Hi,
I have the OSG 3.6 xrootd 5.4.3 and the FQAN
/cms/dcms/Role=NULL/Capability=NULL
has a permission issue with my voms-mapping
"/cms/*" cms0001
The user comes in with this atttribute :
attribute : /cms/dcms/Role=NULL/Capability=NULL
attribute : /cms/Role=NULL/Capability=NULL
So, if /cms/dcms is the primary FQAN, xrdcp command fails.
The xrootd log shows:
220718 10:59:04 1890 acc_Audit: cversteg.2875922:[log in to unmask] deny gsi [log in to unmask] read /store/mc/RunIISummer20UL16MiniAODAPVv2/DYJetsToLL_2J_TuneCP5_13TeV-amcatnloFXFX-pythia8/MINIAODSIM/106X_mcRun2_asymptotic_preVFP_v11-v1/280000/990F4DCB-7DE3-8245-B149-09668F43C1F0.root
The DN seems to be mapped to cms0001, but I don't understand why xrootd gsi-denies the access.
However, if he switches to /cms as the primary FQAN, i.e.,
attribute : /cms/Role=NULL/Capability=NULL
attribute : /cms/dcms/Role=NULL/Capability=NULL
, xrdcp command succeeds.
What could be causing this issue?
Thanks,
Bockjoo
########################################################################
Use REPLY-ALL to reply to list
To unsubscribe from the XROOTD-L list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1
|