Hi Steve,
just to make sure everyone understands, your setup works because you
don't mount with root-squash (LCMAPS which creates the entries will run
with your effective uid/gid root/glexec). no root-squash is fine for the
gridmapdir and possibly the best solution, just pointing it out...
Cheers,
Mischa
On Thu, Nov 22, 2012 at 05:37:53PM +0000, Stephen Jones wrote:
> Hi Winnie,
>
> We have a not dissimilar working system here. We have three emi2
> CE's, each of which mount a shared NFS gridmapdir. On the NFS
> system, we see this:
>
> [root@mace ~]# ls -lrtd /etc/grid-security/gridmapdir
> drwxrwx--- 2 root root 163840 Nov 22 13:16 /etc/grid-security/gridmapdir
>
> On the emi2 CE's we see this:
> [root@hepgrid5 gridmapdir]# ls -lrtd /etc/grid-security/gridmapdir
> drwxrwx--- 2 root root 163840 Nov 22 13:16 /etc/grid-security/gridmapdir
>
> Regarding glexec, we see this (on the CEs):
>
> [root@hepgrid5 gridmapdir]# ls -lrt /usr/sbin/glexec
> -r-sr-sr-x 1 root glexec 147456 May 16 2012 /usr/sbin/glexec
> [root@hepgrid5 gridmapdir]#
>
> And this on one CE:
> [root@hepgrid5 etc]# grep glexec /etc/passwd /etc/group
> /etc/passwd:glexec:x:112:201:gLExec user account to be used with
> /usr/sbin/glexec:/:/sbin/nologin
> /etc/group:glexec:x:201:
>
> And this on another CE:
> [root@hepgrid10 ~]# grep glexec /etc/passwd /etc/group
> /etc/passwd:glexec:x:107:107:gLExec user account to be used with
> /usr/sbin/glexec:/:/sbin/nologin
> /etc/group:glexec:x:107:
>
>
> And this on the last CE:
> [root@hepgrid6 ~]# grep glexec /etc/passwd /etc/group
> /etc/passwd:glexec:x:111:201:gLExec user account to be used with
> /usr/sbin/glexec:/:/sbin/nologin
> /etc/group:glexec:x:201:
>
> All CE's work OK, AFAICS. The uid/gui numbers are no identical across CEs.
>
> Steve
>
>
>
>
>
> --
> Steve Jones [log in to unmask]
> System Administrator office: 220
> High Energy Physics Division tel (int): 42334
> Oliver Lodge Laboratory tel (ext): +44 (0)151 794 2334
> University of Liverpool http://www.liv.ac.uk/physics/hep/
--
Nikhef Room H155
Science Park 105 Tel. +31-20-592 5102
1098 XG Amsterdam Fax +31-20-592 5155
The Netherlands Email [log in to unmask]
__ .. ... _._. .... ._ ... ._ ._.. ._.. .._..
|