Hi
it could even be that there is an old entry in the gridmapdir. i don't
know if it's still like this, but the globus code taking care of this
used to first check if you were in the mapfile, if so check if you were
in the gridmapdir, if so it just used whatever was there. it didn't
actually check that the mapping in gridmapdir agreed with what was in
the mapfle.
JT
Burke, S (Stephen) wrote:
> LHC Computer Grid - Rollout
>> [mailto:[log in to unmask]] On Behalf Of David
>> Meder-Marouelli said:
>> I am trying to find an answer to the above question. What I actually
>> would like to do is being part of more than one VO using the same
>> certificate. I thought this should be possible with gLite3 (even when
>> using the lcg-style RB and CE components). But evidently this
>> is not the case:
>
> It's a matter of configuration. As long as the CE (and any other
> component) continues to use a traditional DN-based grid map file you get
> whatever mapping comes first in the file. To be able to do what you want
> the CE needs the fully VOMS-ified mapping. I think the glite CE is
> configured like that by default, but the LCG CEs still not. I don't know
> if there is any schedule for LCG to switch to the full VOMS
> configuration everywhere, but at the moment you still need a different
> certificate for each VO.
>
> Stephen
|