Speaking of David Winn and Proxies - looking into my lcg-CEs I see this:
[root@ceprod03 gridmapdir]# ls -lrt | grep -B1 winn
-rw-r--r-- 2 root root 0 Oct 31 01:39 lt2-pheno181
-rw-r--r-- 2 root root 0 Oct 31 01:39
%2fc%3duk%2fo%3descience%2fou%3ddurham%2fl%3descience%2fcn%3ddavid%20winn
--
-rw-r--r-- 2 root root 0 Nov 24 13:13 lt2-pheno197
-rw-r--r-- 2 root root 0 Nov 24 13:13
%2fc%3duk%2fo%3descience%2fou%3ddurham%2fl%3descience%2fcn%3ddavid%20winn:lt2-pheno
If I remember correctly this is a typical side effect of submitting
sometimes with a vomsified (--voms option) proxy or and sometimes not.
Or storage e.g. will not accept proxies without voms extensions, so
the problem might be there. (though without knowing what the jobs are
doing I can't comment.)
I just tried to uberftp into my cream-CEs and there I can only uberftp
into the CE is I have a voms proxy, while my lcgCEs will let me
uberftp into them with a vanilla proxy, which might explain why the
errors in the attachment seem to refer to my lcgCEs and not my
creamCEs (though I am guessing here.)
Cheers,
Daniela
On 24 November 2011 12:59, Daniela Bauer
<[log in to unmask]> wrote:
> If this is David Winn we are talking about here, as far as I can tell
> wms02 has no problem with his proxy:
>
> 24 Nov, 12:11:07 -D- PID: 11060 -
> "wmpgsoapoperations::delegationns__putProxy": putProxy operation
> called
> 24 Nov, 12:11:07 -I- PID: 11060 - "wmpcommon::initWMProxyOperation":
> ================== Incoming Request ==================
> 24 Nov, 12:11:07 -I- PID: 11060 - "wmpcommon::initWMProxyOperation":
> Called Operation: putProxy
> 24 Nov, 12:11:07 -D- PID: 11060 - "wmpcommon::initWMProxyOperation":
> Remote Host Address: 129.234.193.13:60114
> 24 Nov, 12:11:07 -D- PID: 11060 - "wmpcommon::initWMProxyOperation":
> Remote Host Name: ui.dur.scotgrid.ac.uk
> 24 Nov, 12:11:07 -D- PID: 11060 - "wmpcommon::initWMProxyOperation":
> Remote CLIENT S DN: /C=UK/O=eScience/OU=Durham/L=eScience/CN=david
> winn/CN=proxy
> 24 Nov, 12:11:07 -D- PID: 11060 - "wmpcommon::initWMProxyOperation":
> Remote GRST CRED: VOMS 1322127100 1322170300 0
> /pheno/Role=NULL/Capability=NULL
> 24 Nov, 12:11:07 -D- PID: 11060 - "wmpcommon::initWMProxyOperation":
> Service GRST PROXY LIMIT: 6
> 24 Nov, 12:11:07 -I- PID: 11060 - "wmpcommon::initWMProxyOperation":
> WMProxy instance serving core request N.: 3
> 24 Nov, 12:11:07 -D- PID: 11060 - "wmpcommon::setGlobalSandboxDir":
> Sandbox directory: SandboxDir
> 24 Nov, 12:11:07 -D- PID: 11060 - "wmpoperations::putProxy": Authorizing user...
> 24 Nov, 12:11:07 -D- PID: 11060 - "WMPAuthorizer::WMPAuthorizer":
> LCMAPS log file: /var/log/glite/lcmaps.log
> 24 Nov, 12:11:07 -D- PID: 11060 - "WMPAuthorizer::authorize":
> Delegated Proxy FQAN:
> 24 Nov, 12:11:07 -D- PID: 11060 - "WMPAuthorizer::authorize":
> Request's Proxy FQAN: /pheno/Role=NULL/Capability=NULL
> 24 Nov, 12:11:07 -D- PID: 11060 - "WMPAuthorizer::checkGaclUserAuthZ":
> Checking VOMS proxy...
> 24 Nov, 12:11:07 -D- PID: 11060 - "WMPAuthorizer::checkGaclUserAuthZ":
> fqan=/pheno/Role=NULL/Capability=NULL
> 24 Nov, 12:11:07 -D- PID: 11060 - "wmputils::getUserDN": Getting user DN...
