-
I have clean installation of EL9
```sh
[root@localhost ~]# rpm -qa ca-policy-egi-core fetch-crl
ca-policy-egi-core-1.128-1.noarch
fetch-crl-3.0.22-1.el9.noarch
```
and `fetch-crl` fails to downl…
vokac updated
4 months ago
-
```
$ oidc-gen wlcg
[1] https://bildungsproxy.aai.dfn.de
[2] https://iam.deep-hybrid-datacloud.eu/
[3] https://aai.egi.eu/auth/realms/egi
[4] https://aai-demo.egi.eu/auth/realms/egi
[5] https://…
XMol updated
7 months ago
-
```
# scitokens-verify `cat /run/user/1902/bt_u1902`
Failed to deserialize a token: Timeout was reached
```
How to debug this? Debian Bullseye, libscitokens0 version 1.0.2
There's another mac…
-
Having enabled tokens for both xroot and http for the EOS instance in Vienna, a couple of tests in the CMS SAM/ETF testsuite were failing due to the assumption that the scitokens library would refuse …
-
Per the [WLCG Profile](https://github.com/WLCG-AuthZ-WG/common-jwt-profile/blob/master/profile.md#scope-based-capability-selection):
> If an entity is not entitled to a capability, the scope reques…
-
Currently, a re-check interval of 600 seconds is hardcoded here:
https://github.com/scitokens/scitokens-cpp/blob/7d9c77bd0fd238a8db000acd8229616e786ba273/src/scitokens_internal.cpp#L407-L413
It …
-
Starting from ROOT 6.24.00 we support WLCG Bearer Tokens [1] through Davix, but we still are missing infrastructure for testing them.
[1] https://root.cern/releases/release-62400/
-
Uploading data to the storage that during TLS handshake sends unused certificates fails if these superfluous certificate doesn't pass "globus policy validation", e.g.
```bash
$ export SRC=https://se…
-
Dear IAM experts,
Our FTS services at CERN have observed that refresh tokens given via the urn:ietf:params:oauth:grant-type:token-exchange grant type are single-shot. Whilst the FTS software handl…
-
The WLCG goals for DC24 are
Third-party-copy transfers for supported sites. These will be done with audience-restricted, RSE-wide tokens, with scopes either storage.read for the source or storage.mo…