Hi Oscar (et.al),
On our CE:
/opt/etc/lcmaps/gridmapfile: non-existent
/opt/glite/etc/lcmaps/gridmapfile: non-existent
/etc/grid-security/grid-mapfile (after deleting the cron entry that rewrote it):
--------------------------------
"/phicos/Role=lcgadmin/Capability=NULL" .phicossgm
"/phicos/Role=lcgadmin" .phicossgm
"/phicos/Role=production/Capability=NULL" .phicosprd
"/phicos/Role=production" .phicosprd
"/phicos/Role=NULL/Capability=NULL" .phico
"/phicos" .phico
--------------------------------
/opt/edg/etc/lcmaps/gridmapfile:
--------------------------------
"/VO=phicos/GROUP=/phicos/ROLE=lcgadmin/Capability=NULL" .phicossgm
"/VO=phicos/GROUP=/phicos/ROLE=lcgadmin" .phicossgm
"/VO=phicos/GROUP=/phicos/ROLE=production/Capability=NULL" .phicosprd
"/VO=phicos/GROUP=/phicos/ROLE=production" .phicosprd
"/VO=phicos/GROUP=/phicos/Role=NULL/Capability=NULL" .phico
"/VO=phicos/GROUP=/phicos" .phico
...
--------------------------------
So /etc/grid-security/grid-mapfile seems like the correct one, adjusted lcmaps.db to:
vomslocalaccount = "lcmaps_voms_localaccount.mod"
" -gridmapfile /etc/grid-security/grid-mapfile"
" -use_voms_gid"
vomspoolaccount = "lcmaps_voms_poolaccount.mod"
" -gridmapfile /etc/grid-security/grid-mapfile"
" -gridmapdir /etc/grid-security/gridmapdir"
" -override_inconsistency"
ps: I have no idea what/who created the lcmaps.db file originally (some time autogenerated by yaim?)
Now all lcas and lcmaps stuff succeeds (thanks for the tips!), however, still there is something going wrong:
on CE /var/log/glite/gatekeeper.log:
--------------------------------
Notice: 6: Got connection <IP of WMSLB> at Tue Jun 12 10:24:57 2007
Notice: 5: Trying to use original user proxy ...
LCAS stuff...
LCMAPS stuff...
Notice: 5: Requested service: jobmanager [PING ONLY]
Notice: 5: Authorized as local user: phico008
Notice: 5: Authorized as local uid: 16808
Notice: 5: and local gid: 16800
Notice: 5: "/O=dutchgrid/O=users/O=philips-natlab/CN=Serge Vrijaldenhoven" mapped to phico008 (16808/16800)
Failure: ping successful
Failure: ping successful
Notice: 6: Got connection <IP of WMSLB> at Tue Jun 12 10:24:57 2007
Notice: 5: Trying to use delegated user proxy
LCAS stuff...
LCMAPS stuff...
Notice: 5: Requested service: jobmanager-fork
Notice: 5: Authorized as local user: phico008
Notice: 5: Authorized as local uid: 16808
Notice: 5: and local gid: 16800
Notice: 5: "/O=dutchgrid/O=users/O=philips-natlab/CN=Serge Vrijaldenhoven" mapped to phico008 (16808/16800)
Notice: 0: executing /opt/globus/libexec/globus-job-manager
Notice: 0: GATEKEEPER_JM_ID 2007-06-12.10:24:58.0000021565.0000000022 for /O=dutchgrid/O=users/O=philips-natlab/CN=Serge Vrijaldenhoven on <IP of WMSLB>
Notice: 0: GRID_SECURITY_CONTEXT_FD=12
Notice: 0: Child 31517 started
JMA 2007/06/12 10:25:00 GATEKEEPER_JM_ID 2007-06-12.10:24:58.0000021565.0000000022 for /O=dutchgrid/O=users/O=philips-natlab/CN=Serge Vrijaldenhoven on <IP of WMSLB>
JMA 2007/06/12 10:25:00 GATEKEEPER_JM_ID 2007-06-12.10:24:58.0000021565.0000000022 mapped to phico008 (16808, 16800)
JMA 2007/06/12 10:25:00 GATEKEEPER_JM_ID 2007-06-12.10:24:58.0000021565.0000000022 has GRAM_SCRIPT_JOB_ID 31577 manager type fork
JMA 2007/06/12 10:25:02 GATEKEEPER_JM_ID 2007-06-12.10:24:58.0000021565.0000000022 JM exiting
Notice: 6: Got connection <IP of WMSLB> at Tue Jun 12 10:25:02 2007
... etc
--------------------------------
My guess is that something is wrong with the jobmanagers setup.
globus-job-run and globus-job-submit via jobmanager-fork on the CE both work.
