The MyProxy service is not generating correct certificates. Recent tests show proxy certificate subject and identity do not include the full user's OpenID as common name/CN and appear like:
subject : /O=ESG-CET/OU=NCAR/OU=simpleCA-vetswebprod.ucar.edu/CN=
issuer : /O=ESG-CET/OU=NCAR/OU=simpleCA-vetswebprod.ucar.edu/CN=ESG-NCAR CA
identity : /O=ESG-CET/OU=NCAR/OU=simpleCA-vetswebprod.ucar.edu/CN=
It should look like:
subject : /O=ESG-CET/OU=NCAR/OU=simpleCA-vetswebprod.ucar.edu/CN=https://esg.prototype.ucar.edu/myopenid/enienhouse
issuer : /O=ESG-CET/OU=NCAR/OU=simpleCA-vetswebprod.ucar.edu/CN=ESG-NCAR CA
identity : /O=ESG-CET/OU=NCAR/OU=simpleCA-vetswebprod.ucar.edu/CN=https://esg.prototype.ucar.edu/myopenid/enienhouse
subject : /O=ESG-CET/OU=NCAR/OU=simpleCA-vetswebprod.ucar.edu/CN=
issuer : /O=ESG-CET/OU=NCAR/OU=simpleCA-vetswebprod.ucar.edu/CN=ESG-NCAR CA
identity : /O=ESG-CET/OU=NCAR/OU=simpleCA-vetswebprod.ucar.edu/CN=
It should look like:
subject : /O=ESG-CET/OU=NCAR/OU=simpleCA-vetswebprod.ucar.edu/CN=https://esg.prototype.ucar.edu/myopenid/enienhouse
issuer : /O=ESG-CET/OU=NCAR/OU=simpleCA-vetswebprod.ucar.edu/CN=ESG-NCAR CA
identity : /O=ESG-CET/OU=NCAR/OU=simpleCA-vetswebprod.ucar.edu/CN=https://esg.prototype.ucar.edu/myopenid/enienhouse