Difference: SWGuideVomsFAQ (1 vs. 25)

Revision 252019-08-12 - AndreasPfeiffer

Line: 1 to 1
 
META TOPICPARENT name="SWGuideLcgAccess"
<!-- PDFSTART -->

VOMS FAQs

Line: 114 to 114
 
  • Go to VOMS Admin home page at: https://voms2.cern.ch:8443 This page does not require a certificate, but will verify that your browser is capable of an SSL (authenticated) session and you have no firewall problems. You should see this

Voms home
Changed:
<
<

Check you certificate

>
>

Check your certificate

 
  • Starting from the VOMS Admin home page above, click on cms Most common problems will be one of the following screenshots
No certificate (or expired certificate) in your browser (older browsers)

Voms home No Certificate
Line: 123 to 123
 
Valid certificate not known to VOMS yet

Voms home Not Member
Changed:
<
<

Check you certificate using the Certificate Info tab in VOMS page

>
>

Check your certificate using the Certificate Info tab in VOMS page

 
  • You will see one of the following possibilities:
1 No valid certificate in your browser (older Firefox version)

Voms Cert Info No Certificate
2 No valid certificate in your browser (newer Firefox versions)
Changed:
<
<

Voms Cert Info No Certificate
>
>

Voms Cert Info No Certificate
 
3 Valid certificate, but not known to VOMS

Voms Cert Info Not Member
4 All OK

Revision 242019-08-12 - StefanoBelforte

Line: 1 to 1
 
META TOPICPARENT name="SWGuideLcgAccess"
<!-- PDFSTART -->

VOMS FAQs

Line: 71 to 71
 

Personal certificate ?

Added:
>
>
    • If you have and expired certificate in your browser, you will get the same errors as if you have none. Always make sure that you keep the certificate in your browser up to date whenever you get a new one from your CA
 

Security Exception ?

Line: 107 to 108
 

Error messages and screenshots of common problems

PR_END_OF_FILE_ERROR in Firefox

Changed:
<
<
  • Secure Connection Failed
    An error occurred during a connection to lcg-voms2.cern.ch:8443. PR_END_OF_FILE_ERROR
    The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
    Please contact the website owners to inform them of this problem.
    
  • Please make sure you have your (valid) certificate installed in Firefox.
>
>
  • Recen versions of Firefox print this very obscure message when simply there is no valid user certificate in the browser (see screenshot below). Please make sure you have your (valid) certificate installed in Firefox.
 

Check for SSL problem

  • Go to VOMS Admin home page at: https://voms2.cern.ch:8443 This page does not require a certificate, but will verify that your browser is capable of an SSL (authenticated) session and you have no firewall problems. You should see this

Voms home

Check you certificate

Changed:
<
<
  • Starting from the VOMS Admin home page above, click on cms Most common problems will be one of the two following screenshots
No certificate (or expired certificate) in your browser
>
>
  • Starting from the VOMS Admin home page above, click on cms Most common problems will be one of the following screenshots
No certificate (or expired certificate) in your browser (older browsers)
 
Voms home No Certificate
Added:
>
>
No certificate (or expired certificate) in your browser (newer versions e,g, Firefox 68 ))

Voms home No Certificate
 
Valid certificate not known to VOMS yet

Voms home Not Member

Check you certificate using the Certificate Info tab in VOMS page

Changed:
<
<
  • You will see one of the following three possibilities:
1 No valid certificate in your browser
>
>
  • You will see one of the following possibilities:
1 No valid certificate in your browser (older Firefox version)
 
Voms Cert Info No Certificate
Changed:
<
<
2 Valid certificate, but not known to VOMS
>
>
2 No valid certificate in your browser (newer Firefox versions)

Voms Cert Info No Certificate
3 Valid certificate, but not known to VOMS
 
Voms Cert Info Not Member
Changed:
<
<
3 All OK
>
>
4 All OK
 
Voms Cert Info OK

Still need help

Line: 191 to 192
 
META FILEATTACHMENT attachment="VOMS-add-certificate.png" attr="" comment="" date="1518011871" name="VOMS-add-certificate.png" path="VOMS-add-certificate.png" size="39498" user="belforte" version="1"
META FILEATTACHMENT attachment="VOMS-add-certificate-1.png" attr="" comment="" date="1518011894" name="VOMS-add-certificate-1.png" path="VOMS-add-certificate-1.png" size="56477" user="belforte" version="1"
META FILEATTACHMENT attachment="VOMS-upload-pem.png" attr="" comment="" date="1518011905" name="VOMS-upload-pem.png" path="VOMS-upload-pem.png" size="87516" user="belforte" version="1"
Added:
>
>
META FILEATTACHMENT attachment="VOMS-Certinfo-nocert-2.png" attr="" comment="" date="1565630994" name="VOMS-Certinfo-nocert-2.png" path="VOMS-Certinfo-nocert-2.png" size="42260" user="belforte" version="1"
META FILEATTACHMENT attachment="VOMS-nocert-2.png" attr="" comment="" date="1565631478" name="VOMS-nocert-2.png" path="VOMS-nocert-2.png" size="42260" user="belforte" version="1"

Revision 232019-08-12 - AndreasPfeiffer

Line: 1 to 1
 
META TOPICPARENT name="SWGuideLcgAccess"
<!-- PDFSTART -->

VOMS FAQs

Line: 67 to 67
 

Browser issues

Browser kind ?

