Hi Emanuele!
My /etc/grid-security/gridmapdir directory is empty ! :-(
What can be the reason?
In /var/log/messages I see this a lot of time:
Aug 18 20:05:12 grid109 GRAM gatekeeper[24459]: Got connection 130.246.183.183 at Mon Aug 18 20:05:12 2003
Aug 18 20:05:17 grid109 GRAM gatekeeper[24459]: Authenticated globus user: /C=UK/O=eScience/OU=CLRC/L=RAL/CN=ruth dixon del tufo
Aug 18 20:05:17 grid109 GRAM gatekeeper[24459]: Authenticated globus user is still: /C=UK/O=eScience/OU=CLRC/L=RAL/CN=ruth dixon del tufo
Aug 18 20:05:17 grid109 GRAM gatekeeper[24459]: globus_gss_assist_gridmap() failed authorization. rc = 1
Aug 19 08:51:30 grid109 GRAM gatekeeper[31770]: Got connection 137.138.225.32 at Tue Aug 19 08:51:30 2003
Aug 19 08:51:30 grid109 GRAM gatekeeper[31770]: Authenticated globus user: /O=Grid/O=CERN/OU=cern.ch/CN=Emanuele Leonardi
Aug 19 08:51:30 grid109 GRAM gatekeeper[31770]: Authenticated globus user is still: /O=Grid/O=CERN/OU=cern.ch/CN=Emanuele Leonardi
Aug 19 08:51:30 grid109 GRAM gatekeeper[31770]: globus_gss_assist_gridmap() failed authorization. rc = 1
How to populate gridmapdir?
Gergo
In gatekeeper.log :
LCAS 0:
LCAS 5: Initialization LCAS version 1.1.8
LCAS 0: lcas.mod-lcas_init(): Reading LCAS database
/opt/edg/etc/lcas/lcas.db
LCAS 0:
LCAS 5: LCAS authorization request
LCAS 0: lcas.mod-lcas_get_fabric_authorization(): user is /C=UK/O=eScience/OU=CLRC/L=RAL/CN=ruth dixon del tufo
LCAS 0: lcas_userallow.mod-plugin_confirm_authorization(): checking allowed users in gridmapfile
LCAS 0: lcas_userallow.mod-plugin_confirm_authorization(): checking user /C=UK/O=eScience/OU=CLRC/L=RAL/CN=ruth dixon del tufo
LCAS 0: lcas.mod-lcas_get_fabric_authorization(): authorization granted by plugin /opt/edg/lib/lcas/modules/lcas_userallow.mod
LCAS 0: lcas_userban.mod-plugin_confirm_authorization(): checking banned users in /opt/edg/etc/lcas/ban_users.db
LCAS 0: lcas.mod-lcas_get_fabric_authorization(): authorization granted by plugin /opt/edg/lib/lcas/modules/lcas_userban.mod
LCAS 0: lcas_timeslots.mod-plugin_confirm_authorization(): Checking slot 1 out of 2 in /opt/edg/etc/lcas/timeslots.db
LCAS 0: lcas_timeslots.mod-plugin_confirm_authorization(): Checking slot 2 out of 2 in /opt/edg/etc/lcas/timeslots.db
LCAS 0: lcas_timeslots.mod-check_hour(): Hour (11:05:04) out of range: (23:00:00)-(24:00:00)
LCAS 0: lcas.mod-lcas_get_fabric_authorization(): authorization granted by plugin /opt/edg/lib/lcas/modules/lcas_timeslots.mod
LCAS 0: lcas_plugin_example-plugin_confirm_authorization(): OK, what the heck, I'll authorize Mr/Mrs /C=UK/O=eScience/OU=CLRC/L=RAL/CN=ruth dixon del tufo
LCAS 0: lcas.mod-lcas_get_fabric_authorization(): authorization granted by plugin /opt/edg/lib/lcas/modules/lcas_plugin_example.mod
LCAS 0: lcas.mod-lcas_get_fabric_authorization(): succeeded
LCAS 0:
LCAS 5: Termination LCAS
Notice: 5: Authenticated globus user is still: /C=UK/O=eScience/OU=CLRC/L=RAL/CN=ruth dixon del tufo
Failure: globus_gss_assist_gridmap() failed authorization. rc = 1
Failure: globus_gss_assist_gridmap() failed authorization. rc = 1
GRAM contact: grid109.kfki.hu:2119:[log in to unmask]
Notice: 6: Got connection 130.246.183.183 at Wed Aug 20 12:05:02 2003
Notice: 5: Authenticated globus user: /C=UK/O=eScience/OU=CLRC/L=RAL/CN=ruth dixon del tufo
Notice: 0: GRID_SECURITY_HTTP_BODY_FD=7
Notice: 0: temporarily ALLOW empty credentials
Notice: 0: Using dlopen version of LCAS
Notice: 0: lcasmod_name = /opt/edg/lib/lcas/lcas.mod
--
/\
/ \
/ \ /\
/ /\/\ /\ / \ /\
/\ / \/ \/\/\/\ / \
/ \/ \ \ \ /\ \
|