From dimou@mail.cern.ch Thu Jun 10 16:45:22 2004 Date: Thu, 10 Jun 2004 16:31:54 +0200 (CEST) From: Maria Dimou-Zacharova Reply-To: Maria.Dimou@cern.ch To: Enrico Ferro Cc: Marco Serra , Vincenzo Ciaschini , Di Qing Subject: Re: VOMS integration Thank you very much Enrico for starting the process so soon. I really look forward to the deployment. I have an important deliverable for Monday in the area of LCG Registration for the security group and can't do very much till then but I made a web browsable directory for us to accumulate discussion documents which I will clean-up a.s.a.p. but for now lets have all doc. and links together there: http://cern.ch/dimou/lcg/voms/ Please let me know if you find broken links as I moved very fast all the information I had written at various times into this one place. Doc. http://cern.ch/dimou/lcg/voms/REFERENCES-NOTES contains the links I promised to send you yesterday about grid-map file creation from voms etc. Thanks again and cheers - maria On Thu, 10 Jun 2004, Enrico Ferro wrote: > Dear VOMS fans, ;-) > > after a very useful meeting with Marco and Maria, to accelerate and optimize > VOMS integration directly in LCG we decided to join our efforts. I try here > to summarize the situation after my experience in the last > weeks with VOMS, LCMAPS and friends. I tried also to assign the different > points to the person that should solve/clarify it. Consider the points that > follows just as a proposal, questions, points to add, changes, are more than > welcome. Unfortunately they are in a more or less random order. > > (* = to be done + = work in progress - = done) > > > * [enrico] LCFG configuration file to enable gridmapfile creation via VOMS > server > > * [vincenzo+marco] Clarify with Marco who has to provides VOMS rpms, for all voms > modules needed (server, client, admin interface, etc...), if the VOMS stuff > has to be autobuilt by lcg or not, etc... For admin interface Akos group > should be contacted. > > + [vincenzo] Improvement of voms-proxy-init. As discussed this morning at phone, > in case of wrong group/role there is a generic error message not useful > > - [vincenzo] Improvement of edg-voms-proxy-init/voms-proxy-destroy: one of > them does not work. Vincenzo already fixed it but it is only in CVS, so > if someone is testing an older version... attention. > > + [vincenzo] Improvement of voms-proxy-init: add a command line flag "-role" > To be documented in man page and -help command line flag > > - [vincenzo] Improvement of voms-proxy-init: describe all command line flags > in voms-proxy-init when using -help. Suggestion: add an examples for -order > option. I think Vincenzo already fixed in CVS, anyway this point is important > > + [enrico] document tests done in the lasts weeks following Marco' suggestion: > 1. use voms just to generate gridmapfiles > 2. use voms+lcas+lcmaps at "full power" > I hope I will be "finished" for monday morning. > > * [marco/maria/di] clarify with people working on web admin interface if they > can support their product now and in the future > > + [akos/other] already reported, they should alredy work on it but it is useful > that everybody knows: if I remove a user belongs to 1 role and I remove it, > the user itself is removed. If the user belongs to other roles, it is not > removed > > + [vincenzo] found also by maria: registration request to the VO does not work. > Vincenzo with Akos' help already found the cause of the problem, it seems > a missing jar: it is present in some tomcat versions, missing in other. > To be found the "magic" version. > > * [marco/maria/di] Contact people at Nikhef and "ask officially" if they can > continue to support their modules lcas, lcmaps, gridftp patched, etc... > for the next steps. > > + [vincenzo] Vincenzo configured the voms server we are using. He found some > "non documented steps" in the admin web interface; he should document them > for our internal need and also to developers > > This is all for the moment. These points are not written in a stone, so requests, > modification, etc.. are more than welcome! > > Thank you for your collaboration, > Ciao! > --- > Enrico Ferro Ist. Naz. di Fisica Nucleare - Padova > Address: via F. Marzolo, 8 - 35131 Padova - ITALY > Email: enrico.ferro@pd.infn.it Phone: +39-0498277154 > Maria Dimou-Zacharova http://cern.ch/dimou CERN, CH-1211 Geneva 23, Switzerland Maria.Dimou@cern.ch, Tel: +41-22-7673356, Fax: +41-22-7677155