Dear All,
I would like to understand how I can map the /dteam/uki group to
dteamsgm using lcmaps. I have modified the groupmapfile and gridmapfile
as follows:
/opt/edg/etc/lcmaps/groupmapfile
"/VO=dteam/GROUP=/dteam/uki/ROLE=NULL/Capability=NULL" dteam
"/VO=dteam/GROUP=/dteam/ROLE=lcgadmin/Capability=NULL" dteam
"/VO=dteam/GROUP=/dteam/ROLE=lcgadmin" dteam
"/VO=dteam/GROUP=/dteam/ROLE=production/Capability=NULL" dteam
"/VO=dteam/GROUP=/dteam/ROLE=production" dteam
"/VO=dteam/GROUP=/dteam/Role=NULL/Capability=NULL" dteam
"/VO=dteam/GROUP=/dteam" dteam
/opt/edg/etc/lcmaps/gridmapfile
"/VO=dteam/GROUP=/dteam/ROLE=lcgadmin/Capability=NULL" dteamsgm
"/VO=dteam/GROUP=/dteam/uki/ROLE=NULL/Capability=NULL" dteamsgm
"/VO=dteam/GROUP=/dteam/ROLE=lcgadmin" dteamsgm
"/VO=dteam/GROUP=/dteam/ROLE=production/Capability=NULL" dteamprd
"/VO=dteam/GROUP=/dteam/ROLE=production" dteamprd
"/VO=dteam/GROUP=/dteam/Role=NULL/Capability=NULL" .dteam
"/VO=dteam/GROUP=/dteam" .dteam
I could get a proxy with the following extensions:
subject : /C=UK/O=eScience/OU=Imperial/L=Physics/CN=olivier van der aa
issuer : /C=CH/O=CERN/OU=GRID/CN=host/lcg-voms.cern.ch
attribute : /dteam/uki/Role=NULL/Capability=NULL
attribute : /dteam/Role=NULL/Capability=NULL
but I never get mapped to dteamsgm. Any idea of what I am missing...
It seems to me that if this does not work then the modification we have
recently made to map the lhcb/sgm group to lhcbsgm will not work.
Cheers, Olivier.
--
- O. van der Aa - Imperial College London -
- LT2 Technical Coordinator -
- tel: +442075947810, +442071005426 -
- SIP: [log in to unmask] -
- fax: +442078238830 -
- http://surl.se/agtu -
|