[AG-TECH] Trouble with service certs

[John Hodrien]

On Wed, 30 Jun 2004, Randy Groves wrote:

> In both cases, if I try and use a service cert, I cannot get the Venue 
> Management client to connect with the venue server so that I can configure 
> it.

> Anybody else having problems with service certs?  BTW - I've been running my 
> 2.1.2 venue server with 'service' certs for months (created with 
> grid-cert-request).

Certmgr only know about a service cert, and an identity cert issues from
agdev-ca.  Whichever is set as default AGServiceManager starts up, but if I
telnet in on 12000 immediately closes the connection.

If I use my own cert from my own CA using globus and do a grid-proxy-init, the
AGServiceManager starts up fine, says that it's using the specified cert:

07/16/04 11:58:25 -151030272 CertificateManager     __init__.py:988 DEBUG Configuring standard environment
07/16/04 11:58:26 -151030272 CertificateManager     __init__.py:988 DEBUG Using default identity /O=Access Grid/OU=agdev-ca.mcs.anl.gov/OU=comp.leeds.ac.uk/CN=John Hodrien
07/16/04 11:58:26 -151030272 CertificateManager     __init__.py:988 DEBUG Initializing environment with unencrypted cert /O=Access Grid/OU=agdev-ca.mcs.anl.gov/OU=comp.leeds.ac.uk/CN=John Hodrien

But then it clearly doesn't, as whether or not I've performed a
grid-proxy-init defines whether or not it'll start up.

What am I doing wrong, I really don't entirely understand the way certs are
being used and managed in this system.

jh

-- 
"Woman was God's second mistake."                    -- Nietzsche