-
Type:
Improvement
-
Status: Closed
-
Priority:
Minor
-
Resolution: Fixed
-
Affects Version/s: None
-
Fix Version/s: srm-ifce 1.24
-
Component/s: None
-
Security Level: Public Data (This ticket is visible to anyone on the internet and will be indexed by search engines)
-
Labels:None
srm-ifce currently sets the CGSI_OPT_DISABLE_NAME_CHECK flag, which makes cgsi-gsoap perform a reverse DNS lookup on the endpoint IP and pass the result to globus. With the forthcoming retirement of this behaviour from Globus, WLCG ops have checked that SRM endpoints in the infosys have the correct aliases in their host certificates. This means we can relax this check within srm-ifce/cgsi-gsoap.
As discussed, it would be good to make this check configurable so FTS can enable/disable as necessary. To note, though, that older tools like lcg-cp will also be affected and won't be able to change the behaviour.