Print

Print


URL:
  <http://savannah.cern.ch/support/?124709>

                 Summary: Default GSI sec sends out certificate hash, not DN,
in monitoring
                 Project: XROOTD
            Submitted by: bbockelm
            Submitted on: 2011-11-15 13:48
                Category: None
                Priority: 5 - Normal
                Severity: 3 - Normal
                  Status: None
                 Privacy: Public
             Assigned to: None
        Originator Email: 
             Open/Closed: Open
         Discussion Lock: Any
        Operating System: None

    _______________________________________________________

Details:

We currently use the monitoring packets to correlate user accesses across
multiple sites.

When sites use the default GSI mapping (i.e., no LCMAPS plugin), we only get
the hash of the certificate.

Is it possible to send out the DN via the monitoring by default?  What about
VOMS extensions?

Matevz would know the details of what needs to go where...




    _______________________________________________________

Reply to this item at:

  <http://savannah.cern.ch/support/?124709>

_______________________________________________
  Message sent via/by LCG Savannah
  http://savannah.cern.ch/