Hi Gergely
Those files should have been automatically created by the poolaccounts
object, following the configuration contained in poolaccounts-cfg.h
which is included by ComputingElement-cfg.h. Can you check if the
edg-lcfg-poolaccounts-1.1.1-edg1 rpm is installed on your CE and the
corresponding edg-lcfg-poolaccounts-defaults-s1-1.1.1-edg1 rpm is
installed on your LCFG server?
If so, please also execute the "qxprof poolaccounts | sort" command on
your CE and send me the output.
Emanuele
Debreczeni Gergely wrote:
>
> Hi Emanuele!
>
> My /etc/grid-security/gridmapdir directory is empty ! :-(
> What can be the reason?
>
> In /var/log/messages I see this a lot of time:
>
> Aug 18 20:05:12 grid109 GRAM gatekeeper[24459]: Got connection 130.246.183.183 at Mon Aug 18 20:05:12 2003
> Aug 18 20:05:17 grid109 GRAM gatekeeper[24459]: Authenticated globus user: /C=UK/O=eScience/OU=CLRC/L=RAL/CN=ruth dixon del tufo
> Aug 18 20:05:17 grid109 GRAM gatekeeper[24459]: Authenticated globus user is still: /C=UK/O=eScience/OU=CLRC/L=RAL/CN=ruth dixon del tufo
> Aug 18 20:05:17 grid109 GRAM gatekeeper[24459]: globus_gss_assist_gridmap() failed authorization. rc = 1
> Aug 19 08:51:30 grid109 GRAM gatekeeper[31770]: Got connection 137.138.225.32 at Tue Aug 19 08:51:30 2003
> Aug 19 08:51:30 grid109 GRAM gatekeeper[31770]: Authenticated globus user: /O=Grid/O=CERN/OU=cern.ch/CN=Emanuele Leonardi
> Aug 19 08:51:30 grid109 GRAM gatekeeper[31770]: Authenticated globus user is still: /O=Grid/O=CERN/OU=cern.ch/CN=Emanuele Leonardi
> Aug 19 08:51:30 grid109 GRAM gatekeeper[31770]: globus_gss_assist_gridmap() failed authorization. rc = 1
>
> How to populate gridmapdir?
> Gergo
>
> In gatekeeper.log :
>
> LCAS 0:
> LCAS 5: Initialization LCAS version 1.1.8
> LCAS 0: lcas.mod-lcas_init(): Reading LCAS database
> /opt/edg/etc/lcas/lcas.db
> LCAS 0:
> LCAS 5: LCAS authorization request
> LCAS 0: lcas.mod-lcas_get_fabric_authorization(): user is /C=UK/O=eScience/OU=CLRC/L=RAL/CN=ruth dixon del tufo
> LCAS 0: lcas_userallow.mod-plugin_confirm_authorization(): checking allowed users in gridmapfile
> LCAS 0: lcas_userallow.mod-plugin_confirm_authorization(): checking user /C=UK/O=eScience/OU=CLRC/L=RAL/CN=ruth dixon del tufo
> LCAS 0: lcas.mod-lcas_get_fabric_authorization(): authorization granted by plugin /opt/edg/lib/lcas/modules/lcas_userallow.mod
> LCAS 0: lcas_userban.mod-plugin_confirm_authorization(): checking banned users in /opt/edg/etc/lcas/ban_users.db
> LCAS 0: lcas.mod-lcas_get_fabric_authorization(): authorization granted by plugin /opt/edg/lib/lcas/modules/lcas_userban.mod
> LCAS 0: lcas_timeslots.mod-plugin_confirm_authorization(): Checking slot 1 out of 2 in /opt/edg/etc/lcas/timeslots.db
> LCAS 0: lcas_timeslots.mod-plugin_confirm_authorization(): Checking slot 2 out of 2 in /opt/edg/etc/lcas/timeslots.db
> LCAS 0: lcas_timeslots.mod-check_hour(): Hour (11:05:04) out of range: (23:00:00)-(24:00:00)
> LCAS 0: lcas.mod-lcas_get_fabric_authorization(): authorization granted by plugin /opt/edg/lib/lcas/modules/lcas_timeslots.mod
> LCAS 0: lcas_plugin_example-plugin_confirm_authorization(): OK, what the heck, I'll authorize Mr/Mrs /C=UK/O=eScience/OU=CLRC/L=RAL/CN=ruth dixon del tufo
> LCAS 0: lcas.mod-lcas_get_fabric_authorization(): authorization granted by plugin /opt/edg/lib/lcas/modules/lcas_plugin_example.mod
> LCAS 0: lcas.mod-lcas_get_fabric_authorization(): succeeded
> LCAS 0:
> LCAS 5: Termination LCAS
> Notice: 5: Authenticated globus user is still: /C=UK/O=eScience/OU=CLRC/L=RAL/CN=ruth dixon del tufo
> Failure: globus_gss_assist_gridmap() failed authorization. rc = 1
> Failure: globus_gss_assist_gridmap() failed authorization. rc = 1
> GRAM contact: grid109.kfki.hu:2119:[log in to unmask]
> Notice: 6: Got connection 130.246.183.183 at Wed Aug 20 12:05:02 2003
> Notice: 5: Authenticated globus user: /C=UK/O=eScience/OU=CLRC/L=RAL/CN=ruth dixon del tufo
> Notice: 0: GRID_SECURITY_HTTP_BODY_FD=7
> Notice: 0: temporarily ALLOW empty credentials
> Notice: 0: Using dlopen version of LCAS
> Notice: 0: lcasmod_name = /opt/edg/lib/lcas/lcas.mod
>
> --
>
> /\
> / \
> / \ /\
> / /\/\ /\ / \ /\
> /\ / \/ \/\/\/\ / \
> / \/ \ \ \ /\ \
--
/------------------- Emanuele Leonardi -------------------\
| eMail: [log in to unmask] - Tel.: +41-22-7674066 |
| IT division - Bat.31 2-012 - CERN - CH-1211 Geneva 23 |
\---------------------------------------------------------/
|