More input/ideas on where to look/what can be wrong are very welcome.
Greetings,
Serge
> -----Original Message-----
> From: LHC Computer Grid - Rollout
> [mailto:[log in to unmask]] On Behalf Of Oscar Koeroo
> Sent: Monday 11 June 2007 17:08
> To: [log in to unmask]
> Subject: Re: [LCG-ROLLOUT] LCAS failed authorization or
> LCMAPS failed user mapping
>
> Hi Serge,
>
> Try altering somethings in the lcmaps.db file:
>
>
> Copied from your mail:
>
> vomslocalaccount = "lcmaps_voms_localaccount.mod"
> " -gridmapfile /etc/grid-security/grid-mapfile"
> " -use_voms_gid"
>
> vomspoolaccount = "lcmaps_voms_poolaccount.mod"
> " -gridmapfile /etc/grid-security/grid-mapfile"
> " -gridmapdir /etc/grid-security/gridmapdir"
> " -override_inconsistency"
>
>
> Side note: Who made this file anyway?
>
>
> to:
>
> vomslocalaccount = "lcmaps_voms_localaccount.mod"
> " -gridmapfile /opt/glite/etc/lcmaps/gridmapfile"
> " -use_voms_gid"
>
> vomspoolaccount = "lcmaps_voms_poolaccount.mod"
> " -gridmapfile /opt/glite/etc/lcmaps/gridmapfile"
> " -gridmapdir /etc/grid-security/gridmapdir"
> " -override_inconsistency"
>
>
> On your glite-CE the file /opt/etc/lcmaps/gridmapfile must
> list FQANs in
> the official FQAN notation, like: "/phicos/Role=NULL/Capability=NULL
> .phicos"
>
> If it is like: /VO=phicos/GROUP=phicos/ROLE=NULL/Capability=NULL then
> more things have gone wrong while roling out this configuration.
>
>
>
> I hope that this file exists, I've seen on a rediris.es WMS
> machine that
> some needed file to perform VOMS mappings simply did not
> exist. In this
> case it didn't support VOMS mapping yet (and can do without)
> but on the
> CE this is very much needed.
>
>
> cheers,
>
>
> Oscar
>
>
>
>
>
> Vrijaldenhoven, Serge wrote:
> >> -----Original Message-----
> >> From: LHC Computer Grid - Rollout
> >> [mailto:[log in to unmask]] On Behalf Of
> Kyriakos Ginis
> >> Sent: Monday 11 June 2007 15:57
> >> To: [log in to unmask]
> >> Subject: Re: [LCG-ROLLOUT] LCAS failed authorization or
> >> LCMAPS failed user mapping
> >>
> >> On Mon, Jun 11, 2007 at 04:23:45PM +0300, Asterios
> Katsifodimos wrote:
> >>> Hi,
> >>>
> >>> Check whether the /etc/grid-security/grid-mapfile exists
> >> AND lists you in
> >>> there.
> >>>
> >>> For example does this command:
> >>> # cat /etc/grid-security/grid-mapfile | grep Vrijaldenhoven
> >>>
> >>> return your DN?
> >>>
> >>> If not, then copy the /etc/grid-security/grid-mapfile from
> >> your WMSLB to
> >>> your CE and try again.
> >> Beware that if we are talking about a gLite-CE, the above
> >> advice is wrong.
> >
> > hmmm... this is getting interesting...
> > We are indeed talking about a glite-CE
> >
> > What would be the appropiate advice?
