Hi Mario,
yes, this means that Argus works fine now. To obtain a mapping you have
to add an obligation to your policy. You can find the documentation of
the pap-admin here:
https://twiki.cern.ch/twiki/bin/view/EGEE/AuthZPAPCLI#Command_add_obligation_since_ver
and the documentation about currently supported obligations here:
https://twiki.cern.ch/twiki/bin/view/EGEE/SimplifiedPolicyLanguage#The_obligation_stanza
cheers,
Joël
On 24.08.11 21:34, Mario Kadastik wrote:
> Hi All,
>
> ok after fixing this stupid bug with http -> https (I also had that in site-info.def, hence the CREAM failure). I'm now getting the following from pepcli:
>
> [root@mercury argus]# pepcli -p https://mercury.hep.kbfi.ee:8154/authz -c ~/x509up_u101 -r myCE -a myA -t 60 -x --capath /etc/grid-security/certificates/ --cert /etc/grid-security/hostcert.pem --key /etc/grid-security/hostkey.pem
> Resource: myCE
> Decision: Permit
> No Obligation received
>
> which I assume is kinda good because I got the Permit, but kinda bad because I didn't get the mapping. Also, this seems to bother CREAM:
>
> 24 Aug 2011 22:33:33,504 ERROR org.glite.ce.commonj.authz.AuthorizationHandler (AuthorizationHandler.java:308) - (TP-Processor23) Missing property local.user.id
> 24 Aug 2011 22:33:35,081 ERROR org.glite.ce.commonj.authz.argus.ArgusPEP (ArgusPEP.java:241) - (TP-Processor17) Missing property local.user.id
> java.lang.IllegalArgumentException: Missing property local.user.id
>
> ideas?
>
> Mario Kadastik, PhD
> Researcher
>
> ---
> "Physics is like sex, sure it may have practical reasons, but that's not why we do it"
> -- Richard P. Feynman
--
SWITCH
Serving Swiss Universities
--------------------------
Joël Casutt, Informatics Engineer, Middleware
Werdstrasse 2, P.O. Box, 8021 Zurich, Switzerland
email: [log in to unmask] phone: +41 44 268 1573
|