Burke, S (Stephen) wrote:
>>Correction: the mapping may have failed already early on.
>
>
> But then it should never have got to the point of calling gridftp, it
> should have been rejected by the wmproxy - unless there's an
> inconsistent VO configuration between them.
Indeed. There is room for inconsistencies between them:
- WMProxy and GridFTP use different LCMAPS configuration files,
viz. /opt/glite/etc/lcmaps/lcmaps.db{,.gridftp}.
- WMProxy (rather the httpd) needs a GridSite GACL file
(/opt/glite/etc/glite_wms_wmproxy.gacl).
- WMProxy (rather the httpd) needs the VOMS server certificates,
whereas the GridFTP server will use *.lsc files if present,
else fall back on the certificates.
|