USERID=zhengc
> >>>>>>type : proxy
> >>>>>>strength : 512 bits
> >>>>>>path : /home/zhengc/.globus/.proxy
> >>>>>>timeleft : 10:56:10
> >>>>>>[zhengc at rocks-52 ~]$ date -u
> >>>>>>Fri Sep 1 01:03:36 UTC 2006
> >>>>>>[zhengc at rocks-52 ~]$ globusrun -a -r gw39.hep.ph.ic.ac.uk
> >>>>>>
> >>>>>>GRAM Authentication test failure: connecting to the
> >>>>>>
> >>>>>>
> >>job manager
> >>
> >>
> >>>>>>failed.
> >>>>>>Possible reasons: job terminated, invalid job
> >>>>>>
> >>>>>>
> >>contact, network
> >>
> >>
> >>>>>>problems, ...
> >>>>>>[zhengc at rocks-52 ~]$ globus-job-run
> >>>>>>gw39.hep.ph.ic.ac.uk:2119/jobmanager-lcgpbs date GRAM Job
> >>>>>>
> >>>>>>
> >>>>submission
> >>>>
> >>>>
> >>>>>>failed because the connection to the server failed (check
> >>>>>>
> >>>>>>
> >>>>host and
> >>>>
> >>>>
> >>>>>>port) (error code 12)
> >>>>>>[zhengc at rocks-52 ~]$ globus-url-copy
> >>>>>>file:///export/home/zhengc/test.txt
> >>>>>>gsiftp://cmsdsk00.hep.ph.ic.ac.uk/tmp/cindy-test.txt
> >>>>>>
> >>>>>>error: globus_ftp_control: gss_init_sec_context failed OpenSSL
> >>>>>>Error: s3_clnt.c:842: in library: SSL routines, function
> >>>>>>SSL3_GET_SERVER_CERTIFICATE: certificate verify failed
> >>>>>>globus_gsi_callback_module: Could not verify credential
> >>>>>>globus_gsi_callback_module: Can't get the local trusted CA
> >>>>>>certificate:
> >>>>>>Cannot find issuer certificate for local credential
> >>>>>>
> >>>>>>
> >>with subject:
> >>
> >>
> >>>>>>/C=UK/O=eScience/OU=Imperial/L=Physics/CN=cmsdsk00.hep.ph.ic.a
> >>>>>>c.uk/email
> >>>>>>Address=lcg-site-admin at imperial.ac.uk
> >>>>>>[root at rocks-52 certificates]# cat
> >>>>>>/etc/grid-security/certificates/16da7552*
> >>>>>>Certificate:
> >>>>>> Data:
> >>>>>> Version: 3 (0x2)
> >>>>>> Serial Number: 0 (0x0)
> >>>>>> Signature Algorithm: sha1WithRSAEncryption
> >>>>>> Issuer: C=NL, O=NIKHEF, CN=NIKHEF medium-security
> >>>>>>certification auth
> >>>>>> Validity
> >>>>>> Not Before: Sep 21 00:00:00 2001 GMT
> >>>>>> Not After : Feb 9 00:00:00 2021 GMT
> >>>>>> Subject: C=NL, O=NIKHEF, CN=NIKHEF medium-security
> >>>>>>certification auth
> >>>>>> Subject Public Key Info:
> >>>>>> Public Key Algorithm: rsaEncryption