Changed:
<
<
  • We recommend to use a recent version of Firefox or Chrome. There is little to no experience with e.g. Safari among CMS VOMS administrators
>
>
  • We recommend to use a recent version of Firefox. There is little to no experience with e.g. Safari among CMS VOMS administrators. Chrome has sometimes it's own view of what security should mean and can cause trouble. Feel free to use it, but in case of problems, first try Firefox.
 

Personal certificate ?

Line: 104 to 104
 
Changed:
<
<

Screenshots of common problems

>
>

Error messages and screenshots of common problems

PR_END_OF_FILE_ERROR in Firefox

  • Secure Connection Failed
    An error occurred during a connection to lcg-voms2.cern.ch:8443. PR_END_OF_FILE_ERROR
    The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
    Please contact the website owners to inform them of this problem.
    
  • Please make sure you have your (valid) certificate installed in Firefox.
 

Check for SSL problem

  • Go to VOMS Admin home page at: https://voms2.cern.ch:8443 This page does not require a certificate, but will verify that your browser is capable of an SSL (authenticated) session and you have no firewall problems. You should see this

Revision 222019-04-12 - StefanoBelforte

Line: 1 to 1
 
META TOPICPARENT name="SWGuideLcgAccess"
<!-- PDFSTART -->

VOMS FAQs

Purpose of this page is to help when you need to contact VOMS Admin server but have problems.

Changed:
<
<
If you look for a general introduction to how to get a certificate, a VOMS membership, use those with CMSWEB and/or CRAB etc., please look in the CMS Offline Workbook at WorkBookGetAccount#AccessGrid
>
>
If you look for a general introduction to how to get a certificate, a VOMS membership, use those with CMSWEB and/or CRAB etc., please look in the CMS Offline Workbook at WorkBookStartingGrid#BasicGrid
 

Revision 212018-08-22 - StefanoBelforte

Line: 1 to 1
 
META TOPICPARENT name="SWGuideLcgAccess"
<!-- PDFSTART -->

VOMS FAQs

Line: 156 to 156
 
  • the VOMS server, via the registration as VO member (see above)
  • the ~/.globus directory in the machine which you use to issue the voms-proxy-init command.
Most problems originate from having different certificates listed in those places, usually as a result of an incomplete attempt to update to a new certificate.
Added:
>
>
  Typical error messages in those cases are:
  • cms: User unknown to this VO.

Revision 202018-07-30 - StefanoBelforte

Line: 1 to 1
 
META TOPICPARENT name="SWGuideLcgAccess"
<!-- PDFSTART -->

VOMS FAQs

Line: 9 to 9
 
Added:
>
>

VOMS vs. CMSWEB/CRAB/SiteDB

My VOMS membership is OK but still I can't access CMSWEB or CRAB commands fail with a SiteDB error

If you have problems with your certificate-to-username mapping as needed to access to CMSWEB (what's usually called SiteDB) you should check https://twiki.cern.ch/twiki/bin/view/CMS/SiteDBForCRAB and in particular https://twiki.cern.ch/twiki/bin/view/CMS/SiteDBForCRAB#Warning

I need to register in SiteDB

See above answer
 

Contacting VOMS server via the browser

Revision 192018-06-21 - StefanoBelforte

Line: 1 to 1
 
META TOPICPARENT name="SWGuideLcgAccess"
<!-- PDFSTART -->

VOMS FAQs

Line: 37 to 37
 
VOMS-add-certificate-1.png
  1. select the usercert.pem file which you created in the first step, like this
    VOMS-upload-pem.png
Changed:
<
<
  1. now you can delete old certificate from your browser and use the new one instead
>
>
  1. the request to add the certificate will be sent to CMS VOMS Administrators which will approve (unfortunately we do not have a way to take humans off this loop)
 

Common Problems

Revision 182018-05-22 - MargueriteTonjes

Line: 1 to 1
 
META TOPICPARENT name="SWGuideLcgAccess"
<!-- PDFSTART -->

VOMS FAQs

Line: 60 to 60
 

Personal certificate ?

Changed:
<
<
>
>
 

Security Exception ?

  • If the page says "This Connection is Untrusted" or similar, you may try the shortcut offered at the last line of the same page, "I Understand the Risks" as in reality there is no risk to try. Click it, and from the next page select "Add Exception". The sub-page will ask you to "Confirm Security Exception". So you confirm, and you should be able to get in.
Line: 76 to 76
 

Certificate issues

Changed:
<
<
>
>
 
  • Make sure you have imported your current personal certificate in your browser (i.e the one you want to be registered as CMS VO member)
Line: 135 to 135
 
  1. Make sure the personal certificate is in your browser (and please use Firefox or Chrome, other browsers are known to have issues) and that the certificate is valid:
    • From the generic part of the Firefox (similar on Chrome) follow the chain: Firefox -> Preferences ->  Advanced -> Encryption ->  View certificates  -> “Your Certificates” there, check that the certificate you want to use has a date for “Expires” which is in the future.
Changed:
<
<
  1. If not, you have to get a new one from any of the Certificate Authorities (CA), for example from CERN: https://gridca.cern.ch/gridca/
>
>
  1. If not, you have to get a new one from any of the Certificate Authorities (CA), for example from CERN: https://ca.cern.ch/ca/
 
