> On Fri, 4 May 2007, Yevgeniy Lyublev wrote:
>
>> Dear Maarten.
>> >
>> >> Dear Owen.
>> >> I have understood reason this problem.
>> >>
>> >> [root@se3 root]# grep ops /etc/group
>> >> ops:x:45000:opssgm001
>> >> opssgm:x:46001:
>> >> [root@se3 root]# grep opssgm /etc/passwd
>> >> opssgm:x:45000:45000:mapped user for group ID
>> >> ops:/home/opssgm:/bin/bash
>> >> opssgm001:x:18960:46001:mapped user for group ID
>> >> ops:/home/opssgm001:/bin/bash
>> >>
>> >> opssgm001 in opssgm group, but directory
>> >
>> > opssgm001 must also be in the "ops" group. Check:
>> >
>> > grep opssgm001 /etc/group | fold -w 77
>>
>> I absolute agree with You, but default group opssgm001 is opssgm, but not
>> ops.
>> .
>> [root@se3 root]# groups opssgm001
>> opssgm001 : opssgm ops
>>
>> After opssgm001 login it must execute chgrp for moving in ops group/
>> I have changed opssgm001 ID group in password file, and SAM tests are
>> executed successfully now.
>> From users.conf
>> [root@se3 ORIG]# grep opssgm ../*
>> ../users.conf:18960:opssgm001:46001,45000:opssgm,ops:ops:sgm:
>
> Dear Yevgeniy,
> I believe I now have a proper fix for the problem you reported.
>
> Before we released the current version of YAIM, the dcache.kpwd file by
> default mapped every DN to the first pool account of the corresponding VO:
>
> ops001 used for: .ops opssgm
>
> With the current YAIM the dcache.kpwd ended up like this:
>
> ops001 used for: .ops
> opssgm001 used for: .opssgm
>
> I think the problem is due to /opt/d-cache/bin/grid-mapfile2dcache-kpwd.
> I have attached a new version that produces the following result:
>
> ops001 used for: .ops .opssgm
>
> Please undo the change you put in /etc/passwd and run the new script.
> If it works, you can already replace the old script with the new version,
> which I will submit as a patch for the release.
> Thanks,
> Maarten
Dear Maarten,
I, certainly, shall use Your advice, but only opssgm001 has an
entering in two groups.
[root@rrcdsk6 root]# groups opssgm
opssgm : ops
[root@rrcdsk6 root]# groups ops001
ops001 : ops
[root@rrcdsk6 root]# groups opssgm001
opssgm001 : opssgm ops
Best regards, Yevgeniy.
|