On Wed, 17 Mar 2010 20:16:32 +0100
Maarten Litmaath wrote:
> Hola Arnau,
Hola!
> >> was /opt/lcg/sbin/dgas-add-record not setuid edguser at that time?
> > If so, can't imagine who/what could change file perms.
>
> It would have had to be some "freak" chmod or so...
>
> The rpm itself does not contain the setuid bit, but it was installed
> much earlier, as can be deduced from the other file it contains:
>
> $ globus-job-run ce05.pic.es /bin/ls -lc /opt/lcg/sbin/jm-dgas-helper
> -rwxr-xr-x 1 root root 1147 Jul 16 2008 /opt/lcg/sbin/jm-dgas-helper
I don't remeber myself chmoding lcg's files, or watching those
files... will check history, scripts, etc...
> >> Was the CE reconfigured around Jan 21-22?
> >
> > No ref to those dates in yaimlog:
> >
> > grep Feb /opt/glite/yaim/log/yaimlog
>
> Please grep for Jan!
:-S
Thu Jan 21 16:49:34 CET 2010 : /opt/glite/yaim/bin/yaim
site-info.def date: Jan 21 17:08 /opt/localconf/gLite3.1/yaim/pic/site-info.def
Fri Jan 22 11:26:28 CET 2010 : /opt/glite/yaim/bin/yaim
site-info.def date: Jan 21 17:08 /opt/localconf/gLite3.1/yaim/pic/site-info.def
> > Will check if ALL ce05 entries are missing. If yes, your hypothesis
> > must be right.
>
> Well, I checked the code (which I wrote) and could not come up with
> a better theory...
>
> >> Do you really need to go through that trouble?
> > well, AFAIK I must add those entries to account, what other options
> > do I have?
>
> PIC could report to WLCG that there were ~10k jobs that do not appear
> in the grid-jobmap files and hence not in the accounting.
> Is it really necessary to get those numbers always 100% right?
Will ask...
|