Alessandra Forti wrote:
Hi Alessandra,
> Hi Olivier,
>
> your proxy is for a common user. Do you have the dteam lcgadmin role in
> VOMS? If yes, you need to ask to create a proxy with that information.
> What voms-proxy-init command did you issue?
>
I used: [voms-proxy-init --voms dteam:/dteam/uki] since I am a member of
that group (http://tinyurl.com/h6v7z). In principle if the
/opt/edg/etc/lcmaps/gridmapfile contains a line to map that to dteamsgm,
lcmaps should do it.
Cheers, Olivier.
> cheers
> alessandra
>
>
> Olivier van der Aa wrote:
>> Dear All,
>>
>>
>> I would like to understand how I can map the /dteam/uki group to
>> dteamsgm using lcmaps. I have modified the groupmapfile and gridmapfile
>> as follows:
>>
>> /opt/edg/etc/lcmaps/groupmapfile
>>
>> "/VO=dteam/GROUP=/dteam/uki/ROLE=NULL/Capability=NULL" dteam
>> "/VO=dteam/GROUP=/dteam/ROLE=lcgadmin/Capability=NULL" dteam
>> "/VO=dteam/GROUP=/dteam/ROLE=lcgadmin" dteam
>> "/VO=dteam/GROUP=/dteam/ROLE=production/Capability=NULL" dteam
>> "/VO=dteam/GROUP=/dteam/ROLE=production" dteam
>> "/VO=dteam/GROUP=/dteam/Role=NULL/Capability=NULL" dteam
>> "/VO=dteam/GROUP=/dteam" dteam
>>
>> /opt/edg/etc/lcmaps/gridmapfile
>>
>> "/VO=dteam/GROUP=/dteam/ROLE=lcgadmin/Capability=NULL" dteamsgm
>> "/VO=dteam/GROUP=/dteam/uki/ROLE=NULL/Capability=NULL" dteamsgm
>> "/VO=dteam/GROUP=/dteam/ROLE=lcgadmin" dteamsgm
>> "/VO=dteam/GROUP=/dteam/ROLE=production/Capability=NULL" dteamprd
>> "/VO=dteam/GROUP=/dteam/ROLE=production" dteamprd
>> "/VO=dteam/GROUP=/dteam/Role=NULL/Capability=NULL" .dteam
>> "/VO=dteam/GROUP=/dteam" .dteam
>>
>> I could get a proxy with the following extensions:
>> subject : /C=UK/O=eScience/OU=Imperial/L=Physics/CN=olivier van der aa
>> issuer : /C=CH/O=CERN/OU=GRID/CN=host/lcg-voms.cern.ch
>> attribute : /dteam/uki/Role=NULL/Capability=NULL
>> attribute : /dteam/Role=NULL/Capability=NULL
>>
>> but I never get mapped to dteamsgm. Any idea of what I am missing...
>> It seems to me that if this does not work then the modification we
>> have recently made to map the lhcb/sgm group to lhcbsgm will not work.
>>
>>
>>
>> Cheers, Olivier.
>
--
- O. van der Aa - Imperial College London -
- LT2 Technical Coordinator -
- tel: +442075947810, +442071005426 -
- SIP: [log in to unmask] -
- fax: +442078238830 -
- http://surl.se/agtu -
|