Joining the ATLAS VO

[edit] Joining the ATLAS VO (or renewing membership)

You need to register your certificate with the LCG (LHC Computing Grid) as follows:
- openssl pkcs12 -export -inkey userkey.pem -in usercert.pem -out my_cert.p12 -name "My certificate"
- start a web browser and import the certificate. For firefox, start firefox, go to Edit -> Preferences -> Advanced -> Certificates -> Manage Certificates -> Import .. and give the path to the file my_cert.p12 (for other browsers, instructions can be found here
- in the browser where you loaded the certificate, fill out the LCG registration form following the links for VO=atlas. The email address should be the same one you use for WestGrid that appears in the info about you at the bottom of the page from your grid certificate.
A verification email will be sent to the address you provided. Click on the URL in the email to finalize the request, and you will get another email (this part is pretty much instantaneous) telling you to fill out Phase 2; here you want to select the groups /atlas and /atlas/lcg1 with NO ROLES
Wait a few days (three in my case) and you will get a message from the Atlas VO administrator asking for an email from "your supervisor or from somebody already in the VO", which must be digitally signed with the personal certificate of the sender.
I got Reda Tafirout to do this for me.
A few days later, you should get another e-mail from the Atlas VO administrator, telling you that you are now in.
I think it took about a day after that before my grid privileges were actually working.

Somewhere in the whole business of changing my grid certificate to get rid of the evil "Email" field in the distinguished name, I found that my new certificate was not being propagated to some sites
To check whether you should be able to run at a given site with a particular certificate, you can look for the appropriate grid-mapfile, using commands such as

edg-gridftp-ls gsiftp://ce1.triumf.ca/etc/grid-security/grid-mapfile /etc/grid-security/grid-mapfile

and then copy the file locally

globus-url-copy gsiftp://ce1.triumf.ca/etc/grid-security/grid-mapfile file:///home/itrigger/triumf-grid-mapfile

and do

grep -i trigger triumf-grid-mapfile

and see if your new certificate is listed for that particular site.

--Isabel 10:47, 25 Aug 2005 (PDT)