Hi,
We upgraded yesterday from 2_2_0 to 2_3_0 and hit a gotcha with the extra
VOs we'd already defined.
Since we're actively working to end RH73 and with it LCFGng I didn't want to
go back to the drawing board and redo the full extra VO definitions using
the new script so I just lefy everything for the extra VOs as it was in
2_2_0.
The Problem
-----------
That left me with the following errors in the GIIS sanity check:
Invalid Lines Found:
==============================================
IN: dn:
GlueSARoot=babar:babar,GlueSEUniqueID=heplnx132.pp.rl.ac.uk,Mds-Vo-name=ralp
plcg2,o=grid
"GlueSAUniqueID:"
IN: dn:
GlueSARoot=dzero:dzero,GlueSEUniqueID=heplnx132.pp.rl.ac.uk,Mds-Vo-name=ralp
plcg2,o=grid
"GlueSAUniqueID:"
IN: dn:
GlueSARoot=hone:hone,GlueSEUniqueID=heplnx132.pp.rl.ac.uk,Mds-Vo-name=ralppl
cg2,o=grid
"GlueSAUniqueID:"
IN: dn:
GlueSARoot=zeus:zeus,GlueSEUniqueID=heplnx132.pp.rl.ac.uk,Mds-Vo-name=ralppl
cg2,o=grid
"GlueSAUniqueID:"
Checking the info system on my SE, the errors looked reasonable:
heplnx103 - ~ $ ldapsearch -x -H ldap://heplnx132.pp.rl.ac.uk:2135 -b
'Mds-vo-name=local,o=Grid' | grep GlueSAUniqueID
GlueSAUniqueID: heplnx132.pp.rl.ac.uk
GlueSAUniqueID: heplnx132.pp.rl.ac.uk
GlueSAUniqueID: heplnx132.pp.rl.ac.uk
GlueSAUniqueID: heplnx132.pp.rl.ac.uk
GlueSAUniqueID: heplnx132.pp.rl.ac.uk
GlueSAUniqueID:
GlueSAUniqueID:
GlueSAUniqueID:
GlueSAUniqueID:
The solution
------------
To add the extra VOs I had created an extra lcginfo-seclassic-cfg.h file
with a stanza such as:
#ifdef SE_VO_ZEUS
#define PATH_ZEUS zeus:SA_PATH_ZEUS
#define PATH_DYN_ZEUS zeus:CE_CLOSE_SE_MOUNTPOINT/SA_PATH_ZEUS
EXTRA(lcginfo.entry) zeusSA
#define DN_ZEUSSA dn:
GlueSARoot=PATH_ZEUS,GlueSEUniqueID=SE_HOSTNAME,Mds-Vo-name=local,o=grid
lcginfo.dn_zeusSA DN_ZEUSSA
lcginfo.attributes_zeusSA GlueChunkKey GlueSAAccessControlBaseRule
lcginfo.values_zeusSA_GlueChunkKey GlueSEUniqueID=SE_HOSTNAME
lcginfo.values_zeusSA_GlueSAAccessControlBaseRule zeus
#endif
for each extra VO. This needed two extra pieces.
1) the lcginfo.attributes_ line needs "GlueSAUniqueID" addeed to the end
2) an extra line needs to be added before the #endif
lcginfo.values_zeusSA_GlueSAUniqueID SE_HOSTNAME
Hope this saves someone some time.
Yours,
Chris.
--
Chris Brew ([log in to unmask]) +44 1235 446326
Particle Physics Department
Rutherford Appleton Laboratory
Chilton, Didcot. Oxfordshire.
OX11 0QX. United Kingdom.
|