Download Troubleshooting Grid authentication from the client side

RP1: Troubleshooting Grid authentication from the client side
Future work
The effectiveness of the grid-auth-verify.sh script that is the result of this research project
should be evaluated by having users use it in real problem scenarios. After the effectiveness
of the script as it is now is established decisions can be made to extend the tool to do further
checks on the UI itself, like verifying CRLs, and/or extensions that check connections to one
or more external Grid services.
Challenges that have to be overcome to develop the tool further are manifold, for one thing a
way should be found to generically interpret output from LB the service to determine which
systems should be contacted. Contacting different systems is hindered by the fact that
different Grid components and even different versions of the same Grid components (see
subsection 4.6 for different CEs) implement the authentication process differently. And if
connections are to be troubleshooted with openssl, the feasibility of including an openssl
version capable of dealing with proxy certificates[12] should be investigated.
Any further extensions to the script should depend on the success of the current script, and the
necessity to be able to troubleshoot beyond the UI.
Adriaan van der Zee
2009-02-05
Page 18 of 21