  1. Then try again the "re-sign Grid usage rules" (see FAQ above about signing AUP)

Revision 172018-02-08 - StefanoBelforte

Line: 1 to 1
 
META TOPICPARENT name="SWGuideLcgAccess"
<!-- PDFSTART -->

VOMS FAQs

Line: 23 to 23
 

I have a new (different !) certificate

  • different is what matters. If you renew your certificate (usually needed every year) and new one has the same DN, no action is needed
  • if you switch to a new DN becasue you decided to use a different CA or changed your name or whatever, you need the actions below
Changed:
<
<
    • Important: do not create a new membership ! If you visit VOMS Admins web page using your new certificate, it will see that it does not know it and will prompt you to register as a new user. Having multiple membership for the same physical person in unfortunately possible, but tricky to properly manage, additionally, besides very very few special use cases, it is never useful and usually it only leads to confusion and errors.
>
>
    • Important: do not create a new membership ! If you visit VOMS Admins web page using your new certificate, it will see that it does not know it and will prompt you to register as a new user. Having multiple membership for the same physical person in unfortunately possible, but tricky to properly manage, additionally, besides very very few special use cases, it is never useful and usually it only leads to confusion and errors.
 
    • what you should do is to add your certificate to your current membership. Then VOMS will accepts either certificate on equal grounds and you can safely stop using one as convenient for you. Later you can delete old certificates at your leisure simply to keep things tidy.

Add a new certificate to my membership

Revision 162018-02-07 - StefanoBelforte

Line: 1 to 1
 
META TOPICPARENT name="SWGuideLcgAccess"
<!-- PDFSTART -->

VOMS FAQs

Line: 12 to 12
 

Contacting VOMS server via the browser

Added:
>
>

Common Actions

I need to re-sign my AUP

I have a new (different !) certificate

  • different is what matters. If you renew your certificate (usually needed every year) and new one has the same DN, no action is needed
  • if you switch to a new DN becasue you decided to use a different CA or changed your name or whatever, you need the actions below
    • Important: do not create a new membership ! If you visit VOMS Admins web page using your new certificate, it will see that it does not know it and will prompt you to register as a new user. Having multiple membership for the same physical person in unfortunately possible, but tricky to properly manage, additionally, besides very very few special use cases, it is never useful and usually it only leads to confusion and errors.
    • what you should do is to add your certificate to your current membership. Then VOMS will accepts either certificate on equal grounds and you can safely stop using one as convenient for you. Later you can delete old certificates at your leisure simply to keep things tidy.

Add a new certificate to my membership

  1. make sure that you still have the old certificate (the one which VOMS knows you by) in your browser, so that you can authenticate to VOMS as a member
  2. make sure you have made the PEM files from your new certificate (see this link )
  3. go to your VOMS home page and scroll down a bit until you can select the "add new certificate" button as in the screeshot below (or use this quick link: https://lcg-voms2.cern.ch:8443/voms/cms/user/add-certificate.action )
    VOMS-add-an-additional-certificate.png
  4. you will be directed to this page where you should upload a PEM encoded certificate (see the blue pointer)
    VOMS-certificate.png
  5. do not try to Enter a DN, CA couple, it is difficult to do it right
    VOMS-add-certificate-1.png
  6. select the usercert.pem file which you created in the first step, like this
    VOMS-upload-pem.png
  7. now you can delete old certificate from your browser and use the new one instead

Common Problems

 

Basic help

  • The CERN CA web page at https://ca.cern.ch/ca/ has an HELP tab in which points to very useful, even browser specific, information. Look there first.
Line: 100 to 129
 
  • this is most likely a browser issue, se #Browser_issues above
  • it is also possible that the VOMS server was temporarely overloaded, try the other equivalent URL ( see #Wrong_URL above ) and try again after some random time. If problem persists contact support (see #Still_need_help above)
Deleted:
<
<

I need to re-sign my AUP

 

Can not open VOMS page (quick guide for experts)

Line: 114 to 137
 
  1. If not, you have to get a new one from any of the Certificate Authorities (CA), for example from CERN: https://gridca.cern.ch/gridca/
Changed:
<
<
  1. Then try again the "re-sign Grid usage rules" (all in one line): https://voms.cern.ch:8443/voms/cms/aup/sign!input.action?aupId=1
>
>
  1. Then try again the "re-sign Grid usage rules" (see FAQ above about signing AUP)
 

Contacting VOMS server via the voms-proxy-init command

Line: 144 to 168
 
META FILEATTACHMENT attachment="VOMS-certinfo-OK.png" attr="" comment="" date="1476113086" name="VOMS-certinfo-OK.png" path="VOMS-certinfo-OK.png" size="71808" user="belforte" version="1"
META FILEATTACHMENT attachment="VOMS-nocert.png" attr="" comment="" date="1476113086" name="VOMS-nocert.png" path="VOMS-nocert.png" size="50697" user="belforte" version="1"
META FILEATTACHMENT attachment="VOMS-home-newcert.png" attr="" comment="" date="1476113726" name="VOMS-home-newcert.png" path="VOMS-home-newcert.png" size="68476" user="belforte" version="1"
Added:
>
>
META FILEATTACHMENT attachment="VOMS-add-an-additional-certificate.png" attr="" comment="" date="1518008171" name="VOMS-add-an-additional-certificate.png" path="VOMS-add-an-additional-certificate.png" size="232451" user="belforte" version="1"
META FILEATTACHMENT attachment="VOMS-add-certificate.png" attr="" comment="" date="1518011871" name="VOMS-add-certificate.png" path="VOMS-add-certificate.png" size="39498" user="belforte" version="1"
META FILEATTACHMENT attachment="VOMS-add-certificate-1.png" attr="" comment="" date="1518011894" name="VOMS-add-certificate-1.png" path="VOMS-add-certificate-1.png" size="56477" user="belforte" version="1"
META FILEATTACHMENT attachment="VOMS-upload-pem.png" attr="" comment="" date="1518011905" name="VOMS-upload-pem.png" path="VOMS-upload-pem.png" size="87516" user="belforte" version="1"

