Burke, S (Stephen) wrote:
> LHC Computer Grid - Rollout
>
>>[mailto:[log in to unmask]] On Behalf Of
>>Maarten Litmaath said:
>>
>>>It should be possible to have a correct mapping without
>>
>>specifying all
>>
>>>groups from within a VO.
>>
>>Yes, for example:
>
>
> [...]
>
>
>>"/VO=desy/GROUP=/desy/*" .desy
>
>
> But looking at the original mail that is what he did
> ("/VO=desy/GROUP=/desy/*" .atlas), and apparently it results in
> /desy/Role=lcgadmin/Capability=NULL taking the atlas mapping even though
> an explicit /VO=desy/GROUP=/desy/ROLE=lcgadmin/Capability=NULL is first
> in the map file (and the lcgadmin role is the first FQAN). I don't
> immediately see why it wouldn't work.
I could not reproduce that, neither will pool nor with static accounts.
|