Hi,
Burke, S (Stephen) wrote:
> Testbed Support for GridPP member institutes
>
>>[mailto:[log in to unmask]] On Behalf Of Brew, CAJ (Chris)
>
> said:
>
>>Our own D*** K*** in <8 Minutes.
>
>
> Good - maybe other sites could check that they can do the same?
I went to /var/log/lcg-expiregridmapdir.log.XXX first and discovered it
only went back to the 12th December. This worries me!
Then I checked globus-gatekeeper and found
> grep dteam003 globus-gatekeeper.log.20041121040206.2
....
> LCMAPS 0: 2004-11-15.14:14:37 : lcmaps_plugin_posix_enf-log_cred(): uid=18120(dteam003):pgid=2688(dteam)
> Notice: 5: Authorized as local user: dteam003
> Notice: 5: "/C=CH/O=CERN/OU=GRID/CN=Judit Novak 0973" mapped to dteam003 (18120/2688)
> JMA 2004/11/15 14:14:43 GATEKEEPER_JM_ID 2004-11-15.14:14:32.0000011101.0000032800 mapped to dteam003 (18120, 2688)
> JMA 2004/11/15 14:14:44 GATEKEEPER_JM_ID 2004-11-15.14:14:37.0000011101.0000032801 mapped to dteam003 (18120, 2688)
> LCMAPS 0: 2004-11-15.14:29:10 : lcmaps_plugin_posix_enf-log_cred(): uid=18120(dteam003):pgid=2688(dteam)
> Notice: 5: Authorized as local user: dteam003
> Notice: 5: "/C=CH/O=CERN/OU=GRID/CN=Judit Novak 0973" mapped to dteam003 (18120/2688)
> LCMAPS 0: 2004-11-18.14:38:16 : lcmaps_plugin_posix_enf-log_cred(): uid=18120(dteam003):pgid=2688(dteam)
> Notice: 5: Authorized as local user: dteam003
> Notice: 5: "/C=ES/O=DATAGRID-ES/O=INTA/CN=Eduardo Huedo Cuesta" mapped to dteam003 (18120/2688)
...
which I would interpret as Judit using the dteam003 account on the 15th
November, no activity on that pool account again until the 18th
November, at which point it gets mapped to Eduardo.
So the response to the question:
"if I asked you who was mapped to dteam003 on November 17th last year
could you tell me? "
is a qualified "No" as I do not know at what point the dteam003 account
was recycled.
OTOH, there is no evidence anything untoward happening so the answer
might simply be an innocuous: "account unmapped and unused at that
time"... if someone did report activity from the IC-HEP farm on the
dteam003 account on the 17th November, then I would get very alarmed as
I would *not* expect Judit's job from the 15th to still be running, and
no other jobs got legitimately mapped to this account in the intervening
time.
"And if you can, how long does it take to find the
information?"
Less time that it took to write the email!
cheers,
Owen.
--
=======================================================
Dr O J E Maroney # London Tier 2 Technical Co-ordinator
Tel. (+44)20 759 47802
Imperial College London
High Energy Physics Department
The Blackett Laboratory
Prince Consort Road, London, SW7 2BW
====================================
|