LHC Computer Grid - Rollout
> [mailto:[log in to unmask]] On Behalf Of Mario David said:
> My point starts in what I don't understand, for example I
> don't know if the
> value of
> GlueSARoot is the vo name/pooled account/group name (does it matter?)
> GlueServiceAccessControlRule (same thing)
> GlueSAAccessControlBaseRule (same thing)
> ...
The access control base rules should be matching the VO name. The SA
root in theory can say anything, it's just a convention that the
directory is named for the VO. However, whenever you have this kind of
situation there is always the risk that some piece of software is
*assuming* that the directory name is the VO name, even though it
shouldn't. Anyway it shouldn't be the group name.
> what about other Glue variables, or things inside configuration files?
The only thing I'm aware of that makes any assumption about the group
name is the APEL accounting package, but I think it can cope with a
different mapping. However, you will never know for sure until you try
it and see what happens!
Stephen
|