It would be nice if permission problems related to access of directories / files in vomsdir could be logged as they represent obvious configuration errors leading to difficult to debug authentication / authorization problems.
In our case, after a series of upgrades directories and *.lsc files in vomsdir were not accessible to Apache anymore and only strace-ing Apache provided the necessary hints:
[pid 30911] stat("/etc/grid-security/vomsdir/ops", {st_mode=S_IFDIR|0750, st_size=4096, ...}) = 0
[pid 30911] open("/etc/grid-security/vomsdir/ops", O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC) = -1 EACCES (Permission denied)
It would be nice if permission problems related to access of directories / files in vomsdir could be logged as they represent obvious configuration errors leading to difficult to debug authentication / authorization problems.
In our case, after a series of upgrades directories and *.lsc files in vomsdir were not accessible to Apache anymore and only strace-ing Apache provided the necessary hints:
[pid 30911] stat("/etc/grid-security/vomsdir/ops", {st_mode=S_IFDIR|0750, st_size=4096, ...}) = 0
[pid 30911] open("/etc/grid-security/vomsdir/ops", O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC) = -1 EACCES (Permission denied)