> >>>>>> RSA Public Key: (2048 bit)
> >>>>>> Modulus (2048 bit):
> >>>>>>
> >>>>>>
> >>>>>>
> >>00:a3:dc:c0:e5:91:32:75:cb:30:2a:00:5d:e1:9c:
> >>
> >>
> >>>>>>
> >>>>>>
> >>>>>>
> >>0f:79:ae:43:44:30:be:e4:7d:d4:ea:76:6d:fb:9b:
> >>
> >>
> >>>>>>
> >>>>>>
> >>>>>>
> >>dd:e1:a1:b6:1f:7b:5d:35:2d:75:fb:db:f4:eb:94:
> >>
> >>
> >>>>>>
> >>>>>>
> >>>>>>
> >>0b:74:29:8e:d7:bf:96:8b:93:3e:da:24:4f:5c:b3:
> >>
> >>
> >>>>>>
> >>>>>>
> >>>>>>
> >>2f:bc:a3:ef:34:c5:d9:ff:4e:51:ea:97:bc:c4:6a:
> >>
> >>
> >>>>>>
> >>>>>>
> >>>>>>
> >>3f:eb:30:d6:c9:96:58:1f:e5:bc:e5:ec:91:e4:74:
> >>
> >>
> >>>>>>
> >>>>>>
> >>>>>>
> >>fb:ea:df:d8:31:0b:15:52:d4:db:2c:2f:ea:64:5b:
> >>
> >>
> >>>>>>
> >>>>>>
> >>>>>>
> >>35:89:35:de:12:cd:20:7c:a6:1c:49:2d:0a:9e:b1:
> >>
> >>
> >>>>>>
> >>>>>>
> >>>>>>
> >>e7:8a:93:4f:cc:25:a3:09:59:5a:1e:c1:b2:25:da:
> >>
> >>
> >>>>>>
> >>>>>>
> >>>>>>
> >>d4:c9:c1:8f:a1:c9:65:30:ce:9a:b3:79:94:c8:cb:
> >>
> >>
> >>>>>>
> >>>>>>
> >>>>>>
> >>c8:82:ba:03:97:6e:d3:43:a6:10:42:ea:a0:f3:2a:
> >>
> >>
> >>>>>>
> >>>>>>
> >>>>>>
> >>01:58:03:60:2a:52:1e:b1:10:55:ab:38:d5:93:d1:
> >>
> >>
> >>>>>>
> >>>>>>
> >>>>>>
> >>fa:9e:2a:9f:20:47:42:e3:eb:d0:89:23:59:bb:33:
> >>
> >>
> >>>>>>
> >>>>>>
> >>>>>>
> >>08:48:62:d3:5f:68:78:cd:73:de:e8:2e:cc:6d:0a:
> >>
> >>
> >>>>>>
> >>>>>>
> >>>>>>
> >>8b:c3:70:49:f4:30:d4:0d:7c:e5:d0:65:e6:86:c5:
> >>
> >>
> >>>>>>
> >>>>>>
> >>>>>>
> >>4d:e6:2f:27:32:cd:48:e1:71:ce:30:ee:c2:98:0a:
> >>
> >>
> >>>>>>
> >>>>>>
> >>>>>>
> >>9e:d5:0f:12:0a:9a:9d:e4:03:8b:ba:3e:65:22:73:
> >>
> >>
> >>>>>> 22:f5
> >>>>>> Exponent: 65537 (0x10001)
> >>>>>> X509v3 extensions:
> >>>>>> X509v3 Basic Constraints: critical
> >>>>>> CA:TRUE
> >>>>>> X509v3 Key Usage: critical
> >>>>>> Digital Signature, Certificate Sign, CRL Sign
> >>>>>> X509v3 Subject Alternative Name:
> >>>>>> email:ca at dutchgrid.nl
> >>>>>> X509v3 Subject Key Identifier:
> >>>>>>
> >>>>>>5B:05:3A:99:C6:D5:22:BD:FD:94:80:FC:11:A8:D0:F1:71:D6:4B:A4
> >>>>>> X509v3 CRL Distribution Points:
> >>>>>> URI:http://ca.dutchgrid.nl/medium/cacrl.pem
> >>>>>>
> >>>>>> Netscape Cert Type:
> >>>>>> SSL CA, S/MIME CA, Object Signing CA
> >>>>>> Netscape CA Revocation Url:
> >>>>>> http://ca.dutchgrid.nl/medium/cacrl.pem
