LHC Computer Grid - Rollout
> [mailto:[log in to unmask]] On Behalf Of
> Maarten Litmaath said:
> > It should be possible to have a correct mapping without
> specifying all
> > groups from within a VO.
>
> Yes, for example:
[...]
> "/VO=desy/GROUP=/desy/*" .desy
But looking at the original mail that is what he did
("/VO=desy/GROUP=/desy/*" .atlas), and apparently it results in
/desy/Role=lcgadmin/Capability=NULL taking the atlas mapping even though
an explicit /VO=desy/GROUP=/desy/ROLE=lcgadmin/Capability=NULL is first
in the map file (and the lcgadmin role is the first FQAN). I don't
immediately see why it wouldn't work.
Stephen
|