Maybe its an idea to let DGAS rerun the credentials through LCMAPS in a
dryrun/verify mode to determine to which poolaccount a given set of
credentials is mapped. The answer out of that run always matches with
how LCMAPS has made the already made mapping.
2cts
Antun Balaz wrote:
>> The LCMAPS grid-mapfile indeed contains the VO in the VOMS FQAN
>> string associated with some static account or pool account prefix.
>>
>> It is called $EDG_LOCATION/etc/lcmaps/gridmapfile on the LCG-CE and
>> /etc/grid-security/grid-mapfile on the gLite CE.
>> The formats of their entries differ slightly. For examples:
>>
>> "/VO=ops/GROUP=/ops/ROLE=lcgadmin" opssgm
>>
>> "/ops/Role=lcgadmin/Capability=NULL" opssgm
>
> So no need for any additional conf files - these are sufficient for YAIM
> function that configures apel-pbs-parser...
>
> Regards, Antun
>
>
> ------- End of Original Message -------
|