> >>>>>> Netscape CA Policy Url:
> >>>>>> http://ca.dutchgrid.nl/medium/policy/
> >>>>>> Netscape Comment:
> >>>>>> DutchGrid and NIKHEF medium-security
> >>>>>>
> >>>>>>
> >>>>Certification
> >>>>
> >>>>
> >>>>>>Authority; policies at http://ca.dutchgrid.nl/medium/policy/
> >>>>>> Signature Algorithm: sha1WithRSAEncryption
> >>>>>> 7d:3e:11:47:f3:ba:6f:d8:39:98:29:4c:fb:2f:ef:5e:8d:30:
> >>>>>> 67:6d:3f:a2:0b:4f:7a:16:b5:b5:36:a8:61:ef:ac:0c:41:32:
> >>>>>> de:ee:2a:2c:1d:53:2e:d8:81:0a:22:ba:ac:72:d9:2c:67:dd:
> >>>>>> 70:ed:b5:d1:15:06:2a:3e:8a:01:61:9d:5b:5b:b7:a7:e3:df:
> >>>>>> dd:5f:be:d8:36:27:41:14:b9:95:07:be:a6:98:fd:45:b4:78:
> >>>>>> 97:86:4a:f1:10:2a:e4:b5:88:a9:84:d3:e0:85:cf:80:86:f5:
> >>>>>> 42:f0:17:40:0d:41:58:2b:8a:0d:60:7f:50:ea:2f:4d:ff:e3:
> >>>>>> 59:d3:bb:ab:c2:9f:99:2c:0a:51:b7:65:5a:d8:5e:e3:f1:ba:
> >>>>>> 59:62:f9:c4:3c:54:36:c4:68:4a:00:48:6d:91:58:4d:1b:f3:
> >>>>>> 4c:a3:6e:da:dc:a9:36:dc:06:34:dc:79:c5:cb:b4:88:0b:ae:
> >>>>>> b3:6b:3c:06:13:6c:ce:30:41:42:16:57:9e:fe:49:df:86:32:
> >>>>>> a9:63:25:33:c7:84:39:45:0d:71:c2:a0:28:66:1d:35:09:85:
> >>>>>> 2b:2f:b2:37:b6:2f:74:32:39:55:05:f6:67:33:02:2b:3a:71:
> >>>>>> b7:ed:b2:19:97:81:4a:69:37:b4:74:0d:11:3b:fb:c4:54:bb:
> >>>>>> 11:bb:9a:fc
> >>>>>>-----BEGIN CERTIFICATE-----
> >>>>>>
> >>>>>>
> >>>>>>
> >>MIIEvDCCA6SgAwIBAgIBADANBgkqhkiG9w0BAQUFADBSMQswCQYDVQQGEwJOTDEP
> >>
> >>
> >>MA0GA1UEChMGTklLSEVGMTIwMAYDVQQDEylOSUtIRUYgbWVkaXVtLXNlY3VyaXR5
> >>
> >>
> >>IGNlcnRpZmljYXRpb24gYXV0aDAeFw0wMTA5MjEwMDAwMDBaFw0yMTAyMDkwMDAw
> >>
> >>
> >>MDBaMFIxCzAJBgNVBAYTAk5MMQ8wDQYDVQQKEwZOSUtIRUYxMjAwBgNVBAMTKU5J
> >>
> >>
> >>S0hFRiBtZWRpdW0tc2VjdXJpdHkgY2VydGlmaWNhdGlvbiBhdXRoMIIBIjANBgkq
> >>
> >>
> >>hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9zA5ZEydcswKgBd4ZwPea5DRDC+5H3U
> >>
> >>
> >>6nZt+5vd4aG2H3tdNS11+9v065QLdCmO17+Wi5M+2iRPXLMvvKPvNMXZ/05R6pe8
> >>
> >>
> >>xGo/6zDWyZZYH+W85eyR5HT76t/YMQsVUtTbLC/qZFs1iTXeEs0gfKYcSS0KnrHn
> >>
> >>
> >>ipNPzCWjCVlaHsGyJdrUycGPocllMM6as3mUyMvIgroDl27TQ6YQQuqg8yoBWANg
> >>
> >>
> >>KlIesRBVqzjVk9H6niqfIEdC4+vQiSNZuzMISGLTX2h4zXPe6C7MbQqLw3BJ9DDU
> >>
> >>
> >>DXzl0GXmhsVN5i8nMs1I4XHOMO7CmAqe1Q8SCpqd5AOLuj5lInMi9QIDAQABo4IB
