On Nov 19, 2012, at 16:33 , Maarten Litmaath wrote:
> Hi Winnie,
>
>> I'm not completely sure how to follow thru emi-1 cream ce logs to find out
>> the exact spot where this cms software manager is rejected (a recipe
>> would be welcome, he gets mapped to cmssgm), but I had thought maybe he
>> couldn't be properly mapped to a pool account due to incorrect permissions
>> on gridmapdir.
>
> If the SW manager is mapped to a static account "cmssgm", the gridmapdir
> does not enter into the game, as it is only relevant for pool accounts.
as long as nobody runs a security service challenge (or anything similar but without the involvement of the security teams) on the SGM accounts, should be ok.
JT
|