Testbed Support for GridPP member institutes [mailto:TB-
> [log in to unmask]] On Behalf Of Christopher J. Walker
> Sent: 21 June 2011 14:23 said:
> One of the local T2K users ended up submitting jobs to the Tier-1
> without a production role - so they failed.
It's not entirely obvious why you say "so they failed", there's nothing intrinsic about the tier-1 that disallows non-production roles ...
> The easy solution now is to submit with the production role, but in the
> future when T2K gets more non production users, what's the best
> solution
> to ensure that jobs don't accidentally get sent to the Tier-1 when the
> user doesn't have the privileges to run there?
Ask the tier-1 to publish an AccessControlBaseRule like VOMS:/t2k.org/Role=production rather than VO:t2k.org.
Stephen
|