Hi,
I am doing some testing on lucky cluster and I ran into a problem
while using simple CA. When I generated a host certificate for lucky0:
grid-cert-request -host lucky0.mcs.anl.gov
the Subject line in the generated cert looks something like this:
Subject: O=Grid, OU=GlobusTest, OU=simpleCA-lucky0.mcs.anl.gov,
OU=mcs.anl.gov, CN=host/lucky0.mcs.anl.gov
It adds "host" before the hostname for the CN, and I had
authentication problems because of this. Is this default behavior
intentional or do you guys think it should only have hostname without
"host/" ? I could change this behavior by explicitly adding the CN
flag while generating the host cert:
grid-cert-request -host lucky0.mcs.anl.gov -cn lucky0.mcs.anl.gov
This generated the host cert with subject:
Subject: O=Grid, OU=GlobusTest, OU=simpleCA-lucky0.mcs.anl.gov,
OU=mcs.anl.gov, CN=lucky0.mcs.anl.gov
I thought this should have been the default behavior? Or is it normal?
Thanks,
-Dina
------------------------
Dinanath Sulakhe
Mathematics and Computer Science Division,
Argonne National Laboratory
630-252-7856