Hi Alessandra.
Thanks a lot for your reply. We are failing mappings fro all VOs but
we think only when user has proxy with voms extension.
We had problem before with lhcbprd which appeared and gone by itself. For
geant4 we had a wrong VO defenition which was corrected.
Elena
On Wed, 10 Dec 2008, Alessandra Forti wrote:
> Hi Elena,
>
> why do you think the VOMS error has to do with the info provider? You had
> these mapping problems even before the upgrade so you should check if there
> is really a correlation. This is an authorization failure more than a mapping
> failure (LCAS errors). Which VO is failing? This part of the message seems
> indicative:
>
> LCAS 0: lcas_plugin_voms-plugin_confirm_authorization_from_x509():
> VOMS Signature error (failure)!
> LCAS 0: 2008-12-09.19:10:35 :
>
> Perhaps it would also be useful to increase the lcas log and debug levels and
> see if hopefully more meaningful messages are written. It should be enough to
> set in /etc/profile.d/gridenv.sh
>
> LCAS_LOG_LEVEL [0-6]
> LCAS_DEBUG_LEVEL [0-6]
>
> I suggest to start with small numbers because I know lcas/lcmaps can be quite
> verbose.
>
> thanks
>
> cheers
> alessandra
>
>
> Elena Korolkova wrote:
>> Hello we have done update yesterday on our ce (the previous one 3 weeks
>> ago) and then yaim:
>> /opt/glite/yaim/bin/yaim -c -s /mnt/config/site-info.def -n lcg-CE -n
>> TORQUE_server -n TORQUE_utils
>>
>> We have a problem with mapping users . From globus-gatekeeper.log:
>>
>> lcas client name: [[USER DN]]
>> LCAS 0:
>> LCAS 1: Initialization LCAS version 1.3.7
>> allowing empty credentials
>> LCAS 2: LCAS authorization request
>> LCAS 0: lcas_userban.mod-plugin_confirm_authorization(): checking
>> banned users in /opt/glite/etc/lcas/ban_users.db
>> LCAS 0: lcas_plugin_voms-plugin_confirm_authorization_from_x509():
>> VOMS Signature error (failure)!
>> LCAS 0: 2008-12-09.19:10:35 :
>> lcas_plugin_voms-plugin_confirm_authorization_from_x509(): voms plugin
>> failed
>> LCAS 0: lcas.mod-lcas_run_va(): authorization failed for plugin
>> /opt/glite/lib/modules/lcas_voms.mod
>> LCAS 0: lcas.mod-lcas_run_va(): failed
>> LCAS failed authorization.
>> Failure in LCAS Authorization
>> Failure: globus_gss_assist_gridmap() failed authorization.
>> globus_gss_assist: Error invoking callout
>> globus_callout_module: The callout returned an error
>> an unknown error occurred
>>
>>
>> TIME: Tue Dec 9 19:10:35 2008
>> PID: 9938 -- Failure: globus_gss_assist_gridmap() failed authorization.
>> globus_gss_assist: Error invoking callout
>> globus_callout_module: The callout returned an error
>> an unknown error occurred.
>>
>> This seems to be associated with any user proxy with voms extensions.
>>
>> We have tried to apply corrections discussed at
>> https://savannah.cern.ch/bugs/?33314 and
>> https://savannah.cern.ch/bugs/?44885 and on lcg-rollout but it doen't help.
>>
>> Your help is greatly appreciated.
>>
>> Thanks
>> Elena
>>
>>
>>
>> ____________________________________________________________________________
>> Dr Elena Korolkova
>> Email: [log in to unmask]
>> Tel.: +44 (0)114 2223553
>> Fax: +44 (0)114 2223555
>> Department of Physics and Astronomy
>> University of Sheffield
>> Sheffield, S3 7RH, United Kingdom
>
> --
> Alessandra Forti - NorthGrid Technical Coordinator
> http://www.hep.manchester.ac.uk/computing/tier2
>
> Well you'll still need a tray
>
____________________________________________________________________________
Dr Elena Korolkova
Email: [log in to unmask]
Tel.: +44 (0)114 2223553
Fax: +44 (0)114 2223555
Department of Physics and Astronomy
University of Sheffield
Sheffield, S3 7RH, United Kingdom
|