On Fri, 5 Jun 2009 21:48:04 +0200
Christoph Wissing wrote:
> Hi Arnau, hi Maarten,
Hi Christoph,
[...]
> > Confirmed: the FQAN used is /cms/dcms/Role=NULL.
>
> this partly the fault of the German CMS community. We advertise to
> prepare the proxy like this, because you will gain some higher
> priority on German sites.
but no benefits in other sites out of German, am I right? cause we have
no special conf for that fqan.
> Since we want unconfigured VOMS groups to be mapped to ordenary users,
> we have a "catch all line" in the grid-mapfile at the end of each VO
> block: [CMS example] "/cms/*/Role=NULL/Capability=NULL" .cmsusr
> "/cms/*" .cmsusr
I planned to add the "catch all line" in near future. but I felt sure
cause our contact person always tell us what kind of role we'll
receive.
> In addition we map DNs only to ordenary users of the VOs just to avoid
> the problems you described.
>
> CMS SAM tests and software deployment is always send using proper VOMS
> roles, so you might want to change it. Sorry I do not know how to set
> it up using YAIM.
don't get last part about CMS SAM tests :-( sorry. AFAIK we have no
problem with real sgm jobs.
> Cheers, Christoph
cheers,
Arnau
|