This email from raja.nandakumar@cern.ch originates from outside Imperial. Do not click on links and attachments unless you recognise the sender. If you trust the sender, add them to your safe senders list to disable email stamping for this address.

 

Hi Daniela,

Thanks! This is better - at least we seem to be getting somewhere. The error now is


Trying next server for gridpp.
Creating temporary proxy  Done
Contacting  voms03.gridpp.ac.uk:15000 [/C=UK/O=eScience/OU=Imperial/L=Physics/CN=voms03.gridpp.ac.uk] "gridpp" Failed
; StdErr: ..............................................................................
Error: gridpp: Unable to satisfy G/gridpp/migdal/Riole=production request!
.................................................
Error: gridpp: Unable to satisfy G/gridpp/migdal/Riole=production request!
......................
Error: gridpp: Unable to satisfy G/gridpp/migdal/Riole=production request!
....................................
Error: gridpp: Unable to satisfy G/gridpp/migdal/Riole=production request!
.............................................
Error: gridpp: Unable to satisfy G/gridpp/migdal/Riole=production request!
........................
Error: gridpp: Unable to satisfy G/gridpp/migdal/Riole=production request!

None of the contacted servers for gridpp were capable
of returning a valid AC for the user.
)

Are you sure you are properly registered in the VO?


Cheers,
Raja.

On 04/10/2022 11:36, Daniela Bauer wrote:
That's because I actually called the group gridpp_migdal_production, but apparently I am incapable of writing a coherent email this morning.
I also need to make a sub-directory in the file catalog, preferably only writable by that goup.

Cheers,
Daniela

On Tue, 4 Oct 2022 at 11:30, Raja Nandakumar <raja.nandakumar@cern.ch> wrote:
Hi Daniela,

Thanks for the quick response! I get an error

Requested group gridpp_migdal_user is not valid for DN /DC=ch/DC=cern/OU=Organic Units/OU=Users/CN=nraja/CN=471708/CN=Raja Nandakumar

Note - I believe that the role needed in Antares and RAL PPD dCache is Production (not user).

Thanks and Cheers,
Raja.

On 04/10/2022 10:57, Daniela Bauer wrote:
Hi Raja,

We've never worked with groups on our DIRAC instance, but we have a couple of VOs that use a production role. To be honest I am not sure how well groups work, they seem to have fallen out of fashion.
This needs to be set up by hand, so I can try to set up this group/role for you. I've made a group called gridpp_migdal_user and put you and Chris Brew in it (copied form the gridpp voms server).
Could you try it out ? ( dirac-proxy-init -g gridpp_migdal_user)
On a more fundamental level, I'm not sure the gridpp VO is meant to be used for production level work, it's by construction open to all.

Regards,
Daniela

On Tue, 4 Oct 2022 at 10:29, Raja Nandakumar <raja.nandakumar@cern.ch> wrote:
Hello Daniela and Simon,

I am a member of GridPP VO. I would like to create a proxy for the Migdal group, with production role. I would like to use this to then register the Migdal files on PPD dCache with the GridPP instance at Imperial.

How would I go about creating the Dirac proxy for this? I tried something along the following lines but it did not work. Migdal is not a VO on its own, but is a group within the gridpp VO.

 dirac-proxy-init -g gridpp.migdal_user -M gridpp:/gridpp/migdal/Role=production -U

I am obviously trying to replicate the following voms-proxy-init command within the Dirac environment

voms-proxy-init --voms gridpp:/gridpp/migdal/Role=production  --valid 168:0

Any help on this would be wonderful!

Thanks and Cheers,
Raja.


--

-----------------------------------------------------------
daniela.bauer@imperial.ac.uk
HEP Group/Physics Dep
Imperial College
London, SW7 2BW
Tel: Working from home, please use email.
http://www.hep.ph.ic.ac.uk/~dbauer/



--

-----------------------------------------------------------
daniela.bauer@imperial.ac.uk
HEP Group/Physics Dep
Imperial College
London, SW7 2BW
Tel: Working from home, please use email.
http://www.hep.ph.ic.ac.uk/~dbauer/