Skip Menu | Logged in as guest | Logout
 
Ticket metadata
Id: 4582
Status: resolved
Priority: 0/0
Queue: vdt-internal

Fixed in: 1.10.1r
Fix scheduled: CUR

Owner: Scot Kronenfeld
Requestors: Scot Kronenfeld
Cc:
AdminCc:

New reminder:

Created: Thu Dec 18 11:52:53 2008
Starts: Not set
Started: Fri Dec 19 13:13:40 2008
Last Contact: Not set
Due: Not set
Closed: Fri Dec 19 13:13:40 2008
Updated: Fri Dec 19 13:13:49 2008 by kronenfe



History Brief headersFull headers
Subject: Fix Glexec configuration in 1.10.1
Hi Skott.

We found out that glexec configuration distributed with VDT is
wrong and needs to be fixed.

The error is in the LCMAPS configuration file
/etc/glexec/lcmaps/lcmaps-suexec.db

The current one (in VDT is)
------------------------
path = MAGIC_VDT_LOCATION/MAGIC_VDT_PACKAGE/MAGIC_VDT_LIB/modules

good = "lcmaps_dummy_good.mod"
bad = "lcmaps_dummy_bad.mod"

gums = "lcmaps_gums.mod -exec
MAGIC_VDT_LOCATION/MAGIC_VDT_PACKAGE/contrib/gums_interface/getmapping"

glexec_get_account:
gums -> good | bad
------------------------

instead, it should be
------------------------
path = MAGIC_VDT_LOCATION/MAGIC_VDT_PACKAGE/MAGIC_VDT_LIB/modules

good = "lcmaps_dummy_good.mod"
bad = "lcmaps_dummy_bad.mod"

gums = "lcmaps_gums.mod -exec
MAGIC_VDT_LOCATION/MAGIC_VDT_PACKAGE/contrib/gums_interface/getmapping"

verifyproxy = "lcmaps_verify_proxy.mod"
"--allow-limited-proxy"
" -certdir /etc/grid-security/certificates"

glexec_get_account:
verifyproxy -> gums
------------------------
PS: This assumes the CA certificates are in /etc/grid-security/certificates.

Igor