This might also occur if you do not have a voms configured gridmap file
Jeremy
On 02/02/07, Nikolaos Vidiadakis <[log in to unmask]> wrote:
> Good morning to all!
>
> After some investigation, I came to the conlusion that a user that belongs
> to multiple VOs cannot change mapping to the proper VO user after issuing
>
> [ui] voms-proxy-init -voms [VO]
>
> and submit his job at our ce at GR-03-HEPNTUA. For example, I belong
> simultaneously at SEE and DTEAM. If I try to initialize a proxy cert
> issuing:
>
> [ui] voms-proxy-init -voms see
>
> I create a correct proxy certificate that returns:
>
> [ui] voms-proxy-info -vo
> see
>
> Then I try to submit a job issuing:
>
> [ui] glite-job-submit testJob.jdl
>
> But the job gets aborted. When I start tracing errors at the log files of
> our ce, I read:
>
> Feb 2 11:41:30 ce GRAM gatekeeper[32708]: Got connection 195.251.53.233 at
> Fri Feb 2 11:41:30 2007
> Feb 2 11:41:30 ce GRAM gatekeeper[32708]: Trying to use original user proxy
> ...
> Feb 2 11:41:30 ce GRAM gatekeeper[32708]: Authenticated globus user:
> /C=GR/O=HellasGrid/OU=ntua.gr/CN=Nikos Vidiadakis
> Feb 2 11:41:31 ce GRAM gatekeeper[32708]: Requested service: jobmanager
> [PING ONLY]
> Feb 2 11:41:31 ce GRAM gatekeeper[32708]: Authorized as local user:
> dteamsgm
> Feb 2 11:41:31 ce GRAM gatekeeper[32708]: Authorized as local uid: 18946
> Feb 2 11:41:31 ce GRAM gatekeeper[32708]: and local gid: 2688
> Feb 2 11:41:31 ce GRAM gatekeeper[32708]:
> "/C=GR/O=HellasGrid/OU=ntua.gr/CN=Nikos Vidiadakis" mapped to dteamsgm
> (18946/2688)
> Feb 2 11:41:31 ce GRAM gatekeeper[32708]: ping successful
> Feb 2 11:41:31 ce GRAM gatekeeper[32746]: Got connection 195.251.53.233 at
> Fri Feb 2 11:41:31 2007
> Feb 2 11:41:31 ce GRAM gatekeeper[32746]: Trying to use delegated user
> proxy
> Feb 2 11:41:31 ce GRAM gatekeeper[32746]: Authenticated globus user:
> /C=GR/O=HellasGrid/OU=ntua.gr/CN=Nikos Vidiadakis
> Feb 2 11:41:31 ce GRAM gatekeeper[32746]: Requested service:
> jobmanager-lcgpbs
> Feb 2 11:41:31 ce GRAM gatekeeper[32746]: Authorized as local user:
> dteamsgm
> Feb 2 11:41:31 ce GRAM gatekeeper[32746]: Authorized as local uid: 18946
> Feb 2 11:41:31 ce GRAM gatekeeper[32746]: and local gid: 2688
> Feb 2 11:41:31 ce GRAM gatekeeper[32746]:
> "/C=GR/O=HellasGrid/OU=ntua.gr/CN=Nikos Vidiadakis" mapped to dteamsgm
> (18946/2688)
> Feb 2 11:41:35 ce GRAM gatekeeper[342]: Got connection 195.251.53.233 at
> Fri Feb 2 11:41:35 2007
> Feb 2 11:41:35 ce GRAM gatekeeper[342]: Trying to use delegated user proxy
> Feb 2 11:41:35 ce GRAM gatekeeper[342]: Authenticated globus user:
> /C=GR/O=HellasGrid/OU= ntua.gr/CN=Nikos Vidiadakis
> Feb 2 11:41:35 ce GRAM gatekeeper[342]: Requested service: jobmanager-fork
> Feb 2 11:41:35 ce GRAM gatekeeper[342]: Authorized as local user: dteamsgm
> Feb 2 11:41:35 ce GRAM gatekeeper[342]: Authorized as local uid: 18946
> Feb 2 11:41:35 ce GRAM gatekeeper[342]: and local gid: 2688
> Feb 2 11:41:35 ce GRAM gatekeeper[342]: "/C=GR/O=HellasGrid/OU=
> ntua.gr/CN=Nikos Vidiadakis" mapped to dteamsgm (18946/2688)
> Feb 2 11:41:43 ce gridinfo[32754]: JMA 2007/02/02 11:41:43 GATEKEEPER_JM_ID
> 2007-02-02.11:41:31.0000001687.0000001276 for /C=
> GR/O=HellasGrid/OU=ntua.gr/CN=Nikos Vidiadakis on 195.251.53.233
> Feb 2 11:41:43 ce gridinfo[32754]: JMA 2007/02/02 11:41:43 GATEKEEPER_JM_ID
> 2007-02-02.11:41:31.0000001687.0000001276 mapped
> to dteamsgm (18946, 2688)
> Feb 2 11:41:43 ce gridinfo[32754]: JMA 2007/02/02 11:41:43 GATEKEEPER_JM_ID
> 2007-02-02.11:41:31.0000001687.0000001276 has GRA
> M_SCRIPT_JOB_ID 1170409302:lcgpbs:internal_1730543557:
> 32754.1170409297 manager type lcgpbs
> Feb 2 11:41:44 ce gridinfo[32754]: JMA 2007/02/02 11:41:44 GATEKEEPER_JM_ID
> 2007-02-02.11:41:31.0000001687.0000001276 JM exit
> ing
> Feb 2 11:41:45 ce gridinfo[352]: JMA 2007/02/02 11:41:45 GATEKEEPER_JM_ID
> 2007-02-02.11:41:35.0000001687.0000001277 for /C=GR
> /O=HellasGrid/OU=ntua.gr/CN=Nikos Vidiadakis on 195.251.53.233
> Feb 2 11:41:45 ce gridinfo[352]: JMA 2007/02/02 11:41:45 GATEKEEPER_JM_ID
> 2007-02-02.11:41:35.0000001687.0000001277 mapped to
> dteamsgm (18946, 2688)
> Feb 2 11:41:45 ce gridinfo[352]: JMA 2007/02/02 11:41:45 GATEKEEPER_JM_ID
> 2007-02-02.11:41:35.0000001687.0000001277 has GRAM_
> SCRIPT_JOB_ID 515 manager type fork
> Feb 2 11:43:21 ce gridinfo: [517-1643] Job
> 1170409302:lcgpbs:internal_1730543557:32754.1170409297
> FAILED during submission to
> batch system lcgpbs
>
> As it seems, I only get mapped as dteam user and not as see user. I even
> look into /etc/grid-security/grid-mapdir and I can only find one entry with
> my name:
> "/C=GR/O=HellasGrid/OU=ntua.gr/CN=Nikos Vidiadakis" dteamsgm
>
> Shouln't there be a second entry about my see membership? I suspect that it
> is a misconfiguration of our ce during the upgrade from LCG to GLITE but I
> cannot find something similar...
>
>
>
--
[log in to unmask] tlf: +47 55 58 40 65
Parallab Bergen Centre for Computational Science
|