VomrsFAQforServiceManagers < LCG

LCG Web>VomrsFAQforServiceManagers (2011-05-04, AndresAeschlimann) (raw view)

%TOC%
---++ Transactions and permissions
   * [[http://cern.ch/dimou/lcg/registrar/TF/vomrs-tips.html][vomrs-tips]] for VO Admins/Representative/Group Owners/Group Managers.
   * [[http://cern.ch/dimou/lcg/vomrs/dteam.ppt][The Representative-centrered DTEAM VO case.]]

---++ Email notifications
You may tailor the notifications you get by going to:
<verbatim>
https://VOMRSserver:8443/vo/VOName/vomrs?path=/RootNode/Subscribtion&action=execute 
</verbatim>
Examples:
[[https://lcg-voms.cern.ch:8443/vo/dteam/vomrs?path=/RootNode/Subscribtion&action=execute][DTEAM]] 
[[https://lcg-voms.cern.ch:8443/vo/test/vomrs?path=/RootNode/Subscribtion&action=execute ][CERN Test VO]]

If you have email filters to put messages in folders, this is, most probably the only "Subject" that will require action from you as VO Admins:

*Subject: Member has requested the addition of a new certificate - approval required*

---++ Actions when VO member's certificate changes
   * https://twiki.cern.ch/twiki/bin/view/LCG/VomsUsers

---++ Installation and configuration help on the GOC wiki
   * http://goc.grid.sinica.edu.tw/gocwiki/VOMRS_FAQ

---++ User unknown to this VO
   * http://goc.grid.sinica.edu.tw/gocwiki/Error%3A_voname%3A_User_unknown_to_this_VO

---++ How to check if a user is in the CERN ORGDB view (LHC Experiment VOs only)
*WARNING*:
   * This method is now obsolete due to reinstallation of tbed0152
   * It is possible to check with http://graybook.cern.ch/ExperimentSearch.html, but it may be possible that all is ok in it and not in the VOMRS view !

<verbatim>
Login as root on the test vom(r)s installation tbed0152.cern.ch:

cd /opt/lcg_check_registration/bin

run
./check_user.sh <last_name>

e.g

 ./check_user.sh dimou

will return:

WARN  [main] Could not find ch.cern.lcg.registration.configdir in system properties. -  configuration.Configuration
INFO  [main] Resource dir /opt/lcg/etc/registration added to source path -  utilities.Resource
INFO  [main] log4j.properties loaded from classpath -  utilities.Resource
INFO  [main] lcg-registration.database.properties loaded from classpath -  utilities.Resource
INFO  [main] Booting user information interface for LCG registration -  configuration.Configuration
INFO  [main] Loaded JDBC driver oracle.jdbc.driver.OracleDriver -  database.ConnectionPool
INFO  [main] Created query pool -  database.QueryPool
INFO  [main] Created new query connection: connection #1 in query pool -  database.QueryPool
Name DIMOU
First name MARIA
Email Maria.Dimou@cern.ch
Physical Email dimou@mail.cern.ch
Experiment CMS
</verbatim>

---++ LHC Experiment VO user registration failed in vomrs

lcg registration database configuration file /opt/vomrs-1.3/var/etc/vomrs_<vo_name>/lcg-registration.database.properties should belongs to tomcat

<verbatim>
e.g.
cd /opt/vomrs-1.3/var/etc/vomrs_cms
chown tomcat4:tomcat4 lcg-registration.database.properties

Otherwise, user  will encounter the following error when registratering Phase I

java.lang.NoClassDefFoundError

ch.cern.lcg.registration.Experiment.matchMembers(Experiment.java:292)

ch.cern.lcg.registration.Experiment.matchMember(Experiment.java:340)
    fnal.vox.vomrs.lcg.LCG.fill(Unknown Source)
    fnal.vox.vomrs.tables.PersonalInfos.addInternalPI(Unknown Source)
    fnal.vox.vomrs.database.RegisterMember.doActionImpl(Unknown Source)
    fnal.vox.vomrs.tables.DBTablesBase.doAction(Unknown Source)
    fnal.vox.vomrs.database.ServiceBroker.executeService(Unknown Source)
    fnal.vox.vomrs.services.VOMRSSoapBindingImpl.execute(Unknown Source)

   fnal.vox.vomrs.services.VOMRSSoapBindingImpl.registerMember(Unknown Source)
   fnal.vox.vomrs.webui.MemberPhaseIRegistration.register(Unknown Source)
    fnal.vox.vomrs.webui.MemberPhaseIRegistration.execute(Unknown Source)
    fnal.vox.vomrs.webui.PageGenerator.print_content(Unknown Source)
    fnal.vox.vomrs.webui.PageGenerator.generate_page(Unknown Source)
    fnal.vox.vomrs.webui.PageGenerator.doGetPost(Unknown Source)
    fnal.vox.vomrs.webui.PageGenerator.doPost(Unknown Source)
    javax.servlet.http.HttpServlet.service(HttpServlet.java:709)
    javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
</verbatim>

---++ VOMRS host certificate DN change

Such a change make synchronisation with VOMS fail, because, in order to allow VOMRS to synchronise with VOMS, we added a global acl entry which grants administrator rigths to the host certificate of VOMRs (lcg-voms.cern.ch).

So, in this case, you have to modify the ACL entry in order to replace the VOMRS host DN (and maybe its CA) with the new one. To do that, there are several ways :
   * Use VOMS-Admin : 'Administer the VO' -> 'Global ACL', and modify the corresponding entry for all VOs.
   * Or, if you can't access this page, but have the DB password, you can use the Perl script 'fix-vomrs_host_dn.pl' which is attached to this page. (See at the bottom)

---++ How can one identify the master node

It is possible to identify the master node by logging in each node, and runnning the following command :
=netstat -i=

The master is the node with the =eth0:0= interface.

---++ VOMRS FAQ for users
[[http://goc.grid.sinica.edu.tw/gocwiki/VOMRS_FAQ ][A collection at the gocwiki]].

-- Main.dimou - 07 Jun 2006

Attachments

Topic attachments
I	Attachment	History	Action	Size	Date	Who	Comment
txt	fix-vomrs_host_dn.pl.txt	r1	manage	1.4 K	2007-05-29 - 14:06	UnknownUser	Script to update the VOMRS host DN in VOMS Global ACL

Topic revision: r11 - 2011-05-04 - AndresAeschlimann

LCG Wikis

LCG Service
Coordination

LCG Grid
Deployment

LCG
Apps Area

Public webs

Welcome Guest

- Cern Search
- TWiki Search
- Google Search
LCG All webs

Copyright &© 2008-2021 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
or Ideas, requests, problems regarding TWiki? use Discourse or Send feedback