VOMRS Working Group status report https twiki cern

VOM(R)S Working Group status report https: //twiki. cern. ch/twiki/bin/view/LCG/Voms. WG Grid Deployment Board 2007 -08 -31 Prepared for Ian Bird

Urgent issues Complete the voms-admin+glite scripts’ certification process sooner rather than later. Obtain 4 powerful SL 4 hosts (2 for voms. cern. ch and 2 for lcg-voms. cern. ch) with 1 or 2 gateway hosts for an automatic service fail-over via Linux. HA) to set the new voms/vomrs service up when item 1 is done.

Why this is urgent Current voms-admin and vomrs contain security vulnerabilities. Voms-admin fixes are available for the most recent versionss only, still under certification. The end of SL 3 is imminent. Certified code should be on SL 4. The VOs wait for Generic Attributes (GAs) in production for over a year. They are implemented in the new vomrs/voms-admin versions. Several simultaneous changes, some pending for long: OCI connection Tomcat 5 -5. 5 Oracle-instant-client-basic-10. 2. 0. 3

VOMS db Replication Allowed by policy, implemented in voms core, requested by the VOs, needs testing. A discussion between VOMS developers and Oracle experts took place at CNAF on June 12 th 2007. CNAFinternal tests were decided which are not yet completed.

CERN VOMS Infrastructure plans So far on SL 3: One host (voms. cern. ch) dedicated to: gridmap file generation AND Voms proxy attribution. Two hosts (lcg-voms. cern. ch) with automatic fail-over via Linux. HA dedicated to: User registration via vomrs Voms proxy attribution. Requested on SL 4: One more host to replicate voms. cern. ch with Linux. HA. The pre-requisite front-end for Linux. HA to switch the IP address when necessary.

Operational issues The time gap from bug-detection to fix-inclusion in the production repository is, sometimes, great. * A vom(r)s workshop is being prepared for the week of October 22 nd. [Agenda]