> >
> > Grtz,
> > Serge
> >
> >
> >>> thanks,
> >>> On 6/11/07, Vrijaldenhoven, Serge
> >> <[log in to unmask]> wrote:
> >>>> Hi Aterios,
> >>>>
> >>>> I did what you suggested. Now LCAS succeeds, but
> >> immediately after that
> >>>> LCMAPS fails:
> >>>> -------------------------
> >>>> Notice: 0: lcmapsmod_name = /opt/glite/lib/lcmaps.mod
> >>>> LCMAPS 0: 2007-06-11.14:55:45.027549.0000029408.0000000250 :
> >>>> LCMAPS 7: 2007-06-11.14:55:45.027549.0000029408.0000000250 :
> >>>> Initialization LCMAPS version 1.3.6
> >>>> LCMAPS 0: 2007-06-11.14:55:45.027549.0000029408.0000000250 :
> >>>> lcmaps.mod-startPluginManager(): Reading LCMAPS database
> >>>> /opt/glite/etc/lcmaps/lcmaps.db
> >>>> LCMAPS 0: 2007-06-11.14:55:45.027549.0000029408.0000000250 :
> >>>> lcmaps.mod-get_procsymbol(): dlsym error:
> >> /opt/glite/lib/lcmaps.mod:
> >>>> undefined symbol: plugin_verify
> >>>> LCMAPS 0: 2007-06-11.14:55:45.027549.0000029408.0000000250 :
> >>>> lcmaps.mod-PluginInit(): no "plugin_verify()" method found in
> >>>> /opt/glite/lib/modules/lcmaps_plugin_example.mod: old
> style plugin
> >>>> LCMAPS 5:
> 2007-06-11.14:55:45.027549.0000029408.0000000250 : LCMAPS
> >>>> credential mapping request
> >>>> LCMAPS 0: 2007-06-11.14:55:45.027549.0000029408.0000000250 :
> >>>> lcmaps.mod-runPlugin(): found plugin
> >>>> /opt/glite/lib/modules/lcmaps_voms.mod
> >>>> LCMAPS 0: 2007-06-11.14:55:45.027549.0000029408.0000000250 :
> >>>> lcmaps.mod-runPlugin(): running plugin
> >>>> /opt/glite/lib/modules/lcmaps_voms.mod
> >>>> LCMAPS 0: 2007-06-11.14:55:45.027549.0000029408.0000000250 :
> >>>> lcmaps_plugin_voms-plugin_run(): voms plugin succeeded
> >>>> LCMAPS 0: 2007-06-11.14:55:45.027549.0000029408.0000000250 :
> >>>> lcmaps.mod-runPlugin(): found plugin
> >>>> /opt/glite/lib/modules/lcmaps_voms_localgroup.mod
> >>>> LCMAPS 0: 2007-06-11.14:55:45.027549.0000029408.0000000250 :
> >>>> lcmaps.mod-runPlugin(): running plugin
> >>>> /opt/glite/lib/modules/lcmaps_voms_localgroup.mod
> >>>> LCMAPS 0: 2007-06-11.14:55:45.027549.0000029408.0000000250 :
> >>>> lcmaps_plugin_voms_localgroup-plugin_run():
> voms_localgroup plugin
> >>>> succeeded
> >>>> LCMAPS 0: 2007-06-11.14:55:45.027549.0000029408.0000000250 :
> >>>> lcmaps.mod-runPlugin(): found plugin
> >>>> /opt/glite/lib/modules/lcmaps_voms_poolaccount.mod
> >>>> LCMAPS 0: 2007-06-11.14:55:45.027549.0000029408.0000000250 :
> >>>> lcmaps.mod-runPlugin(): running plugin
> >>>> /opt/glite/lib/modules/lcmaps_voms_poolaccount.mod
> >>>> LCMAPS 0: 2007-06-11.14:55:45.027549.0000029408.0000000250 :
> >>>> lcmaps_plugin_voms_poolaccount-plugin_run(): no
> >> poolaccount available for
> >>>> any of the fqans for user
> >> /O=dutchgrid/O=users/O=philips-natlab/CN=Serge
> >>>> Vrijaldenhoven in /etc/grid-security/grid-mapfile
> >>>> -------------------------
> >>>> Our lcmaps.db file is as below. Should something be
> >> changed in that file
> >>>> as well?
