The WLCG Virtual Organization
An instance of IAM has been deployed in support of WLCG development and integration activities in support of the migration to token-based authentication and authorization.
The WLCG IAM instance is integrated with CERN SSO.
Registration is active.
IAM documentation is available here.
VOMS support is enabled. To link an X.509 certificate to an existing IAM WLCG account, follow these instructions. As in VOMS, multiple certificates can be linked to an account.
WLCG VO VOMS configuration
New LSC files will be rolled out on Dec. 16th, 2022
On Friday Dec. 16th, 2022 at 11 we will update the WLCC VO LSC configuration. The reason for the update is that the current certificate is going to expire and that the Sectigo CA INFN currently uses has changed the structure of the DNs of the issued certificates.
The updated configuration that you find here is compliant with the new certificate.
Do not roll out this configuration before Dec. 16th, or VOMS validation will break at your site.
To have a working VOMS configuration for the WLCG VO:
- place the
lscfile in the
- place the
vomsesfile in the
/etc/vomsesdirectory (only needed if you need to do
Outdated starting from Dec. 16th at 11
You can use the following RPM package to enable support for the WLCG VO on your RHEL machine:
VOMS clients compatibility
The latest supported VOMS clients are required.
Also note that this VO is supported by IAM, i.e. there are no VOMS Admin endpoints that can be used to generate Gridmap files.
$ voms-proxy-init -voms wlcg Enter GRID pass phrase for this identity: Contacting wlcg-voms.cloud.cnaf.infn.it:15001 [/DC=org/DC=terena/DC=tcs/C=IT/ST=Roma/O=Istituto Nazionale di Fisica Nucleare - INFN/OU=CNAF/CN=wlcg-voms.cloud.cnaf.infn.it] "wlcg".... Remote VOMS server contacted succesfully. Created proxy in /tmp/x509up_u1000. Your proxy is valid until Tue Nov 29 23:38:44 CET 2022 $ voms-proxy-info -all subject : /DC=org/DC=terena/DC=tcs/C=IT/O=Istituto Nazionale di Fisica Nucleare - INFN/CN=Federica Agostini email@example.com/CN=1645960321 issuer : /DC=org/DC=terena/DC=tcs/C=IT/O=Istituto Nazionale di Fisica Nucleare - INFN/CN=Federica Agostini firstname.lastname@example.org identity : /DC=org/DC=terena/DC=tcs/C=IT/O=Istituto Nazionale di Fisica Nucleare - INFN/CN=Federica Agostini email@example.com type : RFC3820 compliant impersonation proxy strength : 2048 path : /tmp/x509up_u1000 timeleft : 11:59:43 key usage : Digital Signature, Key Encipherment === VO wlcg extension information === VO : wlcg subject : /DC=org/DC=terena/DC=tcs/C=IT/O=Istituto Nazionale di Fisica Nucleare - INFN/CN=Federica Agostini firstname.lastname@example.org issuer : /DC=org/DC=terena/DC=tcs/C=IT/ST=Roma/O=Istituto Nazionale di Fisica Nucleare - INFN/CN=wlcg-voms.cloud.cnaf.infn.it attribute : /wlcg attribute : /wlcg/pilots attribute : /wlcg/xfers timeleft : 11:59:43 uri : wlcg-voms.cloud.cnaf.infn.it:15001