Hi David
I'll look into what was mentioned when. We received a ROC notification
last week and responded asking what sort of timeline this new VO is
working to and pointed out that sites would not be asked (in the UKI
region at least) to make rapid changes. The VO was probably approved in
principle at a ROC manager's meeting because it makes sense to limit the
number of users who have access to ALL resources in the way the current
dteam VO allows. I need to check at what meeting this was discussed (and
whether I was present) to give you a definitive answer as to whether I
was at fault not passing information on and consulting you.
On a semi-related matter we have been asked to try to deal with
deployment issues in the ROC first before adding to the traffic on
LCG-ROLLOUT. I notice that you have recently raised several matters
directly on LCG-ROLLOUT without first getting support in the UK. Do you
feel that this is essential to continue to go directly to LCG-ROLLOUT
and if so why?
Thanks,
Jeremy
-----Original Message-----
From: LHC Computer Grid - Rollout
[mailto:[log in to unmask]] On Behalf Of David McBride
Sent: 04 April 2006 17:03
To: [log in to unmask]
Subject: Re: [LCG-ROLLOUT] Please install dedicated VO for monitoring
and operations (OPS) in your site
Maite Barroso Lopez wrote:
> The creation of this new dedicated VO for monitoring and operations
> (OPS) has been discussed at the weekly operations meeting and approved
> by the ROC managers.
Right. Perhaps the ROC managers should discuss such proposed changes
with the sites they represent before accepting on our behalf. :/
Adding, removing, or otherwise modifying the set of VOs supported at a
given site is a seriously non-trivial operation. Given that an
equivilent effect should be achievable by restricting membership of the
DTEAM VO, it also seems like an unnecessary change.
>> OPS Security AUP
[...]
>> During all times at which Grid resources are being utilised in
>> monitoring or any other tasks relevant to the goal of the VO, the
Members
>> and Managers of the VO agree to be bound by the Grid Acceptable Usage
Rules, VO
>> Security Policy and other relevant Grid Policies, and to use the Grid
>> only in the furtherance of the stated goals of the VO.
The condition at the start of this paragraph should be dropped. Members
and Managers of this VO should be bound by the terms of the appropriate
policy documents at *all* times, not simply if they happen to be engaged
in tasks "relevant to the goal of the VO".
Cheers,
David
--
David McBride <[log in to unmask]>
Department of Computing, Imperial College, London
|