> >>>>
> >>>> /opt/glite/etc/lcmaps/lcmaps.db :
> >>>> -------------------------
> >>>> path = /opt/glite/lib/modules
> >>>> posix_enf = "lcmaps_posix_enf.mod"
> >>>> " -maxuid 1"
> >>>> " -maxpgid 1"
> >>>> " -maxsgid 32"
> >>>>
> >>>> localaccount = "lcmaps_localaccount.mod"
> >>>> " -gridmapfile /etc/grid-security/grid-mapfile"
> >>>>
> >>>> poolaccount = "lcmaps_poolaccount.mod"
> >>>> " -override_inconsistency"
> >>>> " -gridmapfile /etc/grid-security/grid-mapfile"
> >>>> " -gridmapdir /etc/grid-security/gridmapdir"
> >>>>
> >>>> vomsextract = "lcmaps_voms.mod"
> >>>> " -vomsdir /etc/grid-security/vomsdir"
> >>>> " -certdir /etc/grid-security/certificates"
> >>>>
> >>>> vomslocalgroup = "lcmaps_voms_localgroup.mod"
> >>>> " -groupmapfile /etc/grid-security/groupmapfile"
> >>>> " -mapmin 1"
> >>>>
> >>>> vomslocalaccount = "lcmaps_voms_localaccount.mod"
> >>>> " -gridmapfile /etc/grid-security/grid-mapfile"
> >>>> " -use_voms_gid"
> >>>>
> >>>> vomspoolaccount = "lcmaps_voms_poolaccount.mod"
> >>>> " -gridmapfile /etc/grid-security/grid-mapfile"
> >>>> " -gridmapdir /etc/grid-security/gridmapdir"
> >>>> " -override_inconsistency"
> >>>> good = "lcmaps_plugin_example.mod"
> >>>> # policies
> >>>> voms:
> >>>> vomsextract -> vomslocalgroup
> >>>> vomslocalgroup -> vomspoolaccount
> >>>> vomspoolaccount -> posix_enf | vomslocalaccount
> >>>> vomslocalaccount -> posix_enf
> >>>>
> >>>> standard:
> >>>> localaccount -> posix_enf | poolaccount
> >>>> poolaccount -> posix_enf
> >>>> voms_acq:
> >>>> vomsextract -> vomslocalgroup
> >>>> vomslocalgroup -> vomspoolaccount
> >>>> vomspoolaccount -> good | vomslocalaccount
> >>>> standard_acq:
> >>>> poolaccount -> good | localaccount
> >>>> localaccount -> good
> >>>> voms_enf:
> >>>> vomsextract -> vomslocalgroup
> >>>> vomslocalgroup -> vomspoolaccount
> >>>> vomspoolaccount -> posix_enf | vomslocalaccount
> >>>> vomslocalaccount -> posix_enf
> >>>> standard_enf:
> >>>> poolaccount -> posix_enf | localaccount
> >>>> localaccount -> posix_enf
> >>>> ~
> >>>> -------------------------
> >>>>
> >>>>
> >>>> ------------------------------
> >>>> *From:* LHC Computer Grid - Rollout [mailto:
> >>>> [log in to unmask]] *On Behalf Of *Asterios
> >> Katsifodimos
> >>>> *Sent:* Monday 11 June 2007 14:06
> >>>> *To:* [log in to unmask]
> >>>> *Subject:* Re: [LCG-ROLLOUT] LCAS failed authorization or
> >> LCMAPS failed
> >>>> user mapping
> >>>>
> >>>> Hi,
> >>>>
> >>>> We had this in our Certification testbed.
> >>>>
> >>>> The problem with the CE and the LCAS was solved by changing the:
> >>>> -authfile parameter value from
> "/etc/grid-security/grid-mapfile" to
> >>>> "/etc/grid-security/groupmapfile"
> >>>> in file:
> >>>> /opt/glite/etc/lcas/lcas.db
> >>>>
> >>>> There is a bug where we got the hint
> >> (https://savannah.cern.ch/bugs/?18830
> >>>> )
> >>>>
> >>>> The problem is that the file specified (
> >> /etc/grid-security/grid-mapfile)
> >>>> has the wrong format as you can see
> >>> here(http://www.dutchgrid.nl/DataGrid/wp4/lcas/edg-lcas-1.1/n
> >> ode3.html
> >>>> ).
> >>>>
> >>>> but I don't know any further details.
> >>>>
> >>>>
> >>>> Also check whether the /etc/cron.d/edg-mkgridmap exists
> in your CE.
