Incorrect verification of VOMS proxies

[GoogleCodeExporter]

As of SVN r1018, the authentication module seems to incorrectly
handle the creation of VOMS proxies, and reports an error whereas the
proxy has been correctly created::

  $ gclean -A
  Insert AAI password for user m1058036: 
  gc3libs: ERROR: voms-proxy-init returned exitcode 1. Message: Error: verify failed.
  Cannot verify AC signature!
  .

Running `voms-proxy-info --all` shows that the proxy is indeed
correct::

  $ voms-proxy-info --all
  subject   : /DC=ch/DC=switch/DC=slcs/O=Universitaet Zuerich/CN=Riccardo Murri 94ADB37F/CN=proxy
  issuer    : /DC=ch/DC=switch/DC=slcs/O=Universitaet Zuerich/CN=Riccardo Murri 94ADB37F
  identity  : /DC=ch/DC=switch/DC=slcs/O=Universitaet Zuerich/CN=Riccardo Murri 94ADB37F
  type      : proxy
  strength  : 1024 bits
  path      : /tmp/x509up_u1000
  timeleft  : 23:59:36
  === VO smscg extension information ===
  VO        : smscg
  subject   : /DC=ch/DC=switch/DC=slcs/O=Universitaet Zuerich/CN=Riccardo Murri 94ADB37F
  issuer    : /DC=com/DC=quovadisglobal/DC=grid/DC=switch/DC=hosts/C=CH/ST=Zuerich/L=Zuerich/O=SWITCH/CN=voms.smscg.ch
  attribute : /smscg
  timeleft  : 23:59:37
  uri       : voms.smscg.ch:15020

I would suggest disregarding the `voms-proxy-init` error code,
checking the proxy independently, and possibly logging the
"verification failed" message at a WARNING (not ERROR) level.

Original issue reported on code.google.com by riccardo.murri@gmail.com on 15 Dec 2010 at 1:04

[GoogleCodeExporter]

could not reprodue the problem

gclean works as expected even if 'voms-proxy-init' exit with != 0

In case problem wil lraise again, we wil lre-open this ticket

Cheers
Sergio :)

Original comment by sergio.m...@gmail.com on 15 Dec 2010 at 3:06

• Changed state: Done