Demonstrate access to LIGO data frame data with SciTokens


  • Update redirectors to 5.0

  • Test a new file from cache and redirectors

  • Turn on TLS on redirectors

    • (ROADBLOCK) Do the origins also need to be upgraded to 5 for TLS support?

  • Test a new file from cache and redirectors

  • Create LIGO SciToken private + public key

  • Update UNL LIGO origin with scitokens config and 5.0

    • (ROADBLOCK) How do we do TLS for LIGO, and non-TLS for CMS et. al? LIGO shares an origin with CMS (Nebraska’s Tier2)

  • Change LIGO CVMFS config from x509 to scitokens. (it should fall back to x509)

  • Test LIGO x509 access

  • Test SciTokens access

Freshdesk Tickets



Brian Lin
April 23, 2021, 5:12 PM

Yup, nice work!

Derek Weitzel
April 20, 2021, 7:09 PM

Sorry for the delay in update. We have this 100% working, and are now working on a LIGO testbed so they can test it out on their hardware.

Should we close this?

Brian Lin
April 20, 2021, 3:20 PM

Hey it’s been a while since this has been last updated. Could you update the ticket description with status + next steps?

Derek Weitzel
December 4, 2020, 9:29 PM

As a daily update. All caches are updated and origins. Tokens work to download data from the caches and origins. CVMFS is in “testing”, but doesn’t work due to a design decision from long ago when developing the CVMFS plugin. Discussing with others around at the time of writing the plugin why we made that choice, expect an update to the cvmfs_x509_helper package.

Derek Weitzel
December 3, 2020, 4:16 PM

Few more updates this morning. UNL origins now support ligo scitokens and TLS.



Derek Weitzel


Brian Lin