Hi Skott.
We found out that glexec configuration distributed with VDT is
wrong and needs to be fixed.
The error is in the LCMAPS configuration file
/etc/glexec/lcmaps/lcmaps-suexec.db
The current one (in VDT is)
------------------------
path = MAGIC_VDT_LOCATION/MAGIC_VDT_PACKAGE/MAGIC_VDT_LIB/modules
good = "lcmaps_dummy_good.mod"
bad = "lcmaps_dummy_bad.mod"
gums = "lcmaps_gums.mod -exec
MAGIC_VDT_LOCATION/MAGIC_VDT_PACKAGE/contrib/gums_interface/getmapping"
glexec_get_account:
gums -> good | bad
------------------------
instead, it should be
------------------------
path = MAGIC_VDT_LOCATION/MAGIC_VDT_PACKAGE/MAGIC_VDT_LIB/modules
good = "lcmaps_dummy_good.mod"
bad = "lcmaps_dummy_bad.mod"
gums = "lcmaps_gums.mod -exec
MAGIC_VDT_LOCATION/MAGIC_VDT_PACKAGE/contrib/gums_interface/getmapping"
verifyproxy = "lcmaps_verify_proxy.mod"
"--allow-limited-proxy"
" -certdir /etc/grid-security/certificates"
glexec_get_account:
verifyproxy -> gums
------------------------
PS: This assumes the CA certificates are in /etc/grid-security/certificates.
Igor