[AG-TECH] Success Using Other CA's?

[Todd Zimmerman]

Thanks for the note Lewis.  Our symptoms were exactly the same as yours.

Since I haven't heard from anyone else on this - I'm assuming that no 
one has successfully accomplished this yet? 

Our organization would _really_ like to get this going - since all of 
our authentication already takes place using Grid Canada certs, and it 
seems redundant to require getting ANL certs - especially when 
integration seems _so_ close to working properly. 

Can any of the developers give a bit of a status update on this 
feature/bug - and perhaps give a bit of a hint of where to start looking 
if one (foolishly ;-) ) wanted to try to fix it themselves??

Thanks,

Todd

Collaboration & Visualization Technician
WestGrid - www.westgrid.ca
Ph. 604.268.6979
Todd Zimmerman - toddz at sfu.ca



Lewis Grantham wrote:

> hi Todd
>
>> Hi all,
>>
>> Has anyone had any success importing other CA's and using non-ANL 
>> certs for authentication??
>>
>> I'm having a few issues with the service/node managers working 
>> properly while using GridCanada issued certificates.
>>
>> Any advice or hints would be appreciated.
>
>
> none of those, but same experience as yours.
>
> Other CAs and certs import ok (CA first, then cert obviously), and PIG 
> with personal services appear to run under these with little clear 
> difference.
>
> however, the node manager in particular cannot be engaged, so you wont 
> really have a working system - the VenueClient link to manage node 
> will simple report no node accessible found at address or something 
> like that,  and ask for an alternate ip address/port.
>
> the quickest way to get going is to run an anl supplied cert for now. 
> Im not aware of any work arounds or fixes.
>
> bye
> lewis