LHC Computer Grid - Rollout
> [mailto:[log in to unmask]] On Behalf Of
> Alessandra Forti said:
> my understanding of that line is: "if the 6th field is
> different from sgm
> evaluate the name and if there are numbers remove them and
> take the rest
> as prefix". It still works without numbers as the original problem
> demonstrates.
Well, it "works" in the sense that it produces a valid config file - but
in many ways it would be better if it didn't, then you might notice the
problem sooner. It won't work in the sense of doing anything useful. For
example, if you have pool accounts called dteama, dteamb, dteamc etc
YAIM will put in a mapping of all DNs to ".dteama". At most that will
allow one user to get in (I'm not clear if the mapping algorithm allows
null suffixes) but it certainly isn't what was intended.
> If the fields in user.conf were the only thing used we'd have a much
> simpler parsing and only 1 convention: each field is separated by a
> colon. Which is reasonable. This wouldn't have avoided the original
> problem, but it makes it easier to debug it (also because it
> simplifies the code!).
Even there I would say that the code reading it should validate the
input and not just assume that it's correct. Right from the start of EDG
a major complaint has been "configuration is difficult", and a large
component of that is the fact that small mistakes can lead to very
obscure failure modes.
Stephen
|