Il 08/11/2013 12:39, Alessandro Paolini ha scritto:
> Hi Felix,
>
> Il 08/11/2013 10:13, Felix Farcas ha scritto:
>> Hello
>>
>> I know that this is not urgent but gLexec Jobs ar not running on the
>> site RO-14-ITM.
>>
>> I get the following error:
>>
>> Logged Reason(s):
>> - BLAH error: submission command failed (exit code = 1) (stdout:)
>> (stderr:qsub: Unauthorized Request MSG=group ACL is not satisfied:
>> user [log in to unmask], queue ops-) N/A (jobId =
>> CREAM770598662)
>> - BLAH error: submission command failed (exit code = 1) (stdout:)
>> (stderr:qsub: Unauthorized Request MSG=group ACL is not satisfied:
>> user [log in to unmask], queue ops-) N/A (jobId =
>> CREAM997021198)
>> Status Reason: hit job shallow retry count (1)
>>
>> For org.sam.glexec.CE-JobState-/ops/Role=pilot the status is OK
>>
>> but for:
>> org.sam.glexec.CE-JobSubmit-/ops/Role=pilot the status is Critical as
>> if pilops would not exist.
>>
>> On ecream.itim-cj.ro if have:
>> id pilops07
>> uid=55320(pilops07) gid=46004(opspil) groups=46004(opspil),45000(ops)
>> and I do have the same on the worknodes.
>>
>> In site-info.def I have:
>> OPS_GROUP_ENABLE="ops /ops/ROLE=lcgadmin /ops/ROLE=pilot"
>> OPS_GROUP_ENABLE="ops /ops/ROLE=lcgadmin"
>> OPS_GROUP_ENABLE="ops /ops/NGI/Romania"
> I'm afraid that the latest definition overwrites the previous ones
>
> check with:
> qmgr -c 'p s'
>
> what is set in the parameter acl_groups for the ops queue (probably
> the pilot role isn't authorized)
>
> try to set all in a single line:
>
> OPS_GROUP_ENABLE="ops /ops/ROLE=lcgadmin /ops/ROLE=pilot
> /ops/NGI/Romania"
>
> and reconfigure with yaim
>
> cheers,
> Alessandro
indeed in the OPS it is missing the sgm and pilot roles:
$ ldapsearch -LLL -x -H ldap://ecream.itim-cj.ro:2170 -b
'Mds-Vo-Name=resource,o=grid' 'objectClass=GlueCE'
GlueCEAccessControlBaseRule
dn:
GlueCEUniqueID=ecream.itim-cj.ro:8443/cream-pbs-ops,Mds-Vo-name=resource,o
=grid
GlueCEAccessControlBaseRule: VO:ops
GlueCEAccessControlBaseRule: VOMS:/ops/NGI/Romania
dn:
GlueCEUniqueID=ecream.itim-cj.ro:8443/cream-pbs-atlas,Mds-Vo-name=resource
,o=grid
GlueCEAccessControlBaseRule: VO:atlas
GlueCEAccessControlBaseRule: VOMS:/atlas/Role=lcgadmin
GlueCEAccessControlBaseRule: VOMS:/atlas/Role=production
GlueCEAccessControlBaseRule: VOMS:/atlas/Role=pilot
dn:
GlueCEUniqueID=ecream.itim-cj.ro:8443/cream-pbs-ifops,Mds-Vo-name=resource
,o=grid
GlueCEAccessControlBaseRule: VO:ifops
cheers,
Alessandro
>>
>> I have installed EMI3 on SL 6.4
>>
>> Thank you for any advice.
>>
>> Felix
>>
>
--
Dr. Alessandro Paolini
INFN - CNAF
Viale Berti Pichat 6/2
40127 Bologna
Italy
tel: +39 051 6092723
fax: +39 051 6092916
ICQ: 192172027
skype: alex.paolini
**********************
"credo nel potere del riso e delle lacrime"
"come antidoto all'odio ed al terrore"
"un giorno senza un sorriso"
"è un giorno perso" >>> Charlie Chaplin
