Hola Juanjo,
> I want to create a poolaccounts for atlas produccion, So:
> I have created a poolaccounts atlprodxxx (with groups atlprod and atlas)
> and the I show some files:
>
> 1. /opt/edg/etc/edg-mkgridmap.conf
>
> group vomss://voms.cern.ch:8443/voms/atlas?/atlas/Role=production .atlprod
>
>
> 2. /opt/glite/etc/lcmaps/gridmapfile
>
> # atlas
> "/atlas/Role=lcgadmin" atls
> "/atlas/Role=lcgadmin/Capability=NULL" atls
> "/atlas/Role=production" .atlprod
> "/atlas/Role=production/Capability=NULL" .atlprod
> "/atlas" .atl
> "/atlas/Role=NULL" .atl
> "/atlas/Role=NULL/Capability=NULL" .atl
>
> 3. /opt/glite/etc/lcmaps/groupmapfile
>
> # atlas
> "/atlas/Role=lcgadmin" atlas
> "/atlas/Role=lcgadmin/Capability=NULL" atlas
> "/atlas/Role=production" atlprod
> "/atlas/Role=production/Capability=NULL" atlprod
> "/atlas" atlas
> "/atlas/Role=NULL" atlas
> "/atlas/Role=NULL/Capability=NULL" atlas
>
> When I submit a job I can see on globus-gatekeeper.log:
>
> [...]
> lcmaps_plugin_voms_poolaccount-plugin_run(): no match (or no poolaccount
> available) for primary group (/atlas/Role=production/Capability=NULL) in
> /opt/glite/etc/lcmaps/gridmapfile (failure)
Were the corresponding entries created in the gridmapdir?
Or: did you rerun yaim?
Did you update users.conf and groups.conf?
In that case this usually is sufficient to enable new accounts on an lcg-CE:
/opt/glite/yaim/bin/yaim -r -s your-site-info.def \
-f config_users -f config_mkgridmap -f config_vomsmap
Your CE should be idle, or else ATLAS production managers may lose jobs.
|