Hi Stefan, there is a patch for the previous versions. I think it is located in the advisory part of the documentation. If it is possible, it is better to use the actual version of globus (globus-4.0.5).
kind regards, Hamza Stefan Freitag wrote: > Hi Hamza, > > that works only in the newer version gt4.0.5, but i am interested in a > solution for > gt4.0.3 where the extensions tag does not exist as far as i know. > > Kind regards > Stefan > > Am Mittwoch, 25. Juli 2007 09:20:06 schrieb Hamza Mehammed: > >> Hi Stefan, >> >> if you insert the localUserId tag in the <extentions> tag as shown >> below, it should work. >> >> <job> >> <executable>/usr/bin/id</executable> >> <directory>/tmp</directory> >> <stdout>/tmp/stdout</stdout> >> <stderr>/tmp/stderr</stderr> >> <queue>dgiseq</queue> >> <extentions> >> <localUserId>dt0031</localUserId> >> </extentions> >> </job> >> >> Regards, >> Hamza >> >> Stefan Freitag wrote: >> >>> Hi all! >>> >>> I would like to know if it is possible to use one DN with multiple local >>> logins for GRAM, especially WS-GRAM. >>> >>> Understood is already that a grid-mapfile can contain entries like >>> >>> "/O=GermanGrid/OU=Uni-Dortmund/CN=Stefan Freitag" hp0007,dt0031 >>> >>> so that a user can login as hp0007 or dt0031 using gsissh. >>> But what about job submission? Unfortunately I was not able to find >>> any useful information.... >>> >>> >>> What I have done so far: >>> >>> My grid-mapfile in /etc/grid-security/ contains the following >>> mapping >>> >>> [EMAIL PROTECTED]:/usr/local/globus/var> grep -i freitag >>> /etc/grid-security/grid-mapfile >>> "/O=GermanGrid/OU=Uni-Dortmund/CN=Stefan Freitag" hp0007,dt0031 >>> >>> So my DN is mapped to two local accounts hp0007 and dt0031 on the node >>> udo-gt01. I expected that I can submit with globusrun-ws jobs as one or the >>> other user by specifying the localUserId. >>> >>> Here are my two test jobs: >>> 1) >>> <job> >>> <localUserId>dt0031</localUserId> >>> <executable>/usr/bin/id</executable> >>> <directory>/tmp</directory> >>> <stdout>/tmp/stdout</stdout> >>> <stderr>/tmp/stderr</stderr> >>> <queue>dgiseq</queue> >>> </job> >>> >>> 2) >>> <job> >>> <localUserId>hp0007</localUserId> >>> <executable>/usr/bin/id</executable> >>> <directory>/tmp</directory> >>> <stdout>/tmp/stdout</stdout> >>> <stderr>/tmp/stderr</stderr> >>> <queue>dgiseq</queue> >>> </job> >>> >>> The only difference between the jobs is the localUserId. >>> Now, when I submit the jobs to Globus I get for >>> >>> 1) >>> [EMAIL PROTECTED]:~/jobs/xml/id> globusrun-ws -submit -F udo-gt01 -Ft PBS >>> -s -f >>> id_dt0031.xml >>> Submitting job...Done. >>> Job ID: uuid:74a29c36-39fe-11dc-a4db-0050560bd129 >>> Termination time: 07/25/2007 15:56 GMT >>> Current job state: Failed >>> Destroying job...Done. >>> globusrun-ws: Job failed: Error code: 201 >>> Script stderr: >>> dt0031 is not in the grid mapfile >>> >>> 2) >>> [EMAIL PROTECTED]:~/jobs/xml/id> globusrun-ws -submit -F udo-gt01 -Ft PBS >>> -s -f >>> id_hp0007.xml >>> Submitting job...Done. >>> Job ID: uuid:7a30c024-39fe-11dc-98f5-0050560bd129 >>> Termination time: 07/25/2007 15:56 GMT >>> Current job state: Pending >>> Current job state: Active >>> Current job state: CleanUp-Hold >>> uid=25007(hp0007) gid=20005(hp) >>> groups=20000(glite),20001(globus),20002(unicore),20005(hp) >>> context=user_u:system_r:unconfined_t >>> Current job state: CleanUp >>> Current job state: Done >>> Destroying job...Done. >>> >>> >>> I was surprised about this result and inspected the ongoing things... >>> After doing a "su" I tried the following from the local account dt0031 >>> >>> [EMAIL PROTECTED]:/usr/local/globus/var> >>> /usr/local/globus/libexec/globus-gridmap-and-execute -g >>> /etc/grid-security/grid-mapfile /bin/date >>> dt0031 is not in the grid mapfile >>> >>> and then for hp0007 >>> >>> [EMAIL PROTECTED]:/usr/local/globus/var> >>> /usr/local/globus/libexec/globus-gridmap-and-execute -g >>> /etc/grid-security/grid-mapfile /bin/date >>> Tue Jul 24 17:59:00 CEST 2007 >>> >>> All in all I came to the result, that there is something strange with >>> globus-gridmap-and-execute >>> >>> Do you have any idea what went wrong? >>> >>> Best regards >>> Stefan >>> >>> >>> > > >
begin:vcard fn:Hamza Mehammed n:Mehammed;Hamza org:Leibniz-Rechenzentrum;Hochleistungssysteme adr;quoted-printable;quoted-printable:;;Barer Str. 21 (from May Boltzmannstra=C3=9Fe 1) ;M=C3=BCnchen (from May Garching);Bayern;80333 (from May 85748) ;Germany email;internet:mehammed_AT_lrz.de title:Diplom-Informatiker tel;work:+49-89-289-27824 (from May +49-89-35831-7824) tel;fax:+49-89-280-9460 (from May +49-89-35831-9700) url:http://www.lrz-muenchen.de/persons/hamza_mehammed.html version:2.1 end:vcard