> >>>>
> >>>> regards,
> >>>>
> >>>> On 6/11/07, Vrijaldenhoven, Serge
> >> <[log in to unmask] >
> >>>> wrote:
> >>>>> Hello all,
> >>>>>
> >>>>> while trying to find why our jobs get rejected from our
> >> CE (while it is
> >>>>> listed as a match for the job) we see the following in the
> >>>>> /var/log/glite/gatekeeper.log:
> >>>>>
> >> "lcas_plugin_voms-plugin_confirm_authorization_from_x509(): Did not
> >>>>> find a matching VO entry in the authorization file"
> >>>>> hence
> >>>>> "Failure: LCAS failed authorization." (see below for more log)
> >>>>> and probably the reason the job gets rejected.
> >>>>>
> >>>>> I believe the options are read in from
> >> /opt/glite/etc/lcas/lcas.db (on
> >>>>> CE):
> >>>>> -----------------------------------------
> >>>>> pluginname=lcas_userban.mod,pluginargs=ban_users.db
> >>>>> pluginname=lcas_voms.mod,pluginargs="-vomsdir
> >> /etc/grid-security/vomsdir
> >>>>> -certdir /etc/grid-security/certificates -authfile
> >>>>> /etc/grid-security/grid-mapfile -authformat simple -use_user_dn"
> >>>>> -----------------------------------------
> >>>>> -use_user_dn
> >>>>> If this option is set also user proxies without voms
> >> information will
> >>>>> be processed.
> >>>>> If the user dn of the proxy is present in the gacl or
> >> gridmapfile, the
> >>>>> user is authorized by this plugin.
> >>>>>
> >>>>> /etc/grid-security/grid-mapfile (on CE):
> >>>>> -----------------------------------------
> >>>>> "/O=dutchgrid/O=users/O=philips-natlab/CN=Ronald van
> >> Driel" .phicossgm
> >>>>> "/O=dutchgrid/O=users/O=philips-natlab/CN=Serge Vrijaldenhoven"
> >>>>> .phicossgm
> >>>>> -----------------------------------------
> >>>>>
> >>>>> voms-proxy-info -all (on UI)
> >>>>> -----------------------------------------
> >>>>> subject : /O=dutchgrid/O=users/O=philips-natlab/CN=Serge
> >>>>> Vrijaldenhoven/CN=proxy
> >>>>> issuer : /O=dutchgrid/O=users/O=philips-natlab/CN=Serge
> >>>>> Vrijaldenhoven
> >>>>> identity : /O=dutchgrid/O=users/O=philips-natlab/CN=Serge
> >>>>> Vrijaldenhoven
> >>>>> type : proxy
> >>>>> strength : 512 bits
> >>>>> path : /tmp/x509up_u507
> >>>>> timeleft : 9:26:54
> >>>>> === VO phicos extension information ===
> >>>>> VO : phicos
> >>>>> subject : /O=dutchgrid/O=users/O=philips-natlab/CN=Serge
> >>>>> Vrijaldenhoven
> >>>>> issuer : /O=dutchgrid/O=hosts/OU=
> >> sara.nl/CN=mu4.matrix.sara.nl
> >>>>> attribute : /phicos/Role=NULL/Capability=NULL
> >>>>> timeleft : 9:26:54
> >>>>> -----------------------------------------
> >>>>>
> >>>>> If I create an old style proxy -without voms extension- I see in
> >>>>> gatekeeper.log:
> >>>>>
> >> lcas_plugin_voms-plugin_confirm_authorization_from_x509():
> voms plugin
> >>>>> succeeded
> >>>>> However, then lcmaps fails... (see the 2nd log below)
> >>>>>
> >>>>> Anybody any idea what is going wrong?