> >>
> >>
> >>mzCCAZcwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAYYwGgYDVR0RBBMw
> >>
> >>
> >>EYEPY2FAZHV0Y2hncmlkLm5sMB0GA1UdDgQWBBRbBTqZxtUivf2UgPwRqNDxcdZL
> >>
> >>
> >>pDA4BgNVHR8EMTAvMC2gK6AphidodHRwOi8vY2EuZHV0Y2hncmlkLm5sL21lZGl1
> >>
> >>
> >>bS9jYWNybC5wZW0wEQYJYIZIAYb4QgEBBAQDAgAHMDYGCWCGSAGG+EIBBAQpFido
> >>
> >>
> >>dHRwOi8vY2EuZHV0Y2hncmlkLm5sL21lZGl1bS9jYWNybC5wZW0wNAYJYIZIAYb4
> >>
> >>
> >>QgEIBCcWJWh0dHA6Ly9jYS5kdXRjaGdyaWQubmwvbWVkaXVtL3BvbGljeS8wfgYJ
> >>
> >>
> >>YIZIAYb4QgENBHEWb0R1dGNoR3JpZCBhbmQgTklLSEVGIG1lZGl1bS1zZWN1cml0
> >>
> >>
> >>eSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTsgcG9saWNpZXMgYXQgaHR0cDovL2Nh
> >>
> >>
> >>LmR1dGNoZ3JpZC5ubC9tZWRpdW0vcG9saWN5LzANBgkqhkiG9w0BAQUFAAOCAQEA
> >>
> >>
> >>fT4RR/O6b9g5mClM+y/vXo0wZ20/ogtPeha1tTaoYe+sDEEy3u4qLB1TLtiBCiK6
> >>
> >>
> >>rHLZLGfdcO210RUGKj6KAWGdW1u3p+Pf3V++2DYnQRS5lQe+ppj9RbR4l4ZK8RAq
> >>
> >>
> >>5LWIqYTT4IXPgIb1QvAXQA1BWCuKDWB/UOovTf/jWdO7q8KfmSwKUbdlWthe4/G6
> >>
> >>
> >>WWL5xDxUNsRoSgBIbZFYTRvzTKNu2typNtwGNNx5xcu0iAuus2s8BhNszjBBQhZX
> >>
> >>
> >>nv5J34YyqWMlM8eEOUUNccKgKGYdNQmFKy+yN7YvdDI5VQX2ZzMCKzpxt+2yGZeB
> >>
> >>
> >>>>>>Smk3tHQNETv7xFS7Ebua/A==
> >>>>>>-----END CERTIFICATE-----
> >>>>>># EACL Netherlands CA
> >>>>>>access_id_CA X509
> >>>>>>
> >>>>>>
> >>'/C=NL/O=NIKHEF/CN=NIKHEF
> >>
> >>
> >>>>>>medium-security certification auth'
> >>>>>>pos_rights globus CA:sign
> >>>>>>cond_subjects globus '"/C=NL/O=NIKHEF/CN=NIKHEF
> >>>>>>medium-security certification auth" "/O=dutchgrid/O=users/*"
> >>>>>>"/O=dutchgrid/O=hosts/*"'
> >>>>>>
> >>>>>>
> >>>>>>>-----Original Message-----
> >>>>>>>From: Erwin Laure [mailto:Erwin.Laure at cern.ch]
> >>>>>>>Sent: Thursday, August 31, 2006 12:29 PM
> >>>>>>>To: zhengc at sdsc.edu; o.van-der-aa at imperial.ac.uk; David Colling
> >>>>>>>Cc: somsak_sr at thaigrid.net; Sugree Phatanapherom;
> >>>>>>>
> >>>>>>>
> >>>>>>parzberg at ucsd.edu;
> >>>>>>
> >>>>>>
> >>>>>>>phil at sdsc.edu
> >>>>>>>Subject: RE: tests
> >>>>>>>
> >>>>>>>
> >>>>>>>Hi Cindy,
> >>>>>>>
> >>>>>>>You should get all the endpoints needed from the original
> >>>>>>>
> >>>>>>>
> >>>>>>wiki page (I
> >>>>>>
> >>>>>>
> >>>>>>>don't think it has migrated to gridforge, yet):