Revision 152017-07-06 - StefanoBelforte

Line: 1 to 1
 
META TOPICPARENT name="SWGuideLcgAccess"
<!-- PDFSTART -->

VOMS FAQs

Added:
>
>
Purpose of this page is to help when you need to contact VOMS Admin server but have problems. If you look for a general introduction to how to get a certificate, a VOMS membership, use those with CMSWEB and/or CRAB etc., please look in the CMS Offline Workbook at WorkBookGetAccount#AccessGrid
 
Added:
>
>
 

Contacting VOMS server via the browser

Basic help

Revision 142017-04-28 - StefanoBelforte

Line: 1 to 1
 
META TOPICPARENT name="SWGuideLcgAccess"
<!-- PDFSTART -->

VOMS FAQs

Line: 96 to 96
 
  • it is also possible that the VOMS server was temporarely overloaded, try the other equivalent URL ( see #Wrong_URL above ) and try again after some random time. If problem persists contact support (see #Still_need_help above)

I need to re-sign my AUP

Changed:
<
<
  • VOMS policy requires that you sign AUP at least once a year. If you fail to do in time, your membership is suspended, but as long as you are a valid CMS member in CERN datases and have a valid grid certificate, you can re-sign and your membership will be immediately restored. For this try again the "re-sign Grid usage rules" (make sure to type following URL all in one line):
>
>
 

Can not open VOMS page (quick guide for experts)

Revision 132016-11-05 - StefanoBelforte

Line: 1 to 1
 
META TOPICPARENT name="SWGuideLcgAccess"
<!-- PDFSTART -->

VOMS FAQs

Line: 21 to 21
 

Browser issues

Added:
>
>

Browser kind ?

 
  • We recommend to use a recent version of Firefox or Chrome. There is little to no experience with e.g. Safari among CMS VOMS administrators
Changed:
<
<
>
>

Personal certificate ?

 
Added:
>
>

Security Exception ?

 
  • If the page says "This Connection is Untrusted" or similar, you may try the shortcut offered at the last line of the same page, "I Understand the Risks" as in reality there is no risk to try. Click it, and from the next page select "Add Exception". The sub-page will ask you to "Confirm Security Exception". So you confirm, and you should be able to get in.
Changed:
<
<
  • Check your firewall and proxy settings
>
>

firewall ?

  • Check your firewall and http proxy settings
 
Added:
>
>

cookies ?

 
  • Clear the History, Cache and Cookies of Firefox and restart the browser
Changed:
<
<
  • In some very rare case, it is possible that an antivirus tool interferes with the browser making it impossible to securely connect to servers even if you trusted all CERN CA's as indicated above. Such a case was reported once on Firefox, see this ticket
>
>

Antivirus ?

  • Beware your Antivirus. We have seen cases in which an antivirus tool (usually Avast Antvirus) interferes with the browser making it impossible to securely connect to servers even if you trusted all CERN CA's as indicated above. For details and cure see this ticket
 

Certificate issues

Revision 122016-10-10 - StefanoBelforte

Line: 1 to 1
 
META TOPICPARENT name="SWGuideLcgAccess"
<!-- PDFSTART -->

VOMS FAQs

Line: 51 to 51
 

Test page

Added:
>
>

Screenshots of common problems

Check for SSL problem

  • Go to VOMS Admin home page at: https://voms2.cern.ch:8443 This page does not require a certificate, but will verify that your browser is capable of an SSL (authenticated) session and you have no firewall problems. You should see this

Voms home

Check you certificate

  • Starting from the VOMS Admin home page above, click on cms Most common problems will be one of the two following screenshots
No certificate (or expired certificate) in your browser

Voms home No Certificate
Valid certificate not known to VOMS yet

Voms home Not Member

Check you certificate using the Certificate Info tab in VOMS page

  • You will see one of the following three possibilities:
1 No valid certificate in your browser

Voms Cert Info No Certificate
2 Valid certificate, but not known to VOMS

Voms Cert Info Not Member
3 All OK

Voms Cert Info OK
 

Still need help

Line: 86 to 109
  Your grid certificate needs to be present in two places:
  • the VOMS server, via the registration as VO member (see above)
Changed:
<
<
  • the ~/.globus directory in the machine you use to isseu the voms-proxy-init command.
Most problems originate from having different certificates listet in those places, usually as a result of an incomplete attempt to update to a new certificate.
>
>
  • the ~/.globus directory in the machine which you use to issue the voms-proxy-init command.
Most problems originate from having different certificates listed in those places, usually as a result of an incomplete attempt to update to a new certificate.
  Typical error messages in those cases are:
  • cms: User unknown to this VO.
Line: 103 to 126
 -- AndreasPfeiffer

