Ciao Rosario,
>>The accounting does not care about the exact names or whether
>>sgm/prd users have a single static or multiple pool accounts.
>>
>
>
> Unfortunately that is only true if the gatekeeper's log file (the one
> that maps grid-related information to local job IDs; patch #898) contains
> an entry for the job executed by an sgm/prd pool account (usually it should,
> but their might e.g. be problems to write the entry), and only if that entry
> contains the User FQAN. Then for that job the VO can without doubt be
> determined by means of the FQAN. But if the FQAN (or worse the entire
> entry) is not present then it gets difficult for the accounting sensors to
> determine the VO from the pool account. For ordinary pool accounts
> ("alice007") or the static sgm/prd accounts ("alicesgm", "aliceprd") we
> had no problems to extract the VO name from the account. For sgm/prd pool
> accounts such as "alicesgm007" as well it would be fairly easy (although
> you might get in trouble when you have a VO who's name ends in sgm or prd
> ...), but if sgm/prd pool accounts start having arbitray prefixes
> ("alisgm007", "sgmalicepoolwhatever007") than this may indeed be a problem
> for accounting.
>
> If sgm/prd pool accounts cannot have prefix "<VO>sgm/prd" for security
> reasons, then at least a common specification should be agreed apon, this
> specification should
>
> a) contain the entire VO name (so that a software can extract easily it)
> b) not conflict among different VOs (and possibly not with thinkable
> static, personal user accounts)
>
> Something like: "sgmalice007" might be ok (if no VO name ever starts with
> sgm...), but that should then be used, if possible, for all sites. To
> avoid arbitrary prefixes the accounting sensors cannot know anything about
> ...
No, you cannot count on the local account name format in any way.
Until now you were lucky that most sites have chosen "easy" names
that allow you to determine the VO ad hoc.
How does DGAS deal with VO names that look like Internet domains?
That will be the standard...
If you do not have the VO from the grid-jobmap file, you should determine
it from a configuration file that maps each account to its VO.
Cheers,
Maarten
|