BeCms

From T2B Wiki
Jump to navigation Jump to search

becms group

  • A group within the CMS VO w\dedicated to belgian users was created

proxy initialisation

  • destroy older one
voms-proxy-destroy
  • create new one with /cms/becms group as primary attribute
voms-proxy-init -voms cms -order /cms/becms
  • you can verify the validity. the /cms/becms shold be the first attribute
-sh-3.00$ voms-proxy-info -all
subject   : /C=BE/O=BEGRID/OU=VUB/OU=IIHE/CN=Stijn De Weirdt/CN=proxy
issuer    : /C=BE/O=BEGRID/OU=VUB/OU=IIHE/CN=Stijn De Weirdt
identity  : /C=BE/O=BEGRID/OU=VUB/OU=IIHE/CN=Stijn De Weirdt
type      : proxy
strength  : 512 bits
path      : /tmp/x509up_u742
timeleft  : 11:59:52
==== VO cms extension information ====
VO        : cms
subject   : /C=BE/O=BEGRID/OU=VUB/OU=IIHE/CN=Stijn De Weirdt
issuer    : /DC=ch/DC=cern/OU=computers/CN=lcg-voms.cern.ch
attribute : /cms/becms/Role=NULL/Capability=NULL
attribute : /cms/Role=NULL/Capability=NULL
timeleft  : 11:59:52

admin work

dcache

  • change the mapping in /etc/grid-security/grid-vorolemap
    • adda line like
"*" "/cms/becms/Role=NULL/Capability=NULL" becms002
    • make sure the user has an entry in /etc/grid-security/storage-authzdb
authorize becms002 read-write 20052 20050 / / /


Template:TracNotice