Markus,

I attended the SC3 meeting in June at CERN and you attended it too. I guess 
you remember there was a very hot discussion on VO boxes with strong 
reservations from various sites (including CERN). Experiments are pushing 
this boxes very hard but I don't think there was any real consensus for the 
long term. It seemed unavoidable in the short term but required more 
discussions for the future, based in particular on first deployment during 
SC3.

As a T2 representative, I'm still very reluctant to have one box dedicated 
to each VO on our site...

Michel

--On mardi 6 septembre 2005 15:31 +0100 "Gordon, JC (John)" 
<[log in to unmask]> wrote:

> Markus, it would be good to hear from Jamie and Ian on the decision. The
> agreement of Tier1s has been with distinct reservations as we still
> don't know what the VOs will do with these boxes. Alice have given some
> information - lists of software but not details of how they will be used
> - and even if we are happy with what runs at first, there seems no
> control over what happens subsequently. So not to be obstructive we have
> agreed but are keeping a close watch and will take action if we see
> problems.
>
> RAL have set up a VObox for Alice although we still have a firewall
> problem. The other UK sites will wait and see how we get on. For the
> moment we are happy to talk about HOW but I am sure we won't be the only
> site who considers WHETHER if VOs are felt to be abusing the privilege.
>
> I am not sure I agree with you on the VO box being the more secure way
> of working. By having the VO box installed you have persuaded sites to
> put aside their security concerns. If the VOs had to justify what they
> were doing sites would feel happier that they weren't installing some
> trojan that will cause problems with their site security people.
>
> I don't mean that VOs should negotiate with each site but I would like
> to think that someone somewhere knew what was being installed and had at
> least thought about possible problems and could reassure the rest of us.
> I don't really mind who this is. It could be you or some other person
> who we all respect and who is independent of the experiments.
>
> John
>
>
>
>> -----Original Message-----
>> From: LHC Computer Grid - Rollout
>> [mailto:[log in to unmask]] On Behalf Of Markus Schulz
>> Sent: 06 September 2005 12:33
>> To: [log in to unmask]
>> Subject: Re: [LCG-ROLLOUT] LCG-2_7_0 sooner or later ....
>>
>> Hi Alessandra,
>> yes, there is additional documentation made available by Simone
>> Campana in wiki. http://goc.grid.sinica.edu.tw/gocwiki/VOBOX_HowTo
>> In addition the release note contained quite some material.
>>
>> We can discuss the box there, however for the Tier-1 centers
>> the fact
>> that there are VO-BOXES has been already decided and agreed by the
>> site managers of the T1s.  Jamie and Ian can give you more
>> details on
>> the state of this decision.
>>
>> If we discuss this at the workshop we must ensure that we don't try
>> to revert this decision. The discussion has to be focused on the
>> "how" and not on the "wether".
>>
>>
>>                    markus



     *************************************************************
     * Michel Jouvin                 Email : [log in to unmask] *
     * LAL / CNRS                    Tel : +33 1 64468932        *
     * B.P. 34                       Fax : +33 1 69079404        *
     * 91898 Orsay Cedex                                         *
     * France                                                    *
     *************************************************************