Personal certificates with "sn" and "gn" fields not supported

[fstagni]

Dear all,

We have an issue with certificates having "sn" and "gn" fields, as in the example below:

/C=DE/O=GridGermany/OU=Max-Planck-Gesellschaft/OU=Max-Planck-Institut fuer Kernphysik/sn=Werner/gn=Felix/CN=Felix Werner

When users issue a proxy with dirac-proxy-init they get:

DN /C=DE/O=GridGermany/OU=Max-Planck-Gesellschaft/OU=Max-Planck-Institut fuer Kernphysik/SN=Werner/GN=Felix/CN=Felix Werner is not registered

I tried to manually change lower case letters to upper case:

/sn=Werner/gn=Felix/ -> /SN=Werner/GN=Felix/

in the CS and it seems to work fine. However, the VOMS2CSAgent then updates again the CS with lower case letters and users cannot issue a proxy anymore.

Is there some fix needed in dirac-proxy-init or in some other component to handle this use case?

Thank you,

Luisa

Originally posted by @arrabito in #6437

--> update VOMS2CSAgent