Hi Tom, all,
On 2010-08-25 13:39, Tom Visser wrote: ...
I have requested a certificate en succesfully became a member of a VO. Be carefull: Changing your certificate dn would mean you will have problems accessing your previous data.
https://tcs-escience-portal.terena.org/about_nren.php
I have one question: are these fully qualified certificates for grid use, or are their any differences? Are their any issues we would have to reckon with? Does anybody have experiences with job-submission using a terena certificate?
The main caveat you already found: the ownership of data when you have stored data without VOMS attributes. If you have your data at SARA, you need not worry: it is accessible to everyone in the VO, so once you add your new DN tothe VO it will continue to work. dCache at RUG-CIT should be the same. Similarly for data stored at Nikhef (DPM), as long as you have the default ACLs applied. (if you don't know what that means, you're OK ;-) Otherwise, the eScience Personal TCS certificates are absolutely the same, and work fine for job submission, monitoring and web application tasks like GGUS.
You can get a TERENA eScience cert now if your organsation is on the list that Tom sent, AND you have a valid enrolment there (i.e. you are an employee, or had your photo-ID checked by your home organisation at some point in time) Otherwise: ask your local IT helpdesk to pester them to sign up to TCS!
To add your new DN for the grid use: - if you are in one of the national VOs, re-register at the VO management server at https://voms.grid.sara.nl:8443/vomses and select your VO. Use your NEW certificate to connect, and register again with the VO. The VO manager will activate your new certificate.
- if you are in one of the VOs hosted at CERN, go to the VOMRS interface https://lcg-voms.cern.ch:8443/vo/VONAME/vomrs using your EXISTING certificate, and with replacing VONAME with the name of your VO. There, from the left-hand menu, you can unfold "add certificate" under member info. Choose "/C=NL/O=TERENA/CN=TERENA eScience Personal CA" as the CA for your new DN and submit your additional certificate. It will become active immediately.
Other systems usually allow to to change your DN as well (such as GGUS). Request help from grid.support@{sara,nikhef}.nl if you need help...
Enjoy the new TCS service!
DavidG.
Thanks for your thoughts,
Tom
Available identity providers NIKHEF SARA SURFNET TERENA TUDELFT Universiteit Tilburg Vrije universiteit
Tom Visser Phone: +31617411603 Mail: tom.visser@sara.nl SARA Computing & Networking Services High Performance Computing and Visualization http://www.sara.nl
ct-grid mailing list ct-grid@nikhef.nl https://mailman.nikhef.nl/mailman/listinfo/ct-grid