Project

General

Profile

Feature #4571

Make DN specification optional

Added by Brian Bockelman about 6 years ago. Updated about 6 years ago.

Status:
New
Priority:
Low
Assignee:
Category:
-
Target version:
Start date:
08/22/2013
Due date:
% Done:

0%

Estimated time:
Stakeholders:
Duration:

Description

Since condor 7.9.0, clients no longer need to specify DNs of condor daemons for secure GSI auth. The same host checks are performed as with Globus GRAM. Of course, some sites may have host certs which do not match the hostname -- for this case, we should definitely keep the DN allowed.

I would like to request making listing the DNs optional if the frontend / factory can confirm it is running at least 7.9.0. If the condor version is not known, we should fall back to requiring them to be safe.

History

#1 Updated by Burt Holzman about 6 years ago

  • Assignee set to Burt Holzman
  • Priority changed from Normal to Low
  • Target version changed from v3_2_x to v3_x

#2 Updated by Igor Sfiligoi about 6 years ago

Agreed it would be useful.
Let's just make sure one can mix "DN<->DNS matching" and "arbitrary DN" daemons in the setup.



Also available in: Atom PDF