> >>>>>
> >>>>> Greetings,
> >>>>> Serge
> >>>>>
> >>>>>
> >>>>>
> >>>>> More information:
> >>>>> =================
> >>>>> /var/log/glite/gatekeeper.log (proxy with voms extension):
> >>>>> -----------------------------------------
> >>>>> Notice: 6: Got connection <IP of Our WMSLB> at Mon Jun
> >> 11 11:03:57 2007
> >>>>> Notice: 5: Trying to use delegated user proxy
> >>>>> Notice: 5: Authenticated globus user:
> >>>>> /O=dutchgrid/O=users/O=philips-natlab/CN=Serge Vrijaldenhoven
> >>>>> Notice: 0: GRID_SECURITY_HTTP_BODY_FD=9
> >>>>> Notice: 0: JOB_REPOSITORY_ID 2007-06-11.11:03:
> >>>>> 57.318046.0000029408.0000000218 (unique id used for Job
> >> Repository)
> >>>>> Notice: 0: FORMAT:
> >> YYYY-MM-DD.hh:mm:ss.micros.pid.connection
> >>>>> Notice: 0: (Format: <date>.<time (with
> >>>>> microsecs)>.<pid>.<connection counter>)
> >>>>> Notice: 0: temporarily ALLOW empty credentials
> >>>>> Notice: 0: Using dlopen version of LCAS
> >>>>> Notice: 0: lcasmod_name = /opt/glite/lib/lcas.mod
> >>>>> LCAS 0: 2007-06-11.11:03:57.318046.0000029408.0000000218 :
> >>>>> LCAS 7: 2007-06-11.11:03:57.318046.0000029408.0000000218 :
> >>>>> Initialization LCAS version 1.3.1
> >>>>> LCAS 0: 2007-06-11.11:03:57.318046.0000029408.0000000218 :
> >>>>> lcas.mod-lcas_init(): Reading LCAS database
> >> /opt/glite/etc/lcas/lcas.db
> >>>>> LCAS 0: 2007-06-11.11:03:57.318046.0000029408.0000000218 :
> >>>>> LCAS 5:
> 2007-06-11.11:03:57.318046.0000029408.0000000218 : LCAS
> >>>>> authorization request
> >>>>> LCAS 0: 2007-06-11.11:03:57.318046.0000029408.0000000218 :
> >>>>> lcas.mod-lcas_run_va(): user is
> >>>>> /O=dutchgrid/O=users/O=philips-natlab/CN=Serge Vrijaldenhoven
> >>>>> LCAS 0: 2007-06-11.11:03:57.318046.0000029408.0000000218:
> >>>> lcas_userban.mod-plugin_confirm_authorization(): checking
> >> banned users
> >>>>> in /opt/glite/etc/lcas/ban_users.db
> >>>>> LCAS 0: 2007-06-11.11:03:57.318046.0000029408.0000000218 :
> >>>>> lcas.mod-lcas_run_va(): authorization granted by plugin
> >>>>> /opt/glite/lib/modules/lcas_userban.mod
> >>>>> LCAS 0: 2007-06-11.11:03:57.318046.0000029408.0000000218:
> >>>> lcas_plugin_voms-plugin_confirm_authorization_from_x509():
> >> Did not find
> >>>>> a matching VO entry in the authorization file
> >>>>> LCAS 0: 2007-06-11.11:03:57.318046.0000029408.0000000218:
> >>>> lcas_plugin_voms-plugin_confirm_authorization_from_x509():
> >> voms plugin
> >>>>> failed
> >>>>> LCAS 0: 2007-06-11.11:03:57.318046.0000029408.0000000218 :
> >>>>> lcas.mod-lcas_run_va(): authorization failed for plugin
> >>>>> /opt/glite/lib/modules/lcas_voms.mod
> >>>>> LCAS 0: 2007-06-11.11:03:57.318046.0000029408.0000000218 :
> >>>>> lcas.mod-lcas_run_va(): failed
> >>>>> Failure: LCAS failed authorization.
> >>>>> Failure: LCAS failed authorization.
