[OpenAFS] Help: Permission Denied using OpenAFS

[Rich Sudlow]

Lee Eric wrote:
> Thanks mate, but it seems I have got the tokens already.

I doubt it - to test make the first command of your
batch job "tokens"

my guess is that it won't run - if not

then the next step set the permissions on your
directory to
system:anyuser read

resubmit - it'll work - the ability to get and move your
tokens needs to be integrated with the scheduler when you
submit the job (As Derrick mentioned)

I believe most of us doing this with afs are using SGE
although I believe the group in France is using slurm.

Here at ND we grab the Kerberos ticket and use that
to get the token when the job runs.

Rich



> 
> [huli@submit ~]$ tokens
> 
> Tokens held by the Cache Manager:
> 
> Tokens for afs@herdingcat.internal [Expires Jul 19 15:27]
>    --End of list--
> [huli@submit ~]$ klist
> Ticket cache: FILE:/tmp/krb5cc_501_v2Rvg9
> Default principal: huli@HERDINGCAT.INTERNAL
> 
> Valid starting     Expires            Service principal
> 07/18/11 15:27:12  07/19/11 15:27:12
> krbtgt/HERDINGCAT.INTERNAL@HERDINGCAT.INTERNAL
> 	renew until 07/18/11 15:27:12
> 07/18/11 15:27:41  07/19/11 15:27:12
> host/server.herdingcat.internal@HERDINGCAT.INTERNAL
> 	renew until 07/18/11 15:27:12
> 07/18/11 15:27:52  07/19/11 15:27:12
> host/client1.herdingcat.internal@HERDINGCAT.INTERNAL
> 	renew until 07/18/11 15:27:12
> 07/18/11 15:27:58  07/19/11 15:27:12
> host/client2.herdingcat.internal@HERDINGCAT.INTERNAL
> 	renew until 07/18/11 15:27:12
> [huli@submit ~]$
> 
> Eric
> 
> On Wed, Jul 20, 2011 at 10:06 PM, Derrick Brashear <shadow@gmail.com> wrote:
>> i assume the grid scheduler gets/manages the tokens, so the openafs is
>> mostly out of scope. get tokens and you can write.
>>
>> On Wed, Jul 20, 2011 at 10:01 AM, Lee Eric <openlinuxsource@gmail.com> wrote:
>>> Hi,
>>>
>>> When I submit a job script from a user home directory I got error
>>> messages from OGS spool.
>>>
>>> 07/18/2011 15:29:55|  main|client2|E|shepherd of job 77.1 exited with
>>> exit status = 26
>>> 07/18/2011 15:29:56|  main|client2|E|can't open usage file
>>> "active_jobs/77.1/usage" for job 77.1: No such file or directory
>>> 07/18/2011 15:29:56|  main|client2|E|07/18/2011 15:29:54 [501:14814]:
>>> can't stat() "/afs/herdingcat.internal/home/huli/pool" as stdout_path:
>>> Permission denied KRB5CCNAME=none uid=501 gid=100 100 20008
>>>
>>> Here's the script content.
>>>
>>> #!/bin/bash
>>> #$ -N sleep_30s
>>> #$ -S /bin/bash
>>> #$ -wd /afs/herdingcat.internal/home/huli/pool
>>> date
>>> sleep 30
>>> date
>>>
>>> Here's the OpenAFS acl attributes of the work directory.
>>>
>>> [huli@submit ~]$ fs listacl /afs/herdingcat.internal/home/huli/pool
>>> Access list for /afs/herdingcat.internal/home/huli/pool is
>>> Normal rights:
>>>  system:administrators rlidwka
>>>  huli rlidwk
>>> [huli@submit ~]$
>>>
>>> Any idea?
>>>
>>> Thanks very much.
>>>
>>> Eric
>>> _______________________________________________
>>> OpenAFS-info mailing list
>>> OpenAFS-info@openafs.org
>>> https://lists.openafs.org/mailman/listinfo/openafs-info
>>>
>>
>>
>> --
>> Derrick
>>
> _______________________________________________
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info


-- 
Rich Sudlow
University of Notre Dame
Center for Research Computing - Union Station
310 West South St
South Bend, In 46601

(574) 631-7258 (office)
(574) 807-1046 (cell)