Project

General

Profile

Bug #22520

GlideinWMS proxy renewal service broken for Xenon

Added by Brian Lin 4 months ago. Updated 2 months ago.

Status:
Closed
Priority:
Normal
Category:
Frontend
Target version:
Start date:
05/06/2019
Due date:
% Done:

0%

Estimated time:
First Occurred:
Occurs In:
Stakeholders:
Duration:

Description

See details in the OSG JIRA here: https://opensciencegrid.atlassian.net/browse/SOFTWARE-3689

Mats Rynge recently updated flock.opensciencegrid.org to use the proxy renewal service and discovered two bugs in the Frontend proxy renewal service:

1. The service fails to recognize VOs with "." in their name. In addition to fixing this, we should ensure that our tests catch this
2. Some VOMS servers do not allow specifying a role or capability, even if they are set to NULL. There is a command (voms-proxy-list) to query a VOMS server for all attributes that it will issue, however, that does not seem to correspond to what you're allowed to request. For example, the Xenon VOMS server lists /xenon.biggrid.nl/Role=NULL/Capability=NULL as an available attribute but you cannot explicitly request that attribute with voms-proxy-init -voms xenon.biggrid.nl:/xenon.biggrid.nl/Role=NULL/Capability=NULL. However, that is the attribute you will get if you specify voms-proxy-init -voms xenon.biggrid.nl:.


Related issues

Blocks glideinWMS - Support #22845: Backport: GlideinWMS proxy renewal service broken for XenonClosed2019-06-28

History

#1 Updated by Brian Lin 3 months ago

I've pushed a series of commits for this to v3/22520 and I'm going to ask Mats to try out the new script.

#2 Updated by Brian Lin 3 months ago

Mats tested the latest commit (b5ca537e4e64ba70ff748065742f61259f40f7a0) and verified that it worked for him.

#3 Updated by Marco Mambelli 3 months ago

  • Target version set to v3_5
  • Assignee changed from Brian Lin to Marco Mambelli
  • Status changed from New to Resolved

Reviewed and merged

#4 Updated by Marco Mambelli 2 months ago

  • Status changed from Resolved to Closed

#5 Updated by Marco Mambelli about 2 months ago

  • Blocks Support #22845: Backport: GlideinWMS proxy renewal service broken for Xenon added


Also available in: Atom PDF