Changed:
<
<
META FILEATTACHMENT attachment="Screenshot-VOMRS_-_cms_-_Mozilla_Firefox.png" attr="" comment="VO AUP re-sign" date="1421080643" name="Screenshot-VOMRS_-_cms_-_Mozilla_Firefox.png" path="Screenshot-VOMRS_-_cms_-_Mozilla_Firefox.png" size="160557" user="belforte" version="1"
>
>
META FILEATTACHMENT attachment="VOMSAdminHOME.png" attr="" comment="" date="1476113086" name="VOMSAdminHOME.png" path="VOMSAdminHOME.png" size="72507" user="belforte" version="1"
META FILEATTACHMENT attachment="VOMS-CertInfo-nocert.png" attr="" comment="" date="1476113086" name="VOMS-CertInfo-nocert.png" path="VOMS-CertInfo-nocert.png" size="48906" user="belforte" version="1"
META FILEATTACHMENT attachment="VOMS-CertInfo-notmember.png" attr="" comment="" date="1476113086" name="VOMS-CertInfo-notmember.png" path="VOMS-CertInfo-notmember.png" size="71018" user="belforte" version="1"
META FILEATTACHMENT attachment="VOMS-certinfo-OK.png" attr="" comment="" date="1476113086" name="VOMS-certinfo-OK.png" path="VOMS-certinfo-OK.png" size="71808" user="belforte" version="1"
META FILEATTACHMENT attachment="VOMS-nocert.png" attr="" comment="" date="1476113086" name="VOMS-nocert.png" path="VOMS-nocert.png" size="50697" user="belforte" version="1"
META FILEATTACHMENT attachment="VOMS-home-newcert.png" attr="" comment="" date="1476113726" name="VOMS-home-newcert.png" path="VOMS-home-newcert.png" size="68476" user="belforte" version="1"

Revision 112016-09-09 - StefanoBelforte

Line: 1 to 1
 
META TOPICPARENT name="SWGuideLcgAccess"
<!-- PDFSTART -->

VOMS FAQs

Line: 32 to 32
 
  • Clear the History, Cache and Cookies of Firefox and restart the browser
Added:
>
>
  • In some very rare case, it is possible that an antivirus tool interferes with the browser making it impossible to securely connect to servers even if you trusted all CERN CA's as indicated above. Such a case was reported once on Firefox, see this ticket
 

Certificate issues

Revision 102016-07-26 - StefanoBelforte

Line: 1 to 1
 
META TOPICPARENT name="SWGuideLcgAccess"
<!-- PDFSTART -->

VOMS FAQs

Added:
>
>

Contacting VOMS server via the browser

 

Basic help

  • The CERN CA web page at https://ca.cern.ch/ca/ has an HELP tab in which points to very useful, even browser specific, information. Look there first.
Line: 78 to 80
 
  1. Then try again the "re-sign Grid usage rules" (all in one line): https://voms.cern.ch:8443/voms/cms/aup/sign!input.action?aupId=1
Added:
>
>

Contacting VOMS server via the voms-proxy-init command

Your grid certificate needs to be present in two places:

  • the VOMS server, via the registration as VO member (see above)
  • the ~/.globus directory in the machine you use to isseu the voms-proxy-init command.
Most problems originate from having different certificates listet in those places, usually as a result of an incomplete attempt to update to a new certificate.

Typical error messages in those cases are:

  • cms: User unknown to this VO.
  • User credential is not valid!

You can verify what you have in ~/.globus with the command

  • openssl x509  -subject -dates -noout  -in ~/.globus/usercert.pem

You should compare the Subject it prints with what you used when registering in VOMS. If you need help in figuring out, please send the output of that command toghether with the one from voms-proxy-init -voms cms

  -- AndreasPfeiffer

Revision 92016-07-11 - StefanoBelforte

Line: 1 to 1
 
META TOPICPARENT name="SWGuideLcgAccess"
<!-- PDFSTART -->

VOMS FAQs

Line: 38 to 38
 
  • A usual problem is that your personal certificate in your browser has expired. The browser my warn you about this, but it is worth to check explicitly:
    • Start the Firefox, and from the generic part follow the chain: Firefox -> Preferences -> Advanced -> Encryption -> View certificates -> Your certificates -> Expires on ... There are listed all your certificates, with their end-dates. Please observe that the CMS-VO membership and its end-date are independent of the Certificate end-date.
Changed:
<
<
>
>
 

Revision 82016-05-13 - StefanoBelforte

Line: 1 to 1
 
META TOPICPARENT name="SWGuideLcgAccess"
<!-- PDFSTART -->

VOMS FAQs

Added:
>
>

Basic help

  • The CERN CA web page at https://ca.cern.ch/ca/ has an HELP tab in which points to very useful, even browser specific, information. Look there first.
 

Can not open VOMS home page in my browser

there can be many reasons, here are some debugging tips. If you are an expert with little time, jump to #QuickTroubleshoot

Line: 15 to 18
 

Browser issues

Changed:
<
<
  • Make sure you are using a recent version of Firefox or Chrome, all other browsers (Safari esp.) have problems with the page.
>
>
  • We recommend to use a recent version of Firefox or Chrome. There is little to no experience with e.g. Safari among CMS VOMS administrators

 
  • If the page says "This Connection is Untrusted" or similar, you may try the shortcut offered at the last line of the same page, "I Understand the Risks" as in reality there is no risk to try. Click it, and from the next page select "Add Exception". The sub-page will ask you to "Confirm Security Exception". So you confirm, and you should be able to get in.

