Nikolaos Vidiadakis wrote:
> Good morning to all!
>
> After some investigation, I came to the conlusion that a user that
> belongs to multiple VOs cannot change mapping to the proper VO user
> after issuing
>
> [ui] voms-proxy-init -voms [VO]
>
> and submit his job at our ce at GR-03-HEPNTUA. For example, I belong
> simultaneously at SEE and DTEAM. If I try to initialize a proxy cert
> issuing:
>
> [ui] voms-proxy-init -voms see
>
> I create a correct proxy certificate that returns:
>
> [ui] voms-proxy-info -vo
> see
>
> Then I try to submit a job issuing:
>
> [ui] glite-job-submit testJob.jdl
>
> But the job gets aborted. When I start tracing errors at the log files
> of our ce, I read:
>
> Feb 2 11:41:30 ce GRAM gatekeeper[32708]: Got connection 195.251.53.233
> <http://195.251.53.233> at Fri Feb 2 11:41:30 2007
> Feb 2 11:41:30 ce GRAM gatekeeper[32708]: Trying to use original user
> proxy ...
> Feb 2 11:41:30 ce GRAM gatekeeper[32708]: Authenticated globus user:
> /C=GR/O=HellasGrid/OU=ntua.gr/CN=Nikos <http://ntua.gr/CN=Nikos> Vidiadakis
> Feb 2 11:41:31 ce GRAM gatekeeper[32708]: Requested service: jobmanager
> [PING ONLY]
> Feb 2 11:41:31 ce GRAM gatekeeper[32708]: Authorized as local user:
> dteamsgm
> Feb 2 11:41:31 ce GRAM gatekeeper[32708]: Authorized as local uid: 18946
> Feb 2 11:41:31 ce GRAM gatekeeper[32708]: and local gid: 2688
> Feb 2 11:41:31 ce GRAM gatekeeper[32708]:
> "/C=GR/O=HellasGrid/OU=ntua.gr/CN=Nikos <http://ntua.gr/CN=Nikos>
> Vidiadakis" mapped to dteamsgm (18946/2688)
> Feb 2 11:41:31 ce GRAM gatekeeper[32708]: ping successful
> Feb 2 11:41:31 ce GRAM gatekeeper[32746]: Got connection 195.251.53.233
> <http://195.251.53.233> at Fri Feb 2 11:41:31 2007
> Feb 2 11:41:31 ce GRAM gatekeeper[32746]: Trying to use delegated user
> proxy
> Feb 2 11:41:31 ce GRAM gatekeeper[32746]: Authenticated globus user:
> /C=GR/O=HellasGrid/OU=ntua.gr/CN=Nikos <http://ntua.gr/CN=Nikos> Vidiadakis
> Feb 2 11:41:31 ce GRAM gatekeeper[32746]: Requested service:
> jobmanager-lcgpbs
> Feb 2 11:41:31 ce GRAM gatekeeper[32746]: Authorized as local user:
> dteamsgm
> Feb 2 11:41:31 ce GRAM gatekeeper[32746]: Authorized as local uid: 18946
> Feb 2 11:41:31 ce GRAM gatekeeper[32746]: and local gid: 2688
> Feb 2 11:41:31 ce GRAM gatekeeper[32746]:
> "/C=GR/O=HellasGrid/OU=ntua.gr/CN=Nikos <http://ntua.gr/CN=Nikos>
> Vidiadakis" mapped to dteamsgm (18946/2688)
> Feb 2 11:41:35 ce GRAM gatekeeper[342]: Got connection 195.251.53.233
> <http://195.251.53.233> at Fri Feb 2 11:41:35 2007
> Feb 2 11:41:35 ce GRAM gatekeeper[342]: Trying to use delegated user proxy
> Feb 2 11:41:35 ce GRAM gatekeeper[342]: Authenticated globus user:
