 |
 |
LHC Computer Grid - Rollout > [mailto:[log in to unmask]] On Behalf Of > Kyriakos G. Ginis said: > I think this link is a bit outdated, since AFAIK in the > current LCG version the > DN <--> pool acount mapping is handled by LCMAPS. On your CE > or SE, try > > man lcmaps_poolaccount.mod I think the algorithm is the same. One consequence seems to be that you'd better not have pool account prefixes where one is an initial substring of the other ... indeed if Jeff is using pool accounts for sgms maybe he'd better check the mapping, on the face of it a user mapped to .dteam might pick up a pool account called dteamsgm01 with enhanced privileges ... Stephen