> >>>>> -----------------------------------------
> >>>>>
> >>>>>
> >>>>>
> >>>>> /var/log/glite/gatekeeper.log (proxy without voms extension):
> >>>>> -----------------------------------------
> >>>>> LCAS 7: 2007-06-11.13:32:10.152588.0000029408.0000000229 :
> >>>>> Initialization LCAS version 1.3.1
> >>>>> LCAS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229 :
> >>>>> lcas.mod-lcas_init (): Reading LCAS database
> >> /opt/glite/etc/lcas/lcas.db
> >>>>> LCAS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229 :
> >>>>> LCAS 5:
> 2007-06-11.13:32:10.152588.0000029408.0000000229 : LCAS
> >>>>> authorization request
> >>>>> LCAS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229 :
> >>>>> lcas.mod-lcas_run_va(): user is
> >>>>> /O=dutchgrid/O=users/O=philips-natlab/CN=Serge Vrijaldenhoven
> >>>>> LCAS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229:
> >>>> lcas_userban.mod-plugin_confirm_authorization(): checking
> >> banned users
> >>>>> in /opt/glite/etc/lcas/ban_users.db
> >>>>> LCAS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229 :
> >>>>> lcas.mod-lcas_run_va(): authorization granted by plugin
> >>>>> /opt/glite/lib/modules/lcas_userban.mod
> >>>>> LCAS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229:
> >>>> lcas_plugin_voms-plugin_confirm_authorization_from_x509():
> >> voms plugin
> >>>>> succeeded
> >>>>> LCAS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229 :
> >>>>> lcas.mod-lcas_run_va(): authorization granted by plugin
> >>>>> /opt/glite/lib/modules/lcas_voms.mod
> >>>>> LCAS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229 :
> >>>>> lcas.mod-lcas_run_va(): succeeded
> >>>>> LCAS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229 :
> >>>>> LCAS 7:
> >> 2007-06-11.13:32:10.152588.0000029408.0000000229 : Termination
> >>>>> LCAS
> >>>>> Notice: 0: temporarily ALLOW empty credentials
> >>>>> Notice: 0: Using dlopen version of LCMAPS
> >>>>> Notice: 0: lcmapsmod_name = /opt/glite/lib/lcmaps.mod
> >>>>> LCMAPS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229 :
> >>>>> LCMAPS 7: 2007-06-11.13:32:10.152588.0000029408.0000000229 :
> >>>>> Initialization LCMAPS version 1.3.6
> >>>>> LCMAPS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229 :
> >>>>> lcmaps.mod-startPluginManager(): Reading LCMAPS database
> >>>>> /opt/glite/etc/lcmaps/lcmaps.db
> >>>>> LCMAPS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229 :
> >>>>> lcmaps.mod-get_procsymbol(): dlsym error:
> >> /opt/glite/lib/lcmaps.mod:
> >>>>> undefined symbol: plugin_verify
> >>>>> LCMAPS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229 :
> >>>>> lcmaps.mod-PluginInit(): no "plugin_verify()" method found in
> >>>>> /opt/glite/lib/modules/lcmaps_plugin_example.mod: old
> >> style plugin
> >>>>> LCMAPS 5:
> >> 2007-06-11.13:32:10.152588.0000029408.0000000229 : LCMAPS
> >>>>> credential mapping request
> >>>>> LCMAPS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229 :
> >>>>> lcmaps.mod-runPlugin(): found plugin
> >>>>> /opt/glite/lib/modules/lcmaps_voms.mod
> >>>>> LCMAPS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229 :
> >>>>> lcmaps.mod-runPlugin (): running plugin
> >>>>> /opt/glite/lib/modules/lcmaps_voms.mod
> >>>>> LCMAPS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229:
> >>>> lcmaps_plugin_voms-plugin_run(): VOMS extensions missing from
> >>>>> certificate (failure)!
> >>>>> LCMAPS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229:
> >>>> lcmaps_plugin_voms-plugin_run(): voms plugin failed
> >>>>> LCMAPS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229 :
> >>>>> lcmaps.mod-runPlugin(): found plugin
> >>>>> /opt/glite/lib/modules/lcmaps_localaccount.mod
> >>>>> LCMAPS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229 :
> >>>>> lcmaps.mod-runPlugin(): running plugin
> >>>>> /opt/glite/lib/modules/lcmaps_localaccount.mod
> >>>>> LCMAPS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229:
> >>>> lcmaps_plugin_localaccount-plugin_run(): localaccount
> plugin failed
> >>>>> LCMAPS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229 :
> >>>>> lcmaps.mod-runPlugin(): found plugin
> >>>>> /opt/glite/lib/modules/lcmaps_poolaccount.mod
> >>>>> LCMAPS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229 :
> >>>>> lcmaps.mod-runPlugin (): running plugin
> >>>>> /opt/glite/lib/modules/lcmaps_poolaccount.mod
> >>>>> LCMAPS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229:
> >>>> lcmaps_plugin_poolaccount-plugin_run(): poolaccount plugin failed
> >>>>> LCMAPS 0: 2007-06-11.13 :32:10.152588.0000029408.0000000229 :
> >>>>> lcmaps.mod-runPlugin(): found plugin
> >>>>> /opt/glite/lib/modules/lcmaps_voms.mod
> >>>>> LCMAPS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229 :
> >>>>> lcmaps.mod-runPlugin(): running plugin
> >>>>> /opt/glite/lib/modules/lcmaps_voms.mod
> >>>>> LCMAPS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229:
> >>>> lcmaps_plugin_voms-plugin_run(): VOMS extensions missing from
> >>>>> certificate (failure)!
