Kostas Georgiou wrote:
> On Mon, May 16, 2005 at 10:52:32AM +0100, owen maroney wrote:
>
>
>>Hi all,
>>
>>I don't want to give explicit details on this (public, archived) list,
>>but there is also a security related reason why a default yaim-installed
>>RB shouldn't really have account recycling going on.
>
>
> So what is the advice for admins and users at this point? If you have a
> yaim-installed RB are you supposed to disable it? If you are a user
> should you keep submitting jobs? How do you know if the RB that you
> use is secure at the moment? As an admin can you trust the proxies that
> are starting jobs in your cluster at the moment?
>
> Not providing any information is worst than any bug.....
Well anyone who is running a service that combines (a) home directories
to pool accounts (b) gsiftp server and (c) account recycling, might
want to ponder the implications of a message sent to LCG-ROLLOUT:
http://www.listserv.rl.ac.uk/cgi-bin/webadmin?A2=ind0504&L=LCG-ROLLOUT&P=R37311&I=-3&m=8305
--
=======================================================
Dr O J E Maroney # London Tier 2 Technical Co-ordinator
Tel. (+44)20 759 47802
Imperial College London
High Energy Physics Department
The Blackett Laboratory
Prince Consort Road, London, SW7 2BW
====================================
|