Print

Print


Hi Olivier,

> I used: [voms-proxy-init --voms dteam:/dteam/uki] since I am a member of 
> that group (http://tinyurl.com/h6v7z). In principle if the 
> /opt/edg/etc/lcmaps/gridmapfile contains a line to map that to dteamsgm, 
> lcmaps should do it.

I didn't read your listing correctly...

 >>> /opt/edg/etc/lcmaps/gridmapfile
 >>>
 >>> "/VO=dteam/GROUP=/dteam/ROLE=lcgadmin/Capability=NULL" dteamsgm
 >>> "/VO=dteam/GROUP=/dteam/uki/ROLE=NULL/Capability=NULL" dteamsgm

are you sure about these 2 lines? I think it goes in order and maps 
people to the first it finds. Try to invert them.

cheers
alessandra

> Cheers, Olivier.
> 
>> cheers
>> alessandra
>>
>>
>> Olivier van der Aa wrote:
>>> Dear All,
>>>
>>>
>>> I would like to understand how I can map the /dteam/uki group to 
>>> dteamsgm using lcmaps. I have modified the groupmapfile and gridmapfile
>>> as follows:
>>>
>>> /opt/edg/etc/lcmaps/groupmapfile
>>>
>>> "/VO=dteam/GROUP=/dteam/uki/ROLE=NULL/Capability=NULL" dteam
>>> "/VO=dteam/GROUP=/dteam/ROLE=lcgadmin/Capability=NULL" dteam
>>> "/VO=dteam/GROUP=/dteam/ROLE=lcgadmin" dteam
>>> "/VO=dteam/GROUP=/dteam/ROLE=production/Capability=NULL" dteam
>>> "/VO=dteam/GROUP=/dteam/ROLE=production" dteam
>>> "/VO=dteam/GROUP=/dteam/Role=NULL/Capability=NULL" dteam
>>> "/VO=dteam/GROUP=/dteam" dteam
>>>
>>> /opt/edg/etc/lcmaps/gridmapfile
>>>
>>> "/VO=dteam/GROUP=/dteam/ROLE=lcgadmin/Capability=NULL" dteamsgm
>>> "/VO=dteam/GROUP=/dteam/uki/ROLE=NULL/Capability=NULL" dteamsgm
>>> "/VO=dteam/GROUP=/dteam/ROLE=lcgadmin" dteamsgm
>>> "/VO=dteam/GROUP=/dteam/ROLE=production/Capability=NULL" dteamprd
>>> "/VO=dteam/GROUP=/dteam/ROLE=production" dteamprd
>>> "/VO=dteam/GROUP=/dteam/Role=NULL/Capability=NULL" .dteam
>>> "/VO=dteam/GROUP=/dteam" .dteam
>>>
>>> I could get a proxy with the following extensions:
>>> subject   : /C=UK/O=eScience/OU=Imperial/L=Physics/CN=olivier van der aa
>>> issuer    : /C=CH/O=CERN/OU=GRID/CN=host/lcg-voms.cern.ch
>>> attribute : /dteam/uki/Role=NULL/Capability=NULL
>>> attribute : /dteam/Role=NULL/Capability=NULL
>>>
>>> but I never get mapped to dteamsgm. Any idea of what I am missing...
>>> It seems to me that if this does not work then the modification we 
>>> have recently made to map the lhcb/sgm group to lhcbsgm will not work.
>>>
>>>
>>>
>>> Cheers, Olivier.
>>
> 
> 

-- 
*******************************************
* Dr Alessandra Forti			  *
* University of Manchester                *
* Technical Coordinator - NorthGrid Tier2 *
* http://www.hep.man.ac.uk/u/aforti	  *
*******************************************