> >>>>> LCMAPS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229:
> >>>> lcmaps_plugin_voms-plugin_run(): voms plugin failed
> >>>>> LCMAPS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229 :
> >>>>> lcmaps.mod-runPlugin(): found plugin
> >>>>> /opt/glite/lib/modules/lcmaps_poolaccount.mod
> >>>>> LCMAPS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229 :
> >>>>> lcmaps.mod-runPlugin (): running plugin
> >>>>> /opt/glite/lib/modules/lcmaps_poolaccount.mod
> >>>>> LCMAPS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229:
> >>>> lcmaps_plugin_poolaccount-plugin_run(): poolaccount plugin failed
> >>>>> LCMAPS 0: 2007-06-11.13 :32:10.152588.0000029408.0000000229 :
> >>>>> lcmaps.mod-runPlugin(): found plugin
> >>>>> /opt/glite/lib/modules/lcmaps_localaccount.mod
> >>>>> LCMAPS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229 :
> >>>>> lcmaps.mod-runPlugin(): running plugin
> >>>>> /opt/glite/lib/modules/lcmaps_localaccount.mod
> >>>>> LCMAPS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229:
> >>>> lcmaps_plugin_localaccount-plugin_run(): localaccount
> plugin failed
> >>>>> LCMAPS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229 :
> >>>>> lcmaps.mod-runPlugin (): found plugin
> >>>>> /opt/glite/lib/modules/lcmaps_voms.mod
> >>>>> LCMAPS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229 :
> >>>>> lcmaps.mod-runPlugin(): running plugin
> >>>>> /opt/glite/lib/modules/lcmaps_voms.mod
> >>>>> LCMAPS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229:
> >>>> lcmaps_plugin_voms-plugin_run(): VOMS extensions missing from
> >>>>> certificate (failure)!
> >>>>> LCMAPS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229:
> >>>> lcmaps_plugin_voms-plugin_run(): voms plugin failed
> >>>>> LCMAPS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229 :
> >>>>> lcmaps.mod-runPlugin(): found plugin
> >>>>> /opt/glite/lib/modules/lcmaps_poolaccount.mod
> >>>>> LCMAPS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229 :
> >>>>> lcmaps.mod-runPlugin(): running plugin
> >>>>> /opt/glite/lib/modules/lcmaps_poolaccount.mod
> >>>>> LCMAPS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229:
> >>>> lcmaps_plugin_poolaccount-plugin_run(): poolaccount plugin failed
> >>>>> LCMAPS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229 :
> >>>>> lcmaps.mod-runPlugin(): found plugin
> >>>>> /opt/glite/lib/modules/lcmaps_localaccount.mod
> >>>>> LCMAPS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229 :
> >>>>> lcmaps.mod-runPlugin (): running plugin
> >>>>> /opt/glite/lib/modules/lcmaps_localaccount.mod
> >>>>> LCMAPS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229:
> >>>> lcmaps_plugin_localaccount-plugin_run(): localaccount
> plugin failed
> >>>>> LCMAPS 0: 2007-06-11.13 :32:10.152588.0000029408.0000000229 :
> >>>>> lcmaps.mod-runPluginManager(): Error running evaluation manager
> >>>>> LCMAPS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229 :
> >>>>> lcmaps.mod-lcmaps_run() error: could not run plugin manager
> >>>>> LCMAPS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229 :
> >>>>> lcmaps.mod-lcmaps_run(): failed
> >>>>> LCMAPS 7:
> >> 2007-06-11.13:32:10.152588.0000029408.0000000229 : Termination
> >>>>> LCMAPS
> >>>>> LCMAPS 0: 2007-06-11.13:32:10.152588.0000029408.0000000229 :
> >>>>> lcmaps.mod-lcmaps_term(): terminating
> >>>>> Failure: LCMAPS failed user mapping.
> >>>>> Failure: LCMAPS failed user mapping.
> >>>>> -----------------------------------------
> >>>>>
> >>>>
> >>>>
> >>>> --
> >>>> Asterios Katsifodimos
> >>>> SA3 Team
> >>>> Cyprus
> >>>> CY-02-CYGRID-CERT
> >>>>
> >>>>
> >>>
> >>> --
> >>> Asterios
> >> --
> >> Kyriakos Ginis
> >> Software Engineering Laboratory
> >> National Technical University of Athens
> >>
>
|