> 24 Nov, 12:11:07 -D- PID: 11060 - "wmputils::convertDNEMailAddress":
> Converted DN: /C=UK/O=eScience/OU=Durham/L=eScience/CN=david winn
> 24 Nov, 12:11:07 -D- PID: 11060 - "wmputils::getUserDN": User DN:
> /C=UK/O=eScience/OU=Durham/L=eScience/CN=david winn
> 24 Nov, 12:11:07 -D- PID: 11060 - "wmputils::getUserDN": Getting user DN...
> 24 Nov, 12:11:07 -D- PID: 11060 - "wmputils::convertDNEMailAddress":
> Converted DN: /C=UK/O=eScience/OU=Durham/L=eScience/CN=david winn
> 24 Nov, 12:11:07 -D- PID: 11060 - "wmputils::getUserDN": User DN:
> /C=UK/O=eScience/OU=Durham/L=eScience/CN=david winn
> 24 Nov, 12:11:07 -D- PID: 11060 - "wmputils::convertDNEMailAddress":
> Converted DN: /C=UK/O=eScience/OU=Durham/L=eScience/CN=david winn
> 24 Nov, 12:11:07 -D- PID: 11060 - "GaclManager::gaclExists": checking
> file gacl existence
> 24 Nov, 12:11:07 -D- PID: 11060 - "GaclManager::loadFromFile": loading
> gacl from file : [/opt/glite/etc/glite_wms_wmproxy.gacl]
> 24 Nov, 12:11:07 -D- PID: 11060 - "WMPAuthorizer::checkGaclUserAuthZ":
> Checking gacl file entries...
> 24 Nov, 12:11:07 -D- PID: 11060 - "WMPAuthorizer::checkGaclUserAuthZ":
> VOMS credential type present
> 24 Nov, 12:11:07 -D- PID: 11060 -
> "GaclManager::checkAllowPermission()": Raw Value =
> /pheno/Role=NULL/Capability=NULL
> 24 Nov, 12:11:07 -D- PID: 11060 -
> "GaclManager::checkAllowPermission()": CredType/Permission = 4/2
> 24 Nov, 12:11:07 -D- PID: 11060 - "GaclManager::checkAllowPermission()": Success
> 24 Nov, 12:11:07 -D- PID: 11060 - "wmputils::getUserDN": Getting user DN...
> 24 Nov, 12:11:07 -D- PID: 11060 - "wmputils::convertDNEMailAddress":
> Converted DN: /C=UK/O=eScience/OU=Durham/L=eScience/CN=david winn
> 24 Nov, 12:11:07 -D- PID: 11060 - "wmputils::getUserDN": User DN:
> /C=UK/O=eScience/OU=Durham/L=eScience/CN=david winn
> 24 Nov, 12:11:07 -D- PID: 11060 - "WMPDelegation::putProxy": Proxy
> dir: /var/glite/proxycache
> 24 Nov, 12:11:07 -D- PID: 11060 - "WMPDelegation::putProxy":
> delegation id: runJobs
> 24 Nov, 12:11:07 -D- PID: 11060 - "WMPDelegation::putProxy": User DN:
> /C=UK/O=eScience/OU=Durham/L=eScience/CN=david winn
> 24 Nov, 12:11:07 -D- PID: 11060 - "wmpoperations::putProxy": Proxy put
> successfully
> 24 Nov, 12:11:07 -D- PID: 11060 -
> "wmpgsoapoperations::delegationns__putProxy": putProxy operation
> completed
>
> 24 Nov, 12:11:07 -D- PID: 11060 - "wmproxy::main": Resetting signals handler
> 24 Nov, 12:11:50 -D- PID: 11060 -
> "wmpgsoapoperations::ns1__getVersion": getVersion operation called
>
> I realize debugging can be frustrating, but I am not a member of the
> pheno VO, I cannot see your problems and if you don't tell me they
> won't get fixed....
>
> Maybe pheno as a VO could club together and set up a nagios instance
> to detect basic problems from the onset and not wait until users run
> into it ?
>
> Cheers,
> Daniela
>
>
>>> used?
>>
>> The WMSs that have proxy failures are RAL 03 and Imperial 02.
>>
>> David
>>
>
>
>
> --
> -----------------------------------------------------------
> [log in to unmask]
> HEP Group/Physics Dep
> Imperial College
> Tel: +44-(0)20-75947810
> http://www.hep.ph.ic.ac.uk/~dbauer/
>
--
-----------------------------------------------------------
[log in to unmask]
HEP Group/Physics Dep
Imperial College
Tel: +44-(0)20-75947810
http://www.hep.ph.ic.ac.uk/~dbauer/
|