Kyriakos Ginis wrote:
> On Thu, May 03, 2007 at 12:00:41AM +0200, Maarten Litmaath, CERN wrote:
>
>>>In addition, there will be problems when one sgm or prd user will
>>>change/delete files written by another sgm or prd user.
>>
>>The files and directories also need to be made group-writable.
>
>
> I think this has to be done for the software tag dirs under
> /opt/edg/var/info.
>
> For example after reconfiguration, I have:
>
> [root@ce01 info]# pwd /opt/edg/var/info
> [root@ce01 info]# ls -ld atlas
> drwxr-xr-x 2 atlassgm001 atlassgm 4096 Feb 20 07:33 atlas
> [root@ce01 info]# ls -l atlas
> total 4
> -rw-r--r-- 1 atlassgm001 atlassgm 268 Feb 20 07:33 atlas.list
>
>
> And in /opt/glite/yaim/functions/config_gip_vo_tag :
>
> sgmusers=`users_getspecialusers $VO sgm`
> sgmuser=`echo $sgmusers | cut -d " " -f 1`
> sgmgroup=`id -g $sgmuser`
> chown -R ${sgmuser}:${sgmgroup} $dir
> chmod -R go-w $dir
>
> So the way it is configured by YAIM, only the SGM user mapped to
> the first SGM account will be able to change/publish software tags.
Indeed, that is a bug. I have informed the developers.
|