Hello Alessandro,
I am sorry by the last answer.
Your suggestion is correct. :-)
Thank you very much.
Bruno
LIP
On Thu, 2006-11-09 at 10:26 +0100, Alessandro Paolini wrote:
> Hi Bruno,
> for the proxy infos, use the command
> voms-proxy-info --all
>
> The correct syntax for activate a proxy voms with role is:
> voms-proxy-init -voms YOUR_VO:/YOUR_VO/Role=<a Role>
>
> for a role in a subgroup it should be:
>
> voms-proxy-init -voms YOUR_VO:/YOUR_VO/<a group>/Role=<a Role>
>
> So looking at your voms server web pages, you are in the group
> testando, but not in the role interactive for this group. Put yourself
> in that role for that group and then try
>
> voms-proxy-init -voms itest:/itest/testando/Role=interactive
>
> looking at the logs file in the voms server could be useful to find
> out why the proxy don't activate (a syntax problem, certificate or
> CRL....)
>
> Cheers,
> Alessandro
> IT-ROC
>
> Bruno Rodrigues Silva ha scritto:
> > Hello all
> >
> > We have a VO named "itest" which has one group named "groupTest" and one
> > role named "interactive".
> >
> > According man page of the voms-proxy-init command, the parameter
> > "--voms" means...
> >
> > "-voms voms[:command] Specifies the VOMS server to contact using the
> > nickname voms. It also allows to send a specific command to the
> > server. The default command is :all, and it gets all group membership
> > information. Other commands are :/Role=rolename which grants the
> > role-name VO-wide role if the server allows it,
> > and :/group/Role=rolename which grants the role rolename only in the
> > group /group, again only if the server allows it."
> >
> > However, there is not difference in the output (voms-proxy-info -fqan)
> > when i execute voms-proxy-init using "--voms
> > itest:/itest/Role=interactive" or "--voms itest:/Role=interactive"
> > parameters for example.
> >
> > Other problem is: If i use the "--voms
> > itest:/itest/groupTest/Role=interactive" parameter (or "--voms
> > itest:/groupTest/Role=interactive), i get the following error...
> >
> > -----------------*************** **-------------------------------------
> > .....
> > ontacting i2g-voms.lip.pt:20004
> > [/C=PT/O=LIPCA/O=LIP/OU=Lisboa/CN=i2g-voms.lip.pt] "itest" Failed
> >
> > Error: itest: Unable to satisfy B/itest/testando:interactive Request!
> >
> > Trying next server for itest.
> > Creating temporary
> > proxy ................................................................
> > Done
> > Contacting i2g-voms.lip.pt:20004
> > [/C=PT/O=LIPCA/O=LIP/OU=LISBOA/CN=host/i2g-voms.lip.pt] "itest" Failed
> >
> > Error: Could not establish authenticated connection with the server.
> > GSS Major Status: Unexpected Gatekeeper or Service Name
> > GSS Minor Status Error Chain:
> >
> > an unknown error occurred
> >
> > Failed to contact servers for itest.
> >
> > ----------------------------*********************----------------------------
> >
> >
> > Some idea or other documentation?
> >
> > Thanks
> >
> > Bruno
> > Lisbon
> >
>
>
> --
> Dr. Alessandro Paolini
> INFN - CNAF
> Viale Berti Pichat 6/2
> 40127 Bologna
> Italy
> tel: +39 051 6092723
> fax: +39 051 6092746
> ICQ: 192172027
> **********************
> "credo nel potere del riso e delle lacrime"
> "come antidoto all'odio ed al terrore"
> "un giorno senza un sorriso"
> "รจ un giorno perso" >>> Charlie Chaplin
|