Uploaded image for project: 'DMC - Development'
  1. DMC - Development
  2. DMC-844

Remove reverse DNS lookup from srm-ifce/cgsi-gsoap

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: srm-ifce 1.24
    • Component/s: None
    • Security Level: Public Data (This ticket is visible to anyone on the internet and will be indexed by search engines)
    • Labels:
      None

      Description

      srm-ifce currently sets the CGSI_OPT_DISABLE_NAME_CHECK flag, which makes cgsi-gsoap perform a reverse DNS lookup on the endpoint IP and pass the result to globus. With the forthcoming retirement of this behaviour from Globus, WLCG ops have checked that SRM endpoints in the infosys have the correct aliases in their host certificates. This means we can relax this check within srm-ifce/cgsi-gsoap.

      As discussed, it would be good to make this check configurable so FTS can enable/disable as necessary. To note, though, that older tools like lcg-cp will also be affected and won't be able to change the behaviour.

        Attachments

          Activity

            People

            • Assignee:
              aalvarez Alejandro Alvarez Ayllon
              Reporter:
              okeeble Oliver Keeble
              Component Watchers:
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: