Hi all,
In this case, I'm enabling some regional VO using yaim, but my mapping
is not correct, I always get a dteam account, not the same that I get
when I use my dteam VOMS, but a dteam.
I followed VO's instructions, and it's like the normal procedure I
do when I enable a new VO / Role:
1.-) site-info.def
add VO_$VO_VOMSES
* I think this comes from an old bug, but as I have all my VOMSES var
there...
2.-) vo.d
copy VO conf file provided by regional VO
3.-) nodes/ce05.pic.es
add $VO to VO and enable it in some queue.
4.-) modify users.conf/groups.conf
do a coherent map.
reconfig my CE.
Now I try to understand why my mapping is not fine, so, my first test
is sending globus-job-run from my ui to the ce.
This is a recurrent question (in my case) and I've never found a
good guide to follow where I could find what decision (and why) is
taken when authenticating an user. What log do I have to check
(globs-gatekeep when doing globus-job-run, gridftp when uberftp and
grid-jobmap_* when a submit) but now, how may I know what mapping is
been done and why? what log shows that info? how may I interpret that?
TIA,
Arnau
|