Hi
what about those VOs who don't have production or lcgadmin roles?
JT
Maarten Litmaath, CERN wrote:
> On Sun, 3 Jun 2007, Maarten Litmaath, CERN wrote:
>
>> On Sat, 2 Jun 2007, Kyriacos Neocleous wrote:
>>
>>> Hi, currently 81 sites are failing the RM test. I checked a few, the most
>>> frequent error message is "lcg_cr: Permission denied". It looks there still
>>> a problem with permissions at CERN LFC, but not for all sites. [...]
>> No. Sites with a DPM as their default SE must run this script:
>>
>> -----------------------------------------------------------------------------
>> #!/bin/sh
>>
>> export DPNS_HOST=`hostname -f`
>> domain=`echo "$DPNS_HOST" | sed 's/[^.]*.//'`
>> date=`date +%Y-%m-%d`
>>
>> for VO
>> do
>> dpns-entergrpmap --group "$VO/Role=production"
>> dpns-entergrpmap --group "$VO/Role=lcgadmin"
>>
>> for dir in '' generated generated/$date
>> do
>> d=/dpm/$domain/home/$VO/$dir
>>
>> dpns-setacl -m "g:$VO/Role=lcgadmin:rwx,m:rwx" $d
>> dpns-setacl -m "g:$VO/Role=production:rwx,m:rwx" $d
>> dpns-setacl -m "d:g:$VO/Role=lcgadmin:rwx,d:m:rwx" $d
>> dpns-setacl -m "d:g:$VO/Role=production:rwx,d:m:rwx" $d
>> done
>> done
>> -----------------------------------------------------------------------------
>>
>> The DN of the user running the OPS tests has changed --> Permission denied.
>
> The script should be run on the DPM itself, and the arguments should be the
> list of supported VOs. The following script will discover those by itself:
>
> -----------------------------------------------------------------------------
> #!/bin/sh
> # run this directly on the DPM SE
>
> export DPNS_HOST=`hostname -f`
> domain=`echo "$DPNS_HOST" | sed 's/[^.]*.//'`
> date=`date +%Y-%m-%d`
> export PATH=${LCG_LOCATION:-/opt/lcg}/bin:$PATH
>
> test $# = 0 && set `dpns-ls /dpm/$domain/home`
>
> for VO
> do
> dpns-entergrpmap --group "$VO/Role=production"
> dpns-entergrpmap --group "$VO/Role=lcgadmin"
>
> for dir in '' generated generated/$date
> do
> d=/dpm/$domain/home/$VO/$dir
>
> dpns-setacl -m "g:$VO/Role=lcgadmin:rwx,m:rwx" $d
> dpns-setacl -m "g:$VO/Role=production:rwx,m:rwx" $d
> dpns-setacl -m "d:g:$VO/Role=lcgadmin:rwx,d:m:rwx" $d
> dpns-setacl -m "d:g:$VO/Role=production:rwx,d:m:rwx" $d
> done
> done
> -----------------------------------------------------------------------------
|