Project

General

Profile

Bug #9209

Failed to Add User to Group

Added by Chih-Hao Huang over 4 years ago. Updated over 4 years ago.

Status:
Resolved
Priority:
Normal
Start date:
06/15/2015
Due date:
06/22/2015
% Done:

100%

Estimated time:
8.00 h
Spent time:
Duration: 8

Description

-bash-3.2$ sudo /opt/vulcan/groupCMSUser.sh asantra4 lpcgg
Adding in vulcan (for multiple additions you can run the script once):
Added membership to table.
The script for action add_acct on resource 18 is not active.
Added acct: Acct for user 47303 (arka santra) on resource FNAL_CMS_T1_bluearc with group lpcgg and identifier /uscms/home/.
The script for action add_acct on resource 18 is not active.
Added acct: Acct for user 47303 (arka santra) on resource FNAL_CMS_T1_bluearc with group lpcgg and identifier /uscms_data/home/.
Now you can run: /opt/vulcan/v1.5/scripts/cmsrocks1_CCDBA_addUser.sh -e /uscms/home/ -c asantra4 -i 47303
Documentation: https://cmswiki.fnal.gov/twiki/bin/view/CMST1/CCDBaHome
Added acct: Acct for user 47303 (arka santra) on resource FNAL_CMS_T1_ccdbluearc with group lpcgg and identifier /uscms/home/.
Now you can run: /opt/vulcan/v1.5/scripts/cmsrocks1_EOS_addUser.sh -c asantra4 -i 47303 -h /eos/uscms/store/user/asantra4 -g 9898 -s /bin/bash -u 47303
Documentation: https://cmswiki.fnal.gov/twiki/bin/view/CMST1/ManagementEOS
Added acct: Acct for user 47303 (arka santra) on resource FNAL_CMS_T1_zeos with group lpcgg and identifier a.
No script found for action add_acct on resource 3.
Added acct: Acct for user 47303 (arka santra) on resource FNAL_CMS_T1_rocks with group lpcgg and identifier a.
The script for action add_acct on resource 13 is not active.
Added acct: Acct for user 47303 (arka santra) on resource FNAL_CMS_T1_zdcache with group lpcgg and identifier a.
The script for action add_acct on resource 5 is not active.
Added acct: Acct for user 47303 (arka santra) on resource FNAL_CMS_T1_zcmswn with group lpcgg and identifier a.
The script for action add_acct on resource 15 is not active.
Added acct: Acct for user 47303 (arka santra) on resource FNAL_CMS_T1_zlpcwn with group lpcgg and identifier a.
No script found for action add_acct on resource 8.
Added acct: Acct for user 47303 (arka santra) on resource FNAL_CMS_T1_cmssrv_ce with group lpcgg and identifier a.
Now you can run: /opt/vulcan/v1.5/scripts/cmsrocks1_CMSLPC_addUser.sh -c asantra4 -i 47303 -h /uscms/home/asantra4 -g 9898 -s /bin/tcsh -u 47303
Documentation: should work like doacct.py for the UIs
(Hypothetically) running /opt/vulcan/v1.5/scripts/cmsrocks1_CMSLPC_addUser.sh -c asantra4 -i 47303 -h /uscms/home/asantra4 -g 9898 -s /bin/tcsh -u 47303 on resource 4.

Returns:
Add/Auth account , -c asantra4 -i 47303 -h /uscms/home/asantra4 -g 9898 -s /bin/tcsh -u 47303
executing /opt/vulcan/v1.5/scripts/generateAllCMSPasswd.sh for generating the text passwds&groups
Generating WNs passwd&group - 50 s Password: 2376 Group: 156
Generating CEs passwd&group - 51 s Password: 2374 Group: 158
Generating UIs passwd&group - 42 s Password: 2373 Group: 110
Generating UWNs passwd&group - 41 s Password: 2373 Group: 110
Generating rocks passwd&group - 42 s Password: 2384 Group: 113
Generating dCache passwd&group - 41 s Password: 2372 Group: 111
Generating EOS passwd&group - 40 s Password: 2373 Group: 109
Generating full passwd&group
Pushing the password file to cmsrocks1
executing /opt/vulcan/v1.5/scripts/doacct-vulcan.py --411 for pushing to nodes
Pushing to 411 directory.

scp of FNAL_CMS_T1_zcmswn.psswd.full to cmssrv26 in cmswn did not work. Investigate.

Permission denied (gssapi-keyex,gssapi-with-mic).
fatal: The remote end hung up unexpectedly
[master e082d79] vulcan - update on Fri Jun 12 14:10:04 CDT 2015
Committer: root <>
Your name and email address were configured automatically based
on your username and hostname. Please check that they are accurate.
You can suppress this message by setting them explicitly:

git config --global user.name "Your Name" 
git config --global user.email

After doing this, you may fix the identity used for this commit with:

git commit --amend --reset-author
9 files changed, 9 insertions(+), 7 deletions(-)
Permission denied (gssapi-keyex,gssapi-with-mic).
fatal: The remote end hung up unexpectedly
User already has a home dir on BA
executing /root/bin/doacct.py -a asantra4 for old doacct sync
Adding user to group.
Building wc1 group file.
Building lpc group file.
Group files created.

Error:
Permission denied (gssapi-with-mic).
lost connection

Return code:
0

Added acct: Acct for user 47303 (arka santra) on resource FNAL_CMS_T1_cmslpc with group lpcgg and identifier a.
Invoking previous doacct for synchronization
Adding user to group.
Building wc1 group file.
Building lpc group file.
Group files created.
Pushing to EOS:
Setup group account , -c lpcgg
Creating EOS group home directory
To be executed on EOS MGM:
/opt/rocks/bin/411get --all ;
/usr/bin/eos -b 'attr -r set sys.acl=g:5063:rx!d!u,u:5221:rwx+d+u,u:7889:rwx+d+u,u:11425:rwx+d+u,u:12124:rwx+d+u,u:12772:rwx+d+u,u:43040:rwx+d+u,u:43083:rwx+d+u,u:45439:rwx+d+u,u:45743:rwx+d+u,u:47303:rwx+d+u /eos/uscms/store/user/lpcgg' ;
Run the commands? (CTR-C) to exit

Permission denied (gssapi-keyex,gssapi-with-mic).

History

#1 Updated by Chih-Hao Huang over 4 years ago

  • Status changed from New to Resolved
  • % Done changed from 0 to 100

This is a general doacct-vulcan.py issue.
Another task has been created for this. (Bug #9313)

It seems like the connection to cmssrv26 was dropped.
Could it have to do with recent "broken pipe" issues reported by users?

Anyway, such failure would be automatically fixed by the next time when a user is successfully created.
User asantra4 is in lpcgg group.



Also available in: Atom PDF