Revision 72015-04-17 - StefanoBelforte

Line: 1 to 1
 
META TOPICPARENT name="SWGuideLcgAccess"
<!-- PDFSTART -->

VOMS FAQs

Line: 47 to 47
 
  • If you need to report a problem to support, provide the specific and details error messages you get, possibly attaching screenshots. And describe the diagnostics steps you already took and what they produced.
Changed:
<
<

The connection to voms.cern.ch:8443 was interrupted while the page was loading

>
>

The connection to voms2.cern.ch:8443 was interrupted while the page was loading

 
  • this is usually due to using http in place of https, see #Wrong_URL above
Added:
>
>
  • there are also cases where a simply browser restart can fix it
 

I get an empy page when connecting to VOMS

Revision 62015-03-31 - StefanoBelforte

Line: 1 to 1
 
META TOPICPARENT name="SWGuideLcgAccess"
<!-- PDFSTART -->

VOMS FAQs

Line: 10 to 10
 there can be many reasons, here are some debugging tips. If you are an expert with little time, jump to #QuickTroubleshoot

Wrong URL

Changed:
<
<
>
>
 
Changed:
<
<

Browser issue

>
>

Browser issues

 
  • Make sure you are using a recent version of Firefox or Chrome, all other browsers (Safari esp.) have problems with the page.

  • If the page says "This Connection is Untrusted" or similar, you may try the shortcut offered at the last line of the same page, "I Understand the Risks" as in reality there is no risk to try. Click it, and from the next page select "Add Exception". The sub-page will ask you to "Confirm Security Exception". So you confirm, and you should be able to get in.
Line: 49 to 50
 

The connection to voms.cern.ch:8443 was interrupted while the page was loading

  • this is usually due to using http in place of https, see #Wrong_URL above
Added:
>
>

I get an empy page when connecting to VOMS

  • this is most likely a browser issue, se #Browser_issues above
  • it is also possible that the VOMS server was temporarely overloaded, try the other equivalent URL ( see #Wrong_URL above ) and try again after some random time. If problem persists contact support (see #Still_need_help above)
 

I need to re-sign my AUP

  • VOMS policy requires that you sign AUP at least once a year. If you fail to do in time, your membership is suspended, but as long as you are a valid CMS member in CERN datases and have a valid grid certificate, you can re-sign and your membership will be immediately restored. For this try again the "re-sign Grid usage rules" (make sure to type following URL all in one line):

Revision 52015-03-30 - StefanoBelforte

Line: 1 to 1
 
META TOPICPARENT name="SWGuideLcgAccess"
<!-- PDFSTART -->
Changed:
<
<

VOM(R)S FAQs

>
>

VOMS FAQs

 
Changed:
<
<

Can not open VOMRS home page in my browser

>
>

Can not open VOMS home page in my browser

 
Changed:
<
<
Please make sure you are using a recent version of Firefox or Chrome, all other browsers (Safari esp.) have problems with the page.
>
>
there can be many reasons, here are some debugging tips. If you are an expert with little time, jump to #QuickTroubleshoot
 
Changed:
<
<
Another usual problem is that the certificate in your browser has expired - the CMS-VO system checks/requires it, see later.
>
>

Wrong URL

 
Changed:
<
<
Please try again the "re-sign Grid usage rules" (all in one line):
>
>

Browser issue

  • Make sure you are using a recent version of Firefox or Chrome, all other browsers (Safari esp.) have problems with the page.
 
Changed:
<
<
https://voms.cern.ch:8443/voms/cms/aup/sign!input.action?aupId=1
>
>
  • If the page says "This Connection is Untrusted" or similar, you may try the shortcut offered at the last line of the same page, "I Understand the Risks" as in reality there is no risk to try. Click it, and from the next page select "Add Exception". The sub-page will ask you to "Confirm Security Exception". So you confirm, and you should be able to get in.
 
Changed:
<
<
If the page says "This Connection is Untrusted" or similar, you may try the shortcut offered at the last line of the same page, "I Understand the Risks" as in reality there is no risk to try. Click it, and from the next page select "Add Exception". The sub-page will ask you to "Confirm Security Exception". So you confirm, and you should be able to get in.
>
>
  • Check your firewall and proxy settings
 
Changed:
<
<
If not, then please check that your local certificate in the browser is in the right place, and that the validity period is still ok:
>
>
  • Clear the History, Cache and Cookies of Firefox and restart the browser
 
Changed:
<
<
Start the Firefox, and from the generic part follow the chain: Firefox -> Preferences -> Advanced -> Encryption -> View certificates -> Your certificates -> Expires on ...
>
>

Certificate issues

 
Changed:
<
<
There are listed all your certificates, with their end-dates. Please observe that the CMS-VO membership and its end-date are independent of the Certificate end-date.
>
>
 
Changed:
<
<
If the problem persists, please check your firewall and proxy settings, and clear the History, Cache and Cookies of Firefox.

If your personal certificate has indeed expired, then you need a new certificate from any one of the Certificate Authorities (CA) to be downloaded into your browser.

