Print

---

Follow-up Comment #6, sr #124285 (project xrootd):

Hi, Brian,

 I have tested the config with (from the log):

=====> sec.protocol /usr/lib64 gsi -certdir:/etc/grid-security/certificates
-cert:/opt/xrootd/xrootd/etc/xrdcert.pem
-key:/opt/xrootd/xrootd/etc/xrdkey.pem -crl:2 -authzfun:libXrdLcmaps.so
-authzfunparms:--osg,--lcmapscfg,/etc/xrootd/lcmaps.cfg,--loglevel,0|useglobals
--gmapopt:2 --gmapto:0

  With each restart all the crls are downloaded again. Only crl:1 avoids
re-download. For the worker nodes we use fetch-crl and there is a config
file:

$ cat /etc/sysconfig/fetch-crl 
export http_proxy=http://squid.fnal.gov:3128

  This can be also an acceptable solution for us. 

Thanks
Catalin 

    _______________________________________________________

Reply to this item at:

  <http://savannah.cern.ch/support/?124285>

_______________________________________________
  Message sent via/by LCG Savannah
  http://savannah.cern.ch/