WHAT ARE WE DOING?
Computing will be making a configuration change to the Fermilab VOMS servers voms1.fnal.gov and voms2.fnal.gov. As a result, the Distinguished Name of these servers will be changed to:
• /DC=org/DC=incommon/C=US/ST=Illinois/L=Batavia/O=Fermi Research Alliance/OU=Fermilab/CN=voms1.fnal.gov
• /DC=org/DC=incommon/C=US/ST=Illinois/L=Batavia/O=Fermi Research Alliance/OU=Fermilab/CN=voms2.fnal.gov
They differ from the previous ones only by having /ST=Illinois instead of /ST=IL.
WHEN WILL THIS OCCUR?
voms2.fnal.gov will be changed on Wednesday, March 4.
voms1.fnal.gov will be changed on Wednesday, April 8.
Each of these servers will be turned off two days before its respective change so we do not have any stale credentials in the system.
WHAT IS THE IMPACT TO YOU?
• You may see voms-proxy-init requests fail temporarily and retry on the other VOMS server. This is an expected behavior.
• After the change, some users will need to install a new version of the vo-client package on their desktop in order to obtain Virtual Organization (VO) credentials (voms-proxy). This will impact the Fermilab VO (FIFE users), the DES VO, and the DUNE VO. See details below.
WHAT DO YOU NEED TO DO?
Please be sure a new version of the vo-client package is installed. The next version of the vo-client package will be release 100. On Scientific Computing Division (SCD) managed interactive nodes (i.e., gpvm nodes), this new version will be installed by SCD system administrators. On user managed desktops, users will need to install this new version, which is scheduled to be released immediately before the respective change dates.