Hi,
there is a discrepancy between the VOs that you claim to
support and the configuration that steers the creation of your
gridmapfile.
FZK:
The CE claims to support:
GlueCEAccessControlBaseRule: VO:alice
GlueCEAccessControlBaseRule: VO:atlas
GlueCEAccessControlBaseRule: VO:cms
GlueCEAccessControlBaseRule: VO:lhcb
GlueCEAccessControlBaseRule: VO:dteam
but in the gridmapfile conf I see that you only support dteam:
globus-job-run hik-lcg-ce.fzk.de /bin/cat /opt/edg/etc/edg-mkgridmap.conf
#### GROUP: group URI [lcluser]
#
# LCG Standard Virtual Organizations
#group ldap://grid-vo.nikhef.nl/ou=lcg1,o=alice,dc=eu-datagrid,dc=org
.alice
#group ldap://grid-vo.nikhef.nl/ou=lcg1,o=atlas,dc=eu-datagrid,dc=org
.atlas
#group ldap://grid-vo.nikhef.nl/ou=lcg1,o=cms,dc=eu-datagrid,dc=org .cms
#group ldap://grid-vo.nikhef.nl/ou=lcg1,o=lhcb,dc=eu-datagrid,dc=org .lhcb
group ldap://lcg-vo.cern.ch/ou=lcg1,o=dteam,dc=lcg,dc=org .dteam
#group ldap://babar-vo.gridpp.ac.uk/ou=babar,dc=gridpp,dc=ac,dc=uk .babar
#### DEFAULT_LCLUSER: default_lcluser lcluser
#default_lcluser .
#### AUTH: authorization URI
auth ldap://lcg-registrar.cern.ch/ou=users,o=registrar,dc=lcg,dc=org
#### ALLOW and DENY: deny|allow pattern_to_match
#allow *INFN*
#### GMF_LOCAL: gmf_local grid-mapfile-local
gmf_local /etc/grid-security/local-users
markus
--
*************************************************************************
* *
* CERN Markus W. Schulz *
* Bat. 31 2-015 *
* CH-1211 Geneva 23 *
* *
* Phone: +41 22 76 77909 *
* www.cern.ch *
* *
*************************************************************************
|