Hi Fawad,
> # For each queue define a _GROUP_ENABLE variable which is a list
> # of VO names and VOMS FQANs
> # Ex.: MYQUEUE_GROUP_ENABLE="ops atlas cms /cms/Higgs"
> # In DNS like VO names dots and dashes shoul be replaced with underscore:
> # Ex.: MYQUEUE_GROUP_ENABLE="my.test-queue"
> # MY_TEST_QUEUE_GROUP_ENABLE="ops atlas"
> ATLAS_GROUP_ENABLE="/atlas/ROLE=lcgadmin"
> ALICE_GROUP_ENABLE="/alice/ROLE=lcgadmin"
> LHCB_GROUP_ENABLE="/lhcb/ROLE=lcgadmin"
> CMS_GROUP_ENABLE="/cms/ROLE=lcgadmin"
> DTEAM_GROUP_ENABLE="/dteam/ROLE=lcgadmin"
> BIOMED_GROUP_ENABLE="/biomed/ROLE=lcgadmin"
> OPS_GROUP_ENABLE="/ops/ROLE=lcgadmin"
As Alessandro pointed out, those definitions are incomplete.
For every queue you need to put _all_ FQANs that must have access.
For example:
------------------------------------------------------------------
$ grep atlas groups.conf
"/atlas/ROLE=lcgadmin":::sgm:
"/atlas/ROLE=production":::prd:
"/atlas/ROLE=pilot":::pilot:
"/atlas"::::
------------------------------------------------------------------
Therefore:
------------------------------------------------------------------
ATLAS_GROUP_ENABLE="
/atlas/ROLE=lcgadmin
/atlas/ROLE=production
/atlas/ROLE=pilot
/atlas
"
------------------------------------------------------------------
YAIM cannot do that automatically, since it cannot know which queues
you have for which kinds of users.
|