> /C=GR/O=HellasGrid/OU= ntua.gr/CN=Nikos <http://ntua.gr/CN=Nikos> Vidiadakis
> Feb 2 11:41:35 ce GRAM gatekeeper[342]: Requested service: jobmanager-fork
> Feb 2 11:41:35 ce GRAM gatekeeper[342]: Authorized as local user: dteamsgm
> Feb 2 11:41:35 ce GRAM gatekeeper[342]: Authorized as local uid: 18946
> Feb 2 11:41:35 ce GRAM gatekeeper[342]: and local gid: 2688
> Feb 2 11:41:35 ce GRAM gatekeeper[342]: "/C=GR/O=HellasGrid/OU=
> ntua.gr/CN=Nikos <http://ntua.gr/CN=Nikos> Vidiadakis" mapped to
> dteamsgm (18946/2688)
> Feb 2 11:41:43 ce gridinfo[32754]: JMA 2007/02/02 11:41:43
> GATEKEEPER_JM_ID 2007-02-02.11:41:31.0000001687.0000001276 for /C=
> GR/O=HellasGrid/OU=ntua.gr/CN=Nikos <http://ntua.gr/CN=Nikos> Vidiadakis
> on 195.251.53.233 <http://195.251.53.233>
> Feb 2 11:41:43 ce gridinfo[32754]: JMA 2007/02/02 11:41:43
> GATEKEEPER_JM_ID 2007-02-02.11:41:31.0000001687.0000001276 mapped
> to dteamsgm (18946, 2688)
> Feb 2 11:41:43 ce gridinfo[32754]: JMA 2007/02/02 11:41:43
> GATEKEEPER_JM_ID 2007-02-02.11:41:31.0000001687.0000001276 has GRA
> M_SCRIPT_JOB_ID 1170409302:lcgpbs:internal_1730543557: 32754.1170409297
> manager type lcgpbs
> Feb 2 11:41:44 ce gridinfo[32754]: JMA 2007/02/02 11:41:44
> GATEKEEPER_JM_ID 2007-02-02.11:41:31.0000001687.0000001276 JM exit
> ing
> Feb 2 11:41:45 ce gridinfo[352]: JMA 2007/02/02 11:41:45
> GATEKEEPER_JM_ID 2007-02-02.11:41:35.0000001687.0000001277 for /C=GR
> /O=HellasGrid/OU=ntua.gr/CN=Nikos <http://ntua.gr/CN=Nikos> Vidiadakis
> on 195.251.53.233 <http://195.251.53.233>
> Feb 2 11:41:45 ce gridinfo[352]: JMA 2007/02/02 11:41:45
> GATEKEEPER_JM_ID 2007-02-02.11:41:35.0000001687.0000001277 mapped to
> dteamsgm (18946, 2688)
> Feb 2 11:41:45 ce gridinfo[352]: JMA 2007/02/02 11:41:45
> GATEKEEPER_JM_ID 2007-02-02.11:41:35.0000001687.0000001277 has GRAM_
> SCRIPT_JOB_ID 515 manager type fork
> Feb 2 11:43:21 ce gridinfo: [517-1643] Job
> 1170409302:lcgpbs:internal_1730543557:32754.1170409297 FAILED during
> submission to
> batch system lcgpbs
>
> As it seems, I only get mapped as dteam user and not as see user. I even
> look into /etc/grid-security/grid-mapdir and I can only find one entry
> with my name:
> "/C=GR/O=HellasGrid/OU=ntua.gr/CN=Nikos <http://ntua.gr/CN=Nikos>
> Vidiadakis" dteamsgm
>
> Shouln't there be a second entry about my see membership? I suspect that
> it is a misconfiguration of our ce during the upgrade from LCG to GLITE
> but I cannot find something similar...
Check /var/log/globus-gatekeeper.log for error messages regarding your
VOMS proxy. Then check the GOC Wiki for the relevant error:
http://goc.grid.sinica.edu.tw/gocwiki/SiteProblemsFollowUpFaq
For example:
Generic verification error for VOMS (failure)!
|