Here is the start-up procedure which you probably know:

https://twiki.cern.ch/twiki/bin/view/CMS/WorkBookStartingGrid#BasicGrid

but if you need to ask the Certificate from some other place than Cern, then these addresses may be useful:

>
>
  • Make sure you have imported your current personal certificate in your browser (i.e the one you want to be registered as CMS VO member)
 
Added:
>
>
  • A usual problem is that your personal certificate in your browser has expired. The browser my warn you about this, but it is worth to check explicitly:
    • Start the Firefox, and from the generic part follow the chain: Firefox -> Preferences -> Advanced -> Encryption -> View certificates -> Your certificates -> Expires on ... There are listed all your certificates, with their end-dates. Please observe that the CMS-VO membership and its end-date are independent of the Certificate end-date.
    • If your personal certificate has indeed expired, then you need a new certificate from one of the Certificate Authorities (CA) to be downloaded into your browser. Here is the start-up procedure which you probably know: https://twiki.cern.ch/twiki/bin/view/CMS/WorkBookStartingGrid#BasicGrid
    • if you need to ask the Certificate from some other place than Cern, then these addresses may be useful:
 
Changed:
<
<
You may also want to check that you have the root certificate of the CERN Grid Authority installed in your browser, see for example https://gridca.cern.ch/gridca/Help/?kbid=040110 to do this for Firefox.
>
>

Test page

Still need help

  • It is impossible to help based on reports like "I got error" or "this link does not work".
 
Changed:
<
<
Once you have the certificate, you can get into the re-sign page, and do the signing. This will automatically extend your membership. However, you might need to re-register the new certificate, or do the re-registration from zero.
>
>
  • If you need to report a problem to support, provide the specific and details error messages you get, possibly attaching screenshots. And describe the diagnostics steps you already took and what they produced.
 
Changed:
<
<

Can not open VOMRS home page in my browser (shorter Answer)

>
>

The connection to voms.cern.ch:8443 was interrupted while the page was loading

  • this is usually due to using http in place of https, see #Wrong_URL above
 
Changed:
<
<
Please check that you have the personal certificate in your browser (and please use Firefox or Chrome, other browsers are known to have issues) and that the certificate is valid:
>
>

I need to re-sign my AUP

  • VOMS policy requires that you sign AUP at least once a year. If you fail to do in time, your membership is suspended, but as long as you are a valid CMS member in CERN datases and have a valid grid certificate, you can re-sign and your membership will be immediately restored. For this try again the "re-sign Grid usage rules" (make sure to type following URL all in one line):
 
Deleted:
<
<
From the generic part of the Firefox (similar on Chrome) follow the chain: Firefox -> Preferences -> Advanced -> Encryption -> View certificates -> “Your Certificates”
 
Changed:
<
<
there, check that the certificate you want to use has a date for “Expires” which is in the future.
>
>

Can not open VOMS page (quick guide for experts)

 
Changed:
<
<
If not, you have to get a new one from any of the Certificate Authorities (CA), for example from CERN:
>
>
  1. Make sure the personal certificate is in your browser (and please use Firefox or Chrome, other browsers are known to have issues) and that the certificate is valid:
    • From the generic part of the Firefox (similar on Chrome) follow the chain: Firefox -> Preferences ->  Advanced -> Encryption ->  View certificates  -> “Your Certificates” there, check that the certificate you want to use has a date for “Expires” which is in the future.
 
Changed:
<
<
https://gridca.cern.ch/gridca/
>
>
  1. If not, you have to get a new one from any of the Certificate Authorities (CA), for example from CERN: https://gridca.cern.ch/gridca/
 
Changed:
<
<
Then try again the "re-sign Grid usage rules" (all in one line):
>
>
  1. Then try again the "re-sign Grid usage rules" (all in one line): https://voms.cern.ch:8443/voms/cms/aup/sign!input.action?aupId=1
 
Deleted:
<
<
https://voms.cern.ch:8443/voms/cms/aup/sign!input.action?aupId=1
 
Changed:
<
<
-- AndreasPfeiffer - 2015-03-03 - update link to new VOMS instance -- StefanoBelforte - 20 Sep 2014
>
>
-- AndreasPfeiffer
 

META FILEATTACHMENT attachment="Screenshot-VOMRS_-_cms_-_Mozilla_Firefox.png" attr="" comment="VO AUP re-sign" date="1421080643" name="Screenshot-VOMRS_-_cms_-_Mozilla_Firefox.png" path="Screenshot-VOMRS_-_cms_-_Mozilla_Firefox.png" size="160557" user="belforte" version="1"

Revision 42015-03-03 - AndreasPfeiffer

Line: 1 to 1
 
META TOPICPARENT name="SWGuideLcgAccess"
<!-- PDFSTART -->

VOM(R)S FAQs

Line: 13 to 13
  Please try again the "re-sign Grid usage rules" (all in one line):
Changed:
<
<
https://lcg-voms.cern.ch:8443/vo/cms/vomrs?path=/RootNode/MemberAction/ResignUsageRules&action=execute
>
>
https://voms.cern.ch:8443/voms/cms/aup/sign!input.action?aupId=1
  If the page says "This Connection is Untrusted" or similar, you may try the shortcut offered at the last line of the same page, "I Understand the Risks" as in reality there is no risk to try. Click it, and from the next page select "Add Exception". The sub-page will ask you to "Confirm Security Exception". So you confirm, and you should be able to get in.
Line: 60 to 60
  Then try again the "re-sign Grid usage rules" (all in one line):
Changed:
<
<
https://lcg-voms.cern.ch:8443/vo/cms/vomrs?path=/RootNode/MemberAction/ResignUsageRules&action=execute
>
>
https://voms.cern.ch:8443/voms/cms/aup/sign!input.action?aupId=1
 
Deleted:
<
<

Can not find the link to re-sign the CMS VO UAP

you need to expand the Members menu in the VOMRS page look at mouse position in this screenshot
<!--/twistyPlugin twikiMakeVisibleInline-->
Screenshot-VOMRS_-_cms_-_Mozilla_Firefox.png
<!--/twistyPlugin-->
 
