Print

Print


Maybe its an idea to let DGAS rerun the credentials through LCMAPS in a 
dryrun/verify mode to determine to which poolaccount a given set of 
credentials is mapped. The answer out of that run always matches with 
how LCMAPS has made the already made mapping.


2cts




Antun Balaz wrote:
>> The LCMAPS grid-mapfile indeed contains the VO in the VOMS FQAN 
>> string associated with some static account or pool account prefix.
>>
>> It is called $EDG_LOCATION/etc/lcmaps/gridmapfile on the LCG-CE and
>> /etc/grid-security/grid-mapfile on the gLite CE.
>> The formats of their entries differ slightly.  For examples:
>>
>>     "/VO=ops/GROUP=/ops/ROLE=lcgadmin" opssgm
>>
>>     "/ops/Role=lcgadmin/Capability=NULL" opssgm
> 
> So no need for any additional conf files - these are sufficient for YAIM
> function that configures apel-pbs-parser...
> 
> Regards, Antun
> 
> 
> ------- End of Original Message -------