LHC Computer Grid - Rollout
> [mailto:[log in to unmask]] On Behalf Of
> Maarten Litmaath, CERN said:
> On Sat, 14 May 2005, Jeff Templon wrote:
> > 1) manually edit the grid-mapfile to include only the users
> you like.
> >
> > 2) create your own "auth VO" and use that one instead of
> the LCG one.
>
> NO! Both would cause other people's jobs to be still
> directed to the site and subsequently unexpectedly fail!
Is it still supported that the accesscontrolbaserule can be a list of
DNs rather than a VO name? I think it would be worth keeping that as an
option. You could also think about defining a local VO.
However, I didn't suggest those because the original mail said "If
site manajer wants to restrict the CE for the jobs of their own site" -
I don't know if that's what was actually meant, but to me that's talking
about *where* the jobs originate from rather than *who* they come from,
and only an RB knows the "where".
Stephen
|