Added:
>
>
-- AndreasPfeiffer - 2015-03-03 - update link to new VOMS instance
 -- StefanoBelforte - 20 Sep 2014

Revision 32015-01-12 - StefanoBelforte

Line: 1 to 1
 
META TOPICPARENT name="SWGuideLcgAccess"
<!-- PDFSTART -->

VOM(R)S FAQs

Line: 62 to 62
  https://lcg-voms.cern.ch:8443/vo/cms/vomrs?path=/RootNode/MemberAction/ResignUsageRules&action=execute
Added:
>
>

Can not find the link to re-sign the CMS VO UAP

you need to expand the Members menu in the VOMRS page look at mouse position in this screenshot
<!--/twistyPlugin twikiMakeVisibleInline-->
Screenshot-VOMRS_-_cms_-_Mozilla_Firefox.png
<!--/twistyPlugin-->
 -- StefanoBelforte - 20 Sep 2014 \ No newline at end of file
Added:
>
>

META FILEATTACHMENT attachment="Screenshot-VOMRS_-_cms_-_Mozilla_Firefox.png" attr="" comment="VO AUP re-sign" date="1421080643" name="Screenshot-VOMRS_-_cms_-_Mozilla_Firefox.png" path="Screenshot-VOMRS_-_cms_-_Mozilla_Firefox.png" size="160557" user="belforte" version="1"

Revision 22014-10-14 - AndreasPfeiffer

Line: 1 to 1
 
META TOPICPARENT name="SWGuideLcgAccess"
<!-- PDFSTART -->

VOM(R)S FAQs

Line: 35 to 35
  but if you need to ask the Certificate from some other place than Cern, then these addresses may be useful:
Changed:
<
<
http://lcg.web.cern.ch/LCG/digital.htm http://www.eugridpma.org/members/worldmap/ https://www.apgrid.org/CA/CertificateAuthorities.html
>
>

You may also want to check that you have the root certificate of the CERN Grid Authority installed in your browser, see for example https://gridca.cern.ch/gridca/Help/?kbid=040110 to do this for Firefox.

  Once you have the certificate, you can get into the re-sign page, and do the signing. This will automatically extend your membership. However, you might need to re-register the new certificate, or do the re-registration from zero.

Revision 12014-09-20 - StefanoBelforte

Line: 1 to 1
Added:
>
>
META TOPICPARENT name="SWGuideLcgAccess"
<!-- PDFSTART -->

VOM(R)S FAQs

Can not open VOMRS home page in my browser

Please make sure you are using a recent version of Firefox or Chrome, all other browsers (Safari esp.) have problems with the page.

Another usual problem is that the certificate in your browser has expired - the CMS-VO system checks/requires it, see later.

Please try again the "re-sign Grid usage rules" (all in one line):

https://lcg-voms.cern.ch:8443/vo/cms/vomrs?path=/RootNode/MemberAction/ResignUsageRules&action=execute

If the page says "This Connection is Untrusted" or similar, you may try the shortcut offered at the last line of the same page, "I Understand the Risks" as in reality there is no risk to try. Click it, and from the next page select "Add Exception". The sub-page will ask you to "Confirm Security Exception". So you confirm, and you should be able to get in.

If not, then please check that your local certificate in the browser is in the right place, and that the validity period is still ok:

Start the Firefox, and from the generic part follow the chain: Firefox -> Preferences -> Advanced -> Encryption -> View certificates -> Your certificates -> Expires on ...

There are listed all your certificates, with their end-dates. Please observe that the CMS-VO membership and its end-date are independent of the Certificate end-date.

If the problem persists, please check your firewall and proxy settings, and clear the History, Cache and Cookies of Firefox.

If your personal certificate has indeed expired, then you need a new certificate from any one of the Certificate Authorities (CA) to be downloaded into your browser.

Here is the start-up procedure which you probably know:

https://twiki.cern.ch/twiki/bin/view/CMS/WorkBookStartingGrid#BasicGrid

but if you need to ask the Certificate from some other place than Cern, then these addresses may be useful:

http://lcg.web.cern.ch/LCG/digital.htm http://www.eugridpma.org/members/worldmap/ https://www.apgrid.org/CA/CertificateAuthorities.html

Once you have the certificate, you can get into the re-sign page, and do the signing. This will automatically extend your membership. However, you might need to re-register the new certificate, or do the re-registration from zero.

Can not open VOMRS home page in my browser (shorter Answer)

Please check that you have the personal certificate in your browser (and please use Firefox or Chrome, other browsers are known to have issues) and that the certificate is valid:

From the generic part of the Firefox (similar on Chrome) follow the chain: Firefox -> Preferences -> Advanced -> Encryption -> View certificates -> “Your Certificates”

there, check that the certificate you want to use has a date for “Expires” which is in the future.

If not, you have to get a new one from any of the Certificate Authorities (CA), for example from CERN:

https://gridca.cern.ch/gridca/

Then try again the "re-sign Grid usage rules" (all in one line):

https://lcg-voms.cern.ch:8443/vo/cms/vomrs?path=/RootNode/MemberAction/ResignUsageRules&action=execute

-- StefanoBelforte - 20 Sep 2014

 
This site is powered by the TWiki collaboration platform Powered by PerlCopyright &© 2008-2019 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback