Tools/Manuals/TS02

From EGIWiki
Jump to: navigation, search

Back to Troubleshooting Guide


530 530 LCMAPS credential mapping NOT successful

Diagnosis

  1. VO is not enabled
  2. VOMS authentication is required (e.g. on gLite CE)
  3. All pool accounts are already in use.
  4. Refer to 530 530 No local mapping for Globus ID

Solution

Users should use VOMS proxies for services that do not accept simple grid proxies.

Services should have the supported VOs properly configured.

Check Pool Accounts

Check the pool accounts directory on the host (CE, SE, other) :

Each time a pool account is reserved, a hard link is made in the /etc/grid-security/gridmapdir/ directory

see http://www.nikhef.nl/grid/lcaslcmaps/lcmaps_apidoc/html/lcmaps_poolaccount.mod.html

Also check your cron job in charge of cleaning unused pool accounts. Usually it is something like this :

$ cat /etc/cron.d/lcg-expiregridmapdir 
PATH=/sbin:/bin:/usr/sbin:/usr/bin
5 * * * * root /opt/edg/sbin/lcg-expiregridmapdir.pl -v >> /var/log/lcg-expiregridmapdir.log 2>&1