Hi Goncalo,
no, the authentication is not like the CE one.
DPM has its own gridmapfile also with edg-mkgridmap.pl:
/opt/lcg/etc/lcgdm-mapfile
you can look at the cron job
/etc/cron.d/lcgdm-mkgridmap
cheers
alessandra
Gonçalo Borges wrote:
> Hi...
>
> Some issues regarding DPM. Maybe someone can answer my questions
> (posted along the text)...
> I've looked in
>
> https://twiki.cern.ch/twiki/bin/view/LCG/LfcTroubleshooting
>
> and in
>
> https://twiki.cern.ch/twiki/bin/view/LCG/DpmAdminGuide
>
> but didn't find any point explaining how the DPM authentication is
> really done (or it least, I didn't understood what I read :) )
>
>
> 1) These are the versions of the metapackages I'm using for the
> server/client
>
> [root@ui01 ~] rpm -qa | grep UI
> glite-UI-3.1.25-0
>
> [root@se05 ~]# rpm -qa | grep SE
> glite-SE_dpm_disk-3.1.11-0.x86_64
> glite-SE_dpm_mysql-3.1.12-0.x86_64
>
>
> ---*---
>
> 2) This is my proxy-info:
>
> -bash-3.00$ voms-proxy-info --all
> subject : /C=PT/O=LIPCA/O=LIP/OU=Lisboa/CN=Goncalo Borges/CN=proxy
> issuer : /C=PT/O=LIPCA/O=LIP/OU=Lisboa/CN=Goncalo Borges
> identity : /C=PT/O=LIPCA/O=LIP/OU=Lisboa/CN=Goncalo Borges
> type : proxy
> strength : 1024 bits
> path : /tmp/x509up_u266
> timeleft : 11:24:29
> === VO dteam extension information ===
> VO : dteam
> subject : /C=PT/O=LIPCA/O=LIP/OU=Lisboa/CN=Goncalo Borges
> issuer : /DC=ch/DC=cern/OU=computers/CN=voms.cern.ch
> attribute : /dteam/Role=NULL/Capability=NULL
> attribute : /dteam/swe/Role=NULL/Capability=NULL
> attribute : /dteam/swe/lip/Role=NULL/Capability=NULL
> timeleft : 11:24:29
> uri : voms.cern.ch:15004
>
> ---*---
>
> 3) I can perform an lcg-cr perfectly:
>
> -bash-3.00$ lcg-cr -v -d se05.lip.pt -l
> lfn:/grid/dteam/goncalo/teste2.txt file:/home/csys/goncalo/sleep.sh
> Using grid catalog type: lfc
> Using grid catalog : prod-lfc-shared-central.cern.ch
> Using LFN : /grid/dteam/goncalo/teste2.txt
> [BDII] ii02.lip.pt:2170: Warning, no GlueVOInfo information found
> about SE 'se05.lip.pt' (with no tag)
> SE type: SRMv1
> Using SURL :
> srm://se05.lip.pt/dpm/lip.pt/home/dteam/generated/2009-02-26/fileed524aca-f315-4422-afb7-9c0145291ef3
>
> Alias registered in Catalog: lfn:/grid/dteam/goncalo/teste2.txt
> SRM Request Token: 166066
> Source URL: file:/home/csys/goncalo/sleep.sh
> File size: 122
> VO name: dteam
> Destination specified: se05.lip.pt
> Destination URL for copy:
> gsiftp://se05.lip.pt/se05.lip.pt:/dpm1/dteam/2009-02-26/fileed524aca-f315-4422-afb7-9c0145291ef3.166066.0
>
> # streams: 1
> # set timeout to 0 seconds
> 122 bytes 0.21 KB/sec avg 0.21 KB/sec inst
> Transfer took 1020 ms
> Destination URL registered in Catalog:
> srm://se05.lip.pt/dpm/lip.pt/home/dteam/generated/2009-02-26/fileed524aca-f315-4422-afb7-9c0145291ef3
>
> guid:7ed07047-5e04-401b-9267-edb46c2a3646
>
> ---*---
>
> 4) I can perform an lcg-cr requesting VO SWETEST and registering the
> file on DTEAM catalogue (neither LFC or DPM complain about the
> incoherence):
>
> -bash-3.00$ lcg-cr -v --vo swetest -d se05.lip.pt -l
> lfn:/grid/dteam/goncalo/teste3.txt file:/home/csys/goncalo/sleep.sh
> Using grid catalog type: lfc
> Using grid catalog : prod-lfc-shared-central.cern.ch
> Using LFN : /grid/dteam/goncalo/teste3.txt
> [BDII] ii02.lip.pt:2170: Warning, no GlueVOInfo information found
> about SE 'se05.lip.pt' (with no tag)
> SE type: SRMv1
> Using SURL :
> srm://se05.lip.pt/dpm/lip.pt/home/swetest/generated/2009-02-26/filefe631748-d9e5-458c-819f-30920e5371df
>
> Alias registered in Catalog: lfn:/grid/dteam/goncalo/teste3.txt
> SRM Request Token: 166071
> Source URL: file:/home/csys/goncalo/sleep.sh
> File size: 122
> VO name: swetest
> Destination specified: se05.lip.pt
> Destination URL for copy:
> gsiftp://se05.lip.pt/se05.lip.pt:/dpm1/dteam/2009-02-26/filefe631748-d9e5-458c-819f-30920e5371df.166071.0
>
> # streams: 1
> # set timeout to 0 seconds
> 122 bytes 0.13 KB/sec avg 0.13 KB/sec inst
> Transfer took 2030 ms
> Destination URL registered in Catalog:
> srm://se05.lip.pt/dpm/lip.pt/home/swetest/generated/2009-02-26/filefe631748-d9e5-458c-819f-30920e5371df
>
> guid:bbaa307f-3c10-4e82-abd1-c30936175e81
>
> QUESTION 1: I guess that this is only possible because the permissions
> are OK at the LFC level and DPM doesn't recognize that I'm running
> with the DTEAM extension... Is it really like this or do I have
> something incorrectly configured.
>
> ---*---
>
> 5) I have removed myself from the grid-mapfile in the DPM server, and
> tried to perform an lcg-cr as in step 3. I didn't succeed:
>
> -bash-3.00$ lcg-cr -v -d se05.lip.pt -l
> lfn:/grid/dteam/goncalo/teste5.txt file:/home/csys/goncalo/sleep.sh
> Using grid catalog type: lfc
> Using grid catalog : prod-lfc-shared-central.cern.ch
> Using LFN : /grid/dteam/goncalo/teste5.txt
> [BDII] ii02.lip.pt:2170: Warning, no GlueVOInfo information found
> about SE 'se05.lip.pt' (with no tag)
> SE type: SRMv1
> Using SURL :
> srm://se05.lip.pt/dpm/lip.pt/home/dteam/generated/2009-02-26/file596bf6e9-ea45-491e-b6cf-9faf29da1d71
>
> Alias registered in Catalog: lfn:/grid/dteam/goncalo/teste5.txt
> [SE][put] httpg://se05.lip.pt:8443/srm/managerv1: CGSI-gSOAP: Error
> reading token data header: Connection closed
>
> lcg_cr: Operation now in progress
>
> QUESTION 2: I though the authentication in DPM server was done as in
> CE but it seems it is done still base on grid-mapfile (if I have
> everything configuredOK!). Is it really like this?
>
> Cheers
> Gonçalo
--
Alessandra Forti - NorthGrid Technical Coordinator
http://www.hep.manchester.ac.uk/computing/tier2
Well you'll still need a tray
|