Problem

For a given user, usage of LFC/DPM with:

• grid-proxy-init or simple voms-proxy-init works fine,
• voms-proxy-init -voms doesn't work fine

Solutions

Wrong VOMS setup

Check the VOMS setup on:

• the UI
• the LFC / DPM server

On LFC & UI, /etc/grid-security/vomsdir contains VO VOMS server

$ ls -ld /etc/grid-security/vomsdir/
drwxr-xr-x    2 root  root  4096 Jun  8 15:07 /etc/grid-security/vomsdir/

$ ls /etc/grid-security/vomsdir
cclcgvomsli01.in2p3.fr.43
lcg-voms.cern.ch.1265
...

On the UI (client), /opt/glite/etc/vomses should contain :

$ ls /opt/glite/etc/vomses
alice-lcg-voms.cern.ch
alice-voms.cern.ch
...

User uses several different VOMS roles

For details, see LFC and DPM internal virtual ids

The same user with two different VOMS roles will be mapped to two different internal virtual gids. To grant privileges to other VOMS roles on given directories/files, use lfc-setacl (see man lfc-setacl).

Help !

For support/help, contact helpdesk@ggusNOPAMSMANDNOSPAMPLEASE.org (remove the NOSPAM !). Your ROC will help you, and contact the appropriate experts if needed.

-- SophieLemaitre - 28 Jul 2006