Hi Christos, Todd,
>> In rocwms grid-mapfile, the mapping rule is correct:
You cannot use static accounts on the WMS. See the WMS known issues:
http://cern.ch/glite/packages/R3.1/deployment/glite-WMS/glite-WMS-known-issues.asp
>> "/ops/Role=lcgadmin/Capability=NULL" opssgm
>> "/ops/Role=lcgadmin" opssgm
>> "/ops/Role=NULL/Capability=NULL" .ops
>> "/ops" .ops
>
> This mapping rule is not correct actually. There is no mapping match:
> /ops/ROC/AsiaPacific
He did not have that as his primary FQAN.
Still, wildcards are a good idea:
> You 'll have to either add something like:
> "/ops/*" .ops
> To map every ops role OR (and this is what i would propose):
> "/ops/ROC/AsiaPacific" .ops
>
> To match your ROC and only this.
>
> I'm not sure how you could do this via YAIM but i bet that it should be just a new line at your groups.conf file with the relevant information.
You either can add the desired wildcard lines to groups.conf,
or let YAIM do that automatically by defining VO_OPS_MAP_WILDCARDS
(and similar for other VOs as desired):
https://twiki.cern.ch/twiki/bin/view/LCG/YaimGuide400#groups_conf
|