 |
 |
Hi Goncalo, no, the authentication is not like the CE one. DPM has its own gridmapfile also with edg-mkgridmap.pl: /opt/lcg/etc/lcgdm-mapfile you can look at the cron job /etc/cron.d/lcgdm-mkgridmap cheers alessandra Gonçalo Borges wrote: > Hi... > > Some issues regarding DPM. Maybe someone can answer my questions > (posted along the text)... > I've looked in > > https://twiki.cern.ch/twiki/bin/view/LCG/LfcTroubleshooting > > and in > > https://twiki.cern.ch/twiki/bin/view/LCG/DpmAdminGuide > > but didn't find any point explaining how the DPM authentication is > really done (or it least, I didn't understood what I read :) ) > > > 1) These are the versions of the metapackages I'm using for the > server/client > > [root@ui01 ~] rpm -qa | grep UI > glite-UI-3.1.25-0 > > [root@se05 ~]# rpm -qa | grep SE > glite-SE_dpm_disk-3.1.11-0.x86_64 > glite-SE_dpm_mysql-3.1.12-0.x86_64 > > > ---*--- > > 2) This is my proxy-info: > > -bash-3.00$ voms-proxy-info --all > subject : /C=PT/O=LIPCA/O=LIP/OU=Lisboa/CN=Goncalo Borges/CN=proxy > issuer : /C=PT/O=LIPCA/O=LIP/OU=Lisboa/CN=Goncalo Borges > identity : /C=PT/O=LIPCA/O=LIP/OU=Lisboa/CN=Goncalo Borges > type : proxy > strength : 1024 bits > path : /tmp/x509up_u266 > timeleft : 11:24:29 > === VO dteam extension information === > VO : dteam > subject : /C=PT/O=LIPCA/O=LIP/OU=Lisboa/CN=Goncalo Borges > issuer : /DC=ch/DC=cern/OU=computers/CN=voms.cern.ch > attribute : /dteam/Role=NULL/Capability=NULL > attribute : /dteam/swe/Role=NULL/Capability=NULL > attribute : /dteam/swe/lip/Role=NULL/Capability=NULL > timeleft : 11:24:29 > uri : voms.cern.ch:15004 > > ---*--- > > 3) I can perform an lcg-cr perfectly: > > -bash-3.00$ lcg-cr -v -d se05.lip.pt -l > lfn:/grid/dteam/goncalo/teste2.txt file:/home/csys/goncalo/sleep.sh > Using grid catalog type: lfc > Using grid catalog : prod-lfc-shared-central.cern.ch > Using LFN : /grid/dteam/goncalo/teste2.txt > [BDII] ii02.lip.pt:2170: Warning, no GlueVOInfo information found > about SE 'se05.lip.pt' (with no tag) > SE type: SRMv1 > Using SURL : > srm://se05.lip.pt/dpm/lip.pt/home/dteam/generated/2009-02-26/fileed524aca-f315-4422-afb7-9c0145291ef3 > > Alias registered in Catalog: lfn:/grid/dteam/goncalo/teste2.txt > SRM Request Token: 166066 > Source URL: file:/home/csys/goncalo/sleep.sh > File size: 122 > VO name: dteam > Destination specified: se05.lip.pt > Destination URL for copy: > gsiftp://se05.lip.pt/se05.lip.pt:/dpm1/dteam/2009-02-26/fileed524aca-f315-4422-afb7-9c0145291ef3.166066.0 > > # streams: 1 > # set timeout to 0 seconds > 122 bytes 0.21 KB/sec avg 0.21 KB/sec inst > Transfer took 1020 ms > Destination URL registered in Catalog: > srm://se05.lip.pt/dpm/lip.pt/home/dteam/generated/2009-02-26/fileed524aca-f315-4422-afb7-9c0145291ef3 > > guid:7ed07047-5e04-401b-9267-edb46c2a3646 > > ---*--- > > 4) I can perform an lcg-cr requesting VO SWETEST and registering the > file on DTEAM catalogue (neither LFC or DPM complain about the > incoherence): > > -bash-3.00$ lcg-cr -v --vo swetest -d se05.lip.pt -l > lfn:/grid/dteam/goncalo/teste3.txt file:/home/csys/goncalo/sleep.sh > Using grid catalog type: lfc > Using grid catalog : prod-lfc-shared-central.cern.ch > Using LFN : /grid/dteam/goncalo/teste3.txt > [BDII] ii02.lip.pt:2170: Warning, no GlueVOInfo information found > about SE 'se05.lip.pt' (with no tag) > SE type: SRMv1 > Using SURL : > srm://se05.lip.pt/dpm/lip.pt/home/swetest/generated/2009-02-26/filefe631748-d9e5-458c-819f-30920e5371df > > Alias registered in Catalog: lfn:/grid/dteam/goncalo/teste3.txt > SRM Request Token: 166071 > Source URL: file:/home/csys/goncalo/sleep.sh > File size: 122 > VO name: swetest > Destination specified: se05.lip.pt > Destination URL for copy: > gsiftp://se05.lip.pt/se05.lip.pt:/dpm1/dteam/2009-02-26/filefe631748-d9e5-458c-819f-30920e5371df.166071.0 > > # streams: 1 > # set timeout to 0 seconds > 122 bytes 0.13 KB/sec avg 0.13 KB/sec inst > Transfer took 2030 ms > Destination URL registered in Catalog: > srm://se05.lip.pt/dpm/lip.pt/home/swetest/generated/2009-02-26/filefe631748-d9e5-458c-819f-30920e5371df > > guid:bbaa307f-3c10-4e82-abd1-c30936175e81 > > QUESTION 1: I guess that this is only possible because the permissions > are OK at the LFC level and DPM doesn't recognize that I'm running > with the DTEAM extension... Is it really like this or do I have > something incorrectly configured. > > ---*--- > > 5) I have removed myself from the grid-mapfile in the DPM server, and > tried to perform an lcg-cr as in step 3. I didn't succeed: > > -bash-3.00$ lcg-cr -v -d se05.lip.pt -l > lfn:/grid/dteam/goncalo/teste5.txt file:/home/csys/goncalo/sleep.sh > Using grid catalog type: lfc > Using grid catalog : prod-lfc-shared-central.cern.ch > Using LFN : /grid/dteam/goncalo/teste5.txt > [BDII] ii02.lip.pt:2170: Warning, no GlueVOInfo information found > about SE 'se05.lip.pt' (with no tag) > SE type: SRMv1 > Using SURL : > srm://se05.lip.pt/dpm/lip.pt/home/dteam/generated/2009-02-26/file596bf6e9-ea45-491e-b6cf-9faf29da1d71 > > Alias registered in Catalog: lfn:/grid/dteam/goncalo/teste5.txt > [SE][put] httpg://se05.lip.pt:8443/srm/managerv1: CGSI-gSOAP: Error > reading token data header: Connection closed > > lcg_cr: Operation now in progress > > QUESTION 2: I though the authentication in DPM server was done as in > CE but it seems it is done still base on grid-mapfile (if I have > everything configuredOK!). Is it really like this? > > Cheers > Gonçalo -- Alessandra Forti - NorthGrid Technical Coordinator http://www.hep.manchester.ac.uk/computing/tier2 Well you'll still need a tray