> -----Original Message-----
> From: Testbed Support for GridPP member institutes
>
> Testbed Support for GridPP member institutes
> > [mailto:[log in to unmask]] On Behalf Of Ewan MacMahon said:
> > It sounds rather as though the idea of requiring sites to install
> > glexec SUID is being resurrected,
>
> Yes, it is (well, it never really went away).
>
Well, the quoted policy of 'there must be a choice' certainly made it
look
like it went away. What was that supposed to mean if it didn't mean what
it said?
> > Can someone please clarify whether we're being asked to do the
> > impossible in installing glexec SUID, or whether the agreed
> > compromise still holds?
>
> You will probably get a more official response from John
> Gordon, but the situation seems to be that LCG are proposing
> to make it mandatory for all LCG sites to install glexec
> SUID, and will then see how many sites refuse to do it as a
> matter of principle.
>
Large chunks of SouthGrid at least are going to be unable to comply as a
matter of practice. Strong though the general sense of revulsion is,
this
isn't just about the principle - we simply do not have root on all our
worker nodes, and cannot do this. This is not something that can be
overridden or ignored - if GridPP/the LCG wants to use university
clusters
such as those at Bristol, Cambridge, and Birmingham then there has to be
a non-SUID option. What we need is for the PMB to listen to the site
admins
and feed these facts upwards.
Given the near universal and quite vehement condemnation from the site
admins
and various coordinators I'm rather surprised that that isn't what's
happening
already.
Ewan
|