How dCacheConfigure.sh sets up security

Provided your host public/private key-pair are valid, the dCacheConfigure.sh script will set up your security automatically based on the site-info.def file. It will include suitable configuration for all the configured VOs.

This configuration includes a list of DNs. These are all known members of a VO, taken from the VOMS server. The list maps these DNs to standard dCache users for generic VO members. This list is to allow non-VOMS certificates to function correctly. This may be removed as a requirement in the future.

The dCacheConfigure.sh script also establishes a cron job that will periodically refresh this list. This allows the local files to reflect changes within the VOMS server when (for example) a new member joins a VO or an existing member leaves a VO. You may verify the exiting cron job:

[root@dcache-node] # cat /etc/cron.d/dcacheVoms2Gplasma 
PATH=/sbin:/bin:/usr/sbin:/usr/bin
31 3,9,15,21 * * * root /opt/d-cache/sbin/dcacheVoms2Gplasma.py -r -a -c /opt/d-cache/etc/dcacheVoms2Gplasma.conf -q