> >>>>>>>http://wiki.nesc.ac.uk/read/gin-jobs?GinResources
> >>>>>>>
> >>>>>>>I don't understand the comment about the personal (zhengc)
> >>>>>>>
> >>>>>>>
> >>>>>>proxy. You
> >>>>>>
> >>>>>>
> >>>>>>>mean your certificate you used to sign up with the gin VO
> >>>>>>>(/C=US/O=SDSC/OU=SDSC/CN=Cindy Zheng/UID=zhengc)? That
> >>>>>>>
> >>>>>>>
> >>>>should be
> >>>>
> >>>>
> >>>>>>>automatically configured on the resources.
> >>>>>>>
> >>>>>>>Cheers,
> >>>>>>>
> >>>>>>>-- Erwin
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>>-----Original Message-----
> >>>>>>>>From: Cindy Zheng [mailto:zhengc at sdsc.edu]
> >>>>>>>>Sent: Wednesday, August 30, 2006 12:31 AM
> >>>>>>>>To: o.van-der-aa at imperial.ac.uk
> >>>>>>>>Cc: Erwin Laure; somsak_sr at thaigrid.net; 'Sugree
> >>>>>>>>
> >>>>>>>>
> >>>>>Phatanapherom';
> >>>>>
> >>>>>
> >>>>>>>>parzberg at ucsd.edu; phil at sdsc.edu
> >>>>>>>>Subject: tests
> >>>>>>>>
> >>>>>>>>Dear Olivier,
> >>>>>>>>
> >>>>>>>>SCMSWeb team has upgraded SCMSWeb software to a new
> >>>>>>>>
> >>>>>>>>
> >>>>>>version, so we
> >>>>>>
> >>>>>>
> >>>>>>>>can probe services on different hosts within a site and
> >>>>>>>>
> >>>>>>>>
> >>>>>show the
> >>>>>
> >>>>>
> >>>>>>>>correct status for your cluster in gin testbed.
> >>>>>>>>We plan to use my personal (zhengc) proxy for these.
> >>>>>>>>
> >>>>>>>>We need your help to get this working right for EGEE.
> >>>>>>>>Could you let us know
> >>>>>>>>1. what authentication test (something equivalent to
> >>>>>>>>globusrun?) we should run to which host/IP# to confirm
> >>>>>>>>
> >>>>>>>>
> >>>>>that user
> >>>>>
> >>>>>
> >>>>>>>>zhengc is setup to access EGEE resources?
> >>>>>>>>2. what gridftp test we should run to which host/IP# to
> >>>>>>>>
> >>>>>>>>
> >>>>>>test gridftp
> >>>>>>
> >>>>>>
> >>>>>>>>access?
> >>>>>>>>3. similarly, how can we test job submission at your site?
> >>>>>>>>4. Do you have MDS services? At what host/IP#?
> >>>>>>>>
> >>>>>>>>Thank you very much in advance,
> >>>>>>>>
> >>>>>>>>Cindy
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>>
> >>>>>>
> >>>>
> >>>>
> >>--
> >>
> >>
> >>
> >>
> >
> >
> >
More information about the gin-auth
mailing list