Maarten Litmaath ha scritto:
> Ciao Alessandro,
>
>>> $ uberftp glite-rb-01.cnaf.infn.it
>>> 220 glite-rb-01.cnaf.infn.it GridFTP Server 1.12 GSSAPI type
>>> Globus/GSI wu-2.6.2
>>> (gcc32dbg, 1109600000-42) ready.
>>> 530 No local mapping for Globus ID
>>>
>>>
>> Hi Maarten,
>> I hope to have fixed the problem, can you check if it is working for
>> you?
>
> Well, I now get mapped to an sgm account also without Role=lcgadmin:
>
> $ voms-proxy-info -all
> subject : /DC=ch/DC=cern/OU=Organic
> Units/OU=Users/CN=litmaath/CN=410032/CN=Maarten Litmaath/CN=proxy
> issuer : /DC=ch/DC=cern/OU=Organic
> Units/OU=Users/CN=litmaath/CN=410032/CN=Maarten Litmaath
> identity : /DC=ch/DC=cern/OU=Organic
> Units/OU=Users/CN=litmaath/CN=410032/CN=Maarten Litmaath
> type : proxy
> strength : 512 bits
> path : /tmp/x509up_u15876
> timeleft : 11:57:29
> === VO ops extension information ===
> VO : ops
> subject : /DC=ch/DC=cern/OU=Organic
> Units/OU=Users/CN=litmaath/CN=410032/CN=Maarten Litmaath
> issuer : /DC=ch/DC=cern/OU=computers/CN=voms.cern.ch
> attribute : /ops/Role=NULL/Capability=NULL
> timeleft : 11:57:29
> $ uberftp glite-rb-01.cnaf.infn.it pwd
> 220 glite-rb-01.cnaf.infn.it GridFTP Server 1.12 GSSAPI type
> Globus/GSI wu-2.6.2 (gcc32dbg, 1109600000-42) ready.
> 230 User sgmops002 logged in.
> /home/sgmops002
uhm...in the /etc/grid-security/grid-mapfile you are mapped to sgmops,
but from the logs I don't seem to see any lcmaps failure and the
consequently use of the grid-mapfile
and I have the same "problem" (I'm mapped to sgmdteam in the
grid-mapfile) in our production WMSs too:
[paolini@lcg-ui paolini]$ uberftp glite-rb-01.cnaf.infn.it pwd
220 glite-rb-01.cnaf.infn.it GridFTP Server 1.12 GSSAPI type Globus/GSI
wu-2.6.2 (gcc32dbg, 1109600000-42) ready.
230 User sgmdteam001 logged in.
257 "/home/sgmdteam001" is current directory.
[paolini@lcg-ui paolini]$ uberftp glite-rb-00.cnaf.infn.it pwd
220 glite-rb-00.cnaf.infn.it GridFTP Server 1.12 GSSAPI type Globus/GSI
wu-2.6.2 (gcc32dbg, 1109600000-42) ready.
230 User dteamsgm002 logged in.
257 "/home/dteamsgm002" is current directory.
[paolini@lcg-ui paolini]$ uberftp egee-wms-01.cnaf.infn.it pwd
220 egee-wms-01.cnaf.infn.it GridFTP Server 1.12 GSSAPI type Globus/GSI
wu-2.6.2 (gcc32dbg, 1109600000-42) ready.
230 User sgmdteam001 logged in.
257 "/home/sgmdteam001" is current directory.
I've launched the previous command as infngrid user, so really something
of LCAS & LCMAPS is not working...
the same thing is happening on CERN WMSs either with a dteam or infngrid
voms proxy, for example
[paolini@lcg-ui paolini]$ uberftp lxb2059.cern.ch pwd
220 lxb2059.cern.ch GridFTP Server 1.12 GSSAPI type Globus/GSI wu-2.6.2
(gcc32dbg, 1109600000-42) ready.
230 User dteamsgm001 logged in.
257 "/home/dteamsgm001" is current directory.
[paolini@lcg-ui paolini]$ uberftp wms105.cern.ch pwd
220 wms105.cern.ch GridFTP Server 1.12 GSSAPI type Globus/GSI wu-2.6.2
(gcc32dbg, 1109600000-42) ready.
230 User dteamsgm logged in.
257 "/home/grid/dteamsgm" is current directory.
the same behaviour happens on RBs that are not voms compliants
]$ uberftp egee-rb-01.cnaf.infn.it pwd
220 egee-rb-01.cnaf.infn.it GridFTP Server 1.12 GSSAPI type Globus/GSI
wu-2.6.2 (gcc32dbg, 1109600000-42) ready.
230 User sgmdteam001 logged in.
257 "/home/sgmdteam001" is current directory.
So this erroneus mapping on the WMSs is an expected thing?
cheers,
Alessandro
--
Dr. Alessandro Paolini
INFN - CNAF
Viale Berti Pichat 6/2
40127 Bologna
Italy
tel: +39 051 6092723
fax: +39 051 6092746
ICQ: 192172027
skype: alex.paolini
**********************
"credo nel potere del riso e delle lacrime"
"come antidoto all'odio ed al terrore"
"un giorno senza un sorriso"
"è un giorno perso" >>> Charlie Chaplin
|