VOMS proxy time limited and how to extend it

From GridPP Wiki
Jump to: navigation, search

For security reason, it was agreed by JSPG and all VOs to limit the proxy lifetime to 24 hours for all VOs, both at the authentication and at the authorization level. The proxy renewal functionality is available in the glite WMS and FTS services. The standard gLite renewal mechanism can be used to support long-term operations. Grid middleware, whenever possible, should make use of approved services like MyProxy server to store long-lived proxy.

If your VO's users experience specific difficulty with 24 hours proxy and need a TEMPORARY extendsion of the proxy lifetime (more than 24 hours), the relevant VO manager(s) MUST follow the OSCT opertional notice to make a request.

An example of such request can be found in GGUS (GGUS Ticket-ID: 29502): Request for VOMS proxy extension COMPASSIT VO