BeCms
becms group
- A group within the CMS VO w\dedicated to belgian users was created
proxy initialisation
- destroy older one
voms-proxy-destroy
- create new one with /cms/becms group as primary attribute
voms-proxy-init -voms cms -order /cms/becms
- you can verify the validity. the /cms/becms shold be the first attribute
-sh-3.00$ voms-proxy-info -all subject : /C=BE/O=BEGRID/OU=VUB/OU=IIHE/CN=Stijn De Weirdt/CN=proxy issuer : /C=BE/O=BEGRID/OU=VUB/OU=IIHE/CN=Stijn De Weirdt identity : /C=BE/O=BEGRID/OU=VUB/OU=IIHE/CN=Stijn De Weirdt type : proxy strength : 512 bits path : /tmp/x509up_u742 timeleft : 11:59:52 ==== VO cms extension information ==== VO : cms subject : /C=BE/O=BEGRID/OU=VUB/OU=IIHE/CN=Stijn De Weirdt issuer : /DC=ch/DC=cern/OU=computers/CN=lcg-voms.cern.ch attribute : /cms/becms/Role=NULL/Capability=NULL attribute : /cms/Role=NULL/Capability=NULL timeleft : 11:59:52
admin work
dcache
- change the mapping in /etc/grid-security/grid-vorolemap
- adda line like
"*" "/cms/becms/Role=NULL/Capability=NULL" becms002
- make sure the user has an entry in /etc/grid-security/storage-authzdb
authorize becms002 read-write 20052 20050 / / /