Hi Olivier,
your proxy is for a common user. Do you have the dteam lcgadmin role in
VOMS? If yes, you need to ask to create a proxy with that information.
What voms-proxy-init command did you issue?
cheers
alessandra
Olivier van der Aa wrote:
> Dear All,
>
>
> I would like to understand how I can map the /dteam/uki group to
> dteamsgm using lcmaps. I have modified the groupmapfile and gridmapfile
> as follows:
>
> /opt/edg/etc/lcmaps/groupmapfile
>
> "/VO=dteam/GROUP=/dteam/uki/ROLE=NULL/Capability=NULL" dteam
> "/VO=dteam/GROUP=/dteam/ROLE=lcgadmin/Capability=NULL" dteam
> "/VO=dteam/GROUP=/dteam/ROLE=lcgadmin" dteam
> "/VO=dteam/GROUP=/dteam/ROLE=production/Capability=NULL" dteam
> "/VO=dteam/GROUP=/dteam/ROLE=production" dteam
> "/VO=dteam/GROUP=/dteam/Role=NULL/Capability=NULL" dteam
> "/VO=dteam/GROUP=/dteam" dteam
>
> /opt/edg/etc/lcmaps/gridmapfile
>
> "/VO=dteam/GROUP=/dteam/ROLE=lcgadmin/Capability=NULL" dteamsgm
> "/VO=dteam/GROUP=/dteam/uki/ROLE=NULL/Capability=NULL" dteamsgm
> "/VO=dteam/GROUP=/dteam/ROLE=lcgadmin" dteamsgm
> "/VO=dteam/GROUP=/dteam/ROLE=production/Capability=NULL" dteamprd
> "/VO=dteam/GROUP=/dteam/ROLE=production" dteamprd
> "/VO=dteam/GROUP=/dteam/Role=NULL/Capability=NULL" .dteam
> "/VO=dteam/GROUP=/dteam" .dteam
>
> I could get a proxy with the following extensions:
> subject : /C=UK/O=eScience/OU=Imperial/L=Physics/CN=olivier van der aa
> issuer : /C=CH/O=CERN/OU=GRID/CN=host/lcg-voms.cern.ch
> attribute : /dteam/uki/Role=NULL/Capability=NULL
> attribute : /dteam/Role=NULL/Capability=NULL
>
> but I never get mapped to dteamsgm. Any idea of what I am missing...
> It seems to me that if this does not work then the modification we have
> recently made to map the lhcb/sgm group to lhcbsgm will not work.
>
>
>
> Cheers, Olivier.
--
*******************************************
* Dr Alessandra Forti *
* University of Manchester *
* Technical Coordinator - NorthGrid Tier2 *
* http://www.hep.man.ac.uk/u/aforti *
*******************************************
|