On Mon, 12 Dec 2005 14:24:46 +0200, Dan Schrager <[log in to unmask]> wrote:

>put all WNs (with their full local host.localdomain name ) in CE's
>/etc/hosts.equiv ?

They are already there.

>try briefly mode 700 with no_root_squash, restart nfs server.

I didn't helped either. :-( I still get a 
Permission denied (publickey,password,hostbased).
when scp'ing as root if I specify a path with username@ like
#root scp -B
non_root_username@cehost:/absolute/path/to/a/file/in/that/non_root_username
while 
# root scp -B cehost:/absolute/path/to/a/file/in/that/non_root_username
works fine.

Any more idea? :-)

Patrick

>I so this problem at TAU-LCG2, they mount pool directories via nfs,
>without no_root_squash, and mode 755 and PBS works; if the mode is set
>to 700, then you have to export with no_root_squash, restart nfs server
>and again PBS works. I know it for sure.
>
>
>
>Patrick Guio wrote:
>
>>On Mon, 12 Dec 2005 13:56:37 +0200, Dan Schrager <[log in to unmask]> wrote:
>>
>>Hi Dan,
>>
>>And thank you for answering quickly but it does not help. My home directory
>>has mode 755 and is exported the same way as the dteam pool directories
>>(without no_root_squash) but root cannot either scp -B
>>patrick@cehost:/home/patrick/junk /tmp/junk (with both internal and external
>>interfaces)
>>I get the error message
>>Permission denied (publickey,password,hostbased)
>>I might be wrong but I think scp fails auth and before it checks whether the
>>file patrick@cehost:/home/patrick/junk really exists and is accessable.
>>
>>Cheers,
>>Patrick
>>
>>
>>
>>
>>>i think i know the answer to that:
>>>
>>>either chmod 755 to pool home directories - and without  no_root_squash
>>>in /etc/exports OR
>>>export the home directory via nfs with no_root_squash - and mode 700 for
>>>home dirs.
>>>
>>>you choose which one is safer
>>>
>>>
>>>Patrick Guio wrote:
>>>
>>>
>>>
>>>>Dear all,
>>>>
>>>>I have identified the cause of the 15001 error (Unknown Job Identifier).
>>>>I found in /var/log/maui.log the following warning:
>>>>
>>>>WARNING:  cannot set job '51.grid.bccs.uib.no' attr
>>>>'Resource_List:neednodes' to '1' (rc: 15001 'Unknown Job Id')
>>>>
>>>>But it does not seem to have any peculiar incidence on the processing of the
>>>>job since the next line of the log reads:
>>>>INFO:     job '51' successfully started
>>>>
>>>>Anyway does anyone has any idea about fixing this warning?
>>>>
>>>>The other problem with scp persists. In the mom_logs on the WN I can see
>>>>messages of the following type
>>>>pbs_mom;Fil;sys_copy;command: /usr/bin/scp -Br
>>>>[log in to unmask]:/home/dteam001/.lcgjm/globus-cache-export.VT6VlM
>>>>/globus-cache-export.VT6VlM.gpg
>>>>
>>>>I can run such scp commands from CE (resp. WN) to WN (resp. CE) as user
>>>>dteam001 but not as user root.
>>>>It looks pretty much like this command is actually ran by user root?
>>>>It is done on the WN?
>>>>Should I allow root on WN to perform such scp (as user dteam001 an access
>>>>data in ~dteam001? Is this secure?
>>>>
>>>>Any help would be appreciated.
>>>>
>>>>Sincerely,
>>>>
>>>>Patrick
>>>>
>>>>+++++++++++++++++++++++++++++++++++++++++++
>>>>This Mail Was Scanned By Mail-seCure System
>>>>at the Tel-Aviv University CC.
>>>>
>>>>
>>>>
>>>>
>>>
>>>
>>
>> +++++++++++++++++++++++++++++++++++++++++++
>> This Mail Was Scanned By Mail-seCure System
>> at the Tel-Aviv University CC.
>>
>>
>
>