Hi Sean,

the messages you are seeing are not from gLExec calling LCAS/LCMAPS but
from the gridftp server calling LCAS/LCMAPS, via the
lcas-lcmaps-gt4-interface.
For the UMD-1 version of lcas-lcmaps-gt4-interface, you can't yet
completely solve it. in any case, you need to set LCAS_LOG_FILE and
LCMAPS_LOG_FILE env variables in the gridftp server configuration,
typically either /etc/gridftp.conf or
/etc/sysconfig/globus-gridftp-server 
That will leave some messages from the lcas-lcmaps-gt4-interface itself.

In the /etc/gridftp.conf they should start with a $ sign as in
$LCMAPS_LOG_FILE /var/log/...
in the /etc/sysconfig/globus-gridftp-server as in
export LCMAPS_LOG_FILE /var/log/...
Probably YAIM can/should do that for you...

In the UMD-2 version of the lcas-lcmaps-gt4-interface, you should be
able to at least specify a custom log facility for the remaining
messages, via a variable LLGT_LOG_FACILITY. The latest version, to be
released via IGE into UMD, lcas-lcmaps-gt4-interface-0.2.5 will allow
you to log directly to file. For that you would then need to set an
environment variable LLGT_LOG_FILE with the correct value.

Hope this helps, if you have further questions, please let us know.

    Best regards,   
    Mischa

On Fri, Nov 23, 2012 at 07:51:17PM +1100, Sean Crosby wrote:
> Hi all,
> 
> The /var/log/messages on our UMD-1 CREAM-CE is always full of messages like
> this
> 
> Nov 23 08:48:39 agcream1 l_l_gt4[25104]: LCMAPS CRED FINAL:
> FQAN:"/atlas/Role=NULL/Capability=NULL"->mapped group:2000(atlas)
> Nov 23 08:48:39 agcream1 l_l_gt4[25104]:
> 2012-11-23.08:48:39.0000025104.0000000000 : lcmaps.mod-lcmaps_run():
> succeeded
> Nov 23 08:48:39 agcream1 l_l_gt4[25104]: Execution of LCMAPS Succeeded.
> Nov 23 08:48:39 agcream1 l_l_gt4[25104]: Successfull Authorization and
> Mapping done
> Nov 23 08:48:39 agcream1 l_l_gt4[25104]: Mapping service "LCMAPS" returned
> local user "pilatl08"
> Nov 23 08:48:40 agcream1 l_l_gt4[25128]:
> Nov 23 08:48:40 agcream1 l_l_gt4[25128]: Initialization LCAS version 1.3.13
> Nov 23 08:48:40 agcream1 l_l_gt4[25128]: LCAS authorization request
> Nov 23 08:48:40 agcream1 l_l_gt4[25128]:
> #011lcas_userban.mod-plugin_confirm_authorization(): checking banned users
> in /etc/lcas/ban_users.db
> Nov 23 08:48:40 agcream1 l_l_gt4[25128]:
> #011lcas_plugin_voms-plugin_confirm_authorization_from_x509(): voms plugin
> succeeded
> Nov 23 08:48:40 agcream1 l_l_gt4[25128]: lcas.mod-lcas_run_va(): succeeded
> Nov 23 08:48:40 agcream1 l_l_gt4[25128]: run_lcas: The user is authorized
> by LCAS
> Nov 23 08:48:40 agcream1 l_l_gt4[25128]: Termination LCAS
> Nov 23 08:48:40 agcream1 l_l_gt4[25128]:
> 2012-11-23.08:48:40.0000025128.0000000000 :
> #011lcmaps_plugin_voms_localgroup-plugin_run(): voms_localgroup plugin
> succeeded
> Nov 23 08:48:40 agcream1 l_l_gt4[25128]:
> #011lcmaps_plugin_voms_localaccount-plugin_run(): Could not find a VOMS
> localaccount in /etc/grid-security/grid-mapfile (failure)
> Nov 23 08:48:40 agcream1 l_l_gt4[25128]:
> 2012-11-23.08:48:40.0000025128.0000000000 :
> #011lcmaps_plugin_voms_localaccount-plugin_run(): voms_localaccount plugin
> failed
> Nov 23 08:48:40 agcream1 l_l_gt4[25128]:
> 2012-11-23.08:48:40.0000025128.0000000000 :
> #011lcmaps_plugin_voms_poolaccount-plugin_run(): voms_poolaccount plugin
> succeeded
> Nov 23 08:48:40 agcream1 l_l_gt4[25128]:
> lcmaps_plugin_posix_enf-plugin_run(): post-id-switch:
> uid=55208(pilatl08),euid=55208(pilatl08),gid=1310(atlaspil),egid=1310(atlaspil),sgid=2000(atlas)
> Nov 23 08:48:40 agcream1 l_l_gt4[25128]:
> 2012-11-23.08:48:40.0000025128.0000000000 :
> lcmaps_plugin_posix_enf-plugin_run(): posix_enf plugin succeeded
> Nov 23 08:48:40 agcream1 l_l_gt4[25128]: LCMAPS CRED FINAL:
> DN:"/DC=ch/DC=cern/OU=Organic
> Units/OU=Users/CN=atlpilo1/CN=614260/CN=Robot: ATLAS Pilot1"->mapped
> uid:'55208',pgid:'1310',sgid:'2000'
> Nov 23 08:48:40 agcream1 l_l_gt4[25128]: LCMAPS CRED FINAL:
> FQAN:"/atlas/Role=pilot/Capability=NULL"->mapped group:1310(atlaspil)
> Nov 23 08:48:40 agcream1 l_l_gt4[25128]: LCMAPS CRED FINAL:
> FQAN:"/atlas/Role=NULL/Capability=NULL"->mapped group:2000(atlas)
> Nov 23 08:48:40 agcream1 l_l_gt4[25128]:
> 2012-11-23.08:48:40.0000025128.0000000000 : lcmaps.mod-lcmaps_run():
> succeeded
> Nov 23 08:48:40 agcream1 l_l_gt4[25128]: Execution of LCMAPS Succeeded.
> Nov 23 08:48:40 agcream1 l_l_gt4[25128]: Successfull Authorization and
> Mapping done
> Nov 23 08:48:40 agcream1 l_l_gt4[25128]: Mapping service "LCMAPS" returned
> local user "pilatl08"
> 
> I was wondering what config file do I need to change to direct these to a
> specific file, and not syslog? I know I can write an rsyslog redirector to
> make to go to a file, but just wondering if it is possible to change the
> service itself to write to a file. I've already changed /etc/glexec.conf to
> go to a file, and not syslog, and this has made glexec write to the files
> specified, but these messages still persist in /var/log/messages
> 
> Thanks,
> Sean
> 
> -- 
> Sean Crosby
> Research Computing System Administrator and Developer
> ARC Centre of Excellence for Particle Physics at the Terascale
> School of Physics | University of Melbourne Vic 3010
> T: +61 3 8344 8093

-- 
Nikhef                      Room  H155
Science Park 105            Tel.  +31-20-592 5102
1098 XG Amsterdam           Fax   +31-20-592 5155
The Netherlands             Email [log in to unmask]
  __ .. ... _._. .... ._  ... ._ ._.. ._.. .._..