There are two formats: an RFC-compliant (e.g. CN=John Doe,OU=Users,DC=example,DC=com) and a legacy (e.g. /DC=com/DC=example/OU=Users/CN=John Doe)
In Rucio 1.29 and prior, X509 identities must be stored in the legacy format and the authentication server tries to silently convert them from the RFC to the legacy format, if necessary
In Rucio 1.30, this conversion has been removed
Communities who would like to keep using the legacy format must ensure that LegacyDNStringFormat in mod_ssl is enabled
ATLAS plans to convert its existing X509 identities to the RFC format
A small probe will become publicly available and should be usable by other communities