EGEE>gLite>gLite 3.0>Known Issues

Known Issues

 

YAIM - users.conf file

You have to remove all blank/empty lines from users.conf in order to ensure the proper behaviour during the creation of users.
 

For more info see bug 24303.

YAIM - missing pool accounts in users.conf

The users.conf file does not contain examples of sgm pool accounts for all VOs.

By default YAIM creates the sgm user as pool accounts, for example:

[root@gridnode01]# cat /opt/edg/etc/edg-mkgridmap.conf | grep sgm
group vomss://voms.cern.ch:8443/voms/atlas?/atlas/Role=lcgadmin .atlassgm
group vomss://voms.cern.ch:8443/voms/alice?/alice/Role=lcgadmin .alicesgm
group vomss://voms.cern.ch:8443/voms/lhcb?/lhcb/Role=lcgadmin .lhcbsgm
group vomss://voms.cern.ch:8443/voms/cms?/cms/Role=lcgadmin .cmssgm
group vomss://voms.cern.ch:8443/voms/dteam?/dteam/Role=lcgadmin .dteamsgm
group vomss://cclcgvomsli01.in2p3.fr:8443/voms/biomed?/biomed/Role=lcgadmin .biosgm
group vomss://voms.cern.ch:8443/voms/ops?/ops/Role=lcgadmin .opssgm

Pool accounts should be created accordingly for all the VOs. Unfortunately, looking at the example file, the only examples of multiple accounts are for dteam and biomed, as follows:

[root@gridnode01]# grep sgm /opt/glite/yaim/examples/users.conf
18952:alicesgm001:1397,1395:alicesgm,alice:alice:sgm:
18953:atlassgm001:1309,1307:atlassgm,atlas:atlas:sgm:
18954:cmssgm001:1401,1399:cmssgm,cms:cms:sgm:
18956:lhcbsgm001:1472,1470:lhcbsgm,lhcb:lhcb:sgm:
18957:dteamsgm001:2690,2688:dteamsgm,dteam:dteam:sgm:
18958:dteamsgm002:2690,2688:dteamsgm,dteam:dteam:sgm:
18959:dteamsgm003:2690,2688:dteamsgm,dteam:dteam:sgm:
18990:biosgm001:44200,44000:biosgm,biomed:biomed:sgm:
18991:biosgm002:44200,44000:biosgm,biomed:biomed:sgm:
18992:biosgm003:44200,44000:biosgm,biomed:biomed:sgm:
18993:biosgm004:44200,44000:biosgm,biomed:biomed:sgm:
18994:biosgm005:44200,44000:biosgm,biomed:biomed:sgm:
18995:biosgm006:44200,44000:biosgm,biomed:biomed:sgm:
18960:opssgm001:46001,45000:opssgm,ops:ops:sgm:

Important notice: a lot of sites use the default setting from the example file, which cause sometimes failure for the HEP VOs in terms of missing accounts. However, the sgm pool accounts are mostly useful for them. Please note the following advice;

Site admins should ensure that a sufficient number of software and production manager pool accounts are created on the nodes that need them (this does not apply to VOBOX and SE_castor). Here is how to estimate a lower bound on the number necessary per VO:

awk '$NF ~ /(prd|sgm)$/ { print $NF }' /etc/grid-security/grid-mapfile | sort | uniq -c

For the LHC VOs the current numbers are the following:

      4 aliceprd
     36 alicesgm
     35 atlasprd
     33 atlassgm
     50 cmsprd
     25 cmssgm
     18 dteamprd
     60 dteamsgm
      9 lhcbprd
      5 lhcbsgm

Per mapping we suggest creating more accounts than the current value, to be on the safe side. Unused pool accounts will be recycled as needed, but ideally they should not.

For more information, see bug 25986

YAIM common issues

The yaim 3.0.1 known issues can be found here.