Minutes of NAF User Committee meeting from 9.03.2009 
-----------------------------------------------------

Present: Wolfgang Ehrenfeld (ATLAS), Carsten Hof (CMS), Yves Kemp
(IT), Hartmut Stadie (CMS)

Location: DPG Munich


1. dcap to gsidcap switch

The NAF admins would like to switch from dcap to gsidcap access as
soon as possible. A start would be to disable the access to the /pnfs
mount and use the dctools instead, which need a valid proxy.

As long as no automatic proxy prolongation is available at the NAF,
this discussion is on hold.

The automatic proxy prolongation should work very soon and the NAF
admins will inform the experiments.


2. CVS/kerberos connection between NAF and CERN

CMS also found a delay of around 30 seconds for each CVS access to the
CERN CVS server using kerberos. This was noticed by ATLAS a long time
ago. Somebody from the CMS Hamburg debugged the issue and traced it
back to the configuration of the DESY firewall. A port is not fully
block but packages are filtered out, which confuses the kerberos
server at CERN, causing a timeout of 30 seconds.

Hartmut and Wolfgang will follow up with D4 at DESY if the firewall
settings can be changed.