Hi Gonçalo,
> I have a situation where WMS in mapping a user in one pool account via globus-gridftp and in
> another via wmproxy.
>
> Jun 2 16:58:55 wms01 glite_wms_wmproxy_server: submission from ui1.egee.cesnet.cz,
> DN=/DC=es/DC=irisgrid/O=ugr/CN=mdserrano, FQAN=/auger/Role=SoftwareManager/Capability=NULL,
> userid=3050056 for jobid=https://wms01.ncg.ingrid.pt:9000/_X3gcUtlQBNxElj4ckIGkw
> Jun 2 16:58:56 wms01 globus-gridftp-server[15516]: LCAS authorization request
> Jun 2 16:58:56 wms01 globus-gridftp-server[15516]:
> lcas_userban.mod-plugin_confirm_authorization(): checking banned users in /etc/lcas/ban_users.db
> Jun 2 16:58:56 wms01 globus-gridftp-server[15516]:
> lcas_plugin_voms-plugin_confirm_authorization_from_x509(): voms plugin succeeded
> Jun 2 16:58:56 wms01 globus-gridftp-server[15516]: lcas.mod-lcas_run_va(): succeeded
> Jun 2 16:58:56 wms01 globus-gridftp-server[15516]: llgt_run_lcas: The user is authorized by
> LCAS
> Jun 2 16:58:56 wms01 globus-gridftp-server[15516]: Termination LCAS
> Jun 2 16:58:56 wms01 globus-gridftp-server[15516]: Mapping service "LCMAPS" returned local user
> "augersgm"
>
> # id augersgm
> uid=3059000(augersgm) gid=3050000(auger) groups=3050000(auger)
>
> This has been seen only for a single user and in a special situation where he invokes the
> Role=SoftwareManager. Other roles are working fine for the same user.
You cannot use static accounts on a WMS:
https://savannah.cern.ch/bugs/index.php?36669
|