Ulrich Schwickerath wrote:
> At CERN we have since more than a year alicesgm, atlassgm, lhcbsgm and
> so on, and we recently got complains about wrong mappings. So this is
See my other reply in this thread: the old static accounts are "OK".
The problems you saw were due to unrelated issues.
> the explanation ? What are the implications for things like accounting
The accounting does not care about the exact names or whether sgm/prd
users have a single static or multiple pool accounts.
> if we change names ? Would it not be more efficient to fix the software
> instead of asking the sites _now_ to change the way they manage their
> pool accounts, which causes a lot of administrative overhead ?
We did fix the software: to remove a security flaw that has been waiting
for 3 years to be fixed. Various things went wrong for various reasons
and were subsequently corrected, but the proposal still stands.
|