Il 15/02/2012 12:38, Stephen Burke ha scritto:
> LHC Computer Grid - Rollout [mailto:[log in to unmask]]
>> On Behalf Of Arnau Bria said:
>> After removing last line from groups, and removing 'atlas entry' from
>> QUEUE_ENABLE:
> groups.conf and *_GROUP_ENABLE are doing different things; the first one is about unix group mapping and the second one is about access to the CE. For the GROUP_ENABLE, once you've specified a VO name then everyone in that VO is allowed access so allowing extra FQANS in the same VO doesn't add anything. So normally GROUP_ENABLE will just have VO names, unless you want to restrict access to particular groups or roles only. Hence using something like /atlas is fairly pointless since everyone in atlas is in the /atlas group, which is why yaim has the warning.
>
Hi all,
actually in the GROUP_ENABLE variable you have to set also the FQANS of
the several VOs otherwise yaim won't enable the special users to submit
on that particular queue
If you set only the VO names, the settings like the following aren't be done
set queue cert acl_groups += prddteam
set queue cert acl_groups += sgmdteam
set queue cert acl_groups += sgmdinfngrid
set queue cert acl_groups += pilinfngrid
set queue cert acl_groups += sgminfngrid
set queue cert acl_groups += pilops
set queue cert acl_groups += sgmops
this is explained also in the guide
https://twiki.cern.ch/twiki/bin/view/LCG/Site-info_configuration_variables
cheers,
Alessandro
--
Dr. Alessandro Paolini
INFN - CNAF
Viale Berti Pichat 6/2
40127 Bologna
Italy
tel: +39 051 6092723
fax: +39 051 6092916
ICQ: 192172027
skype: alex.paolini
**********************
"credo nel potere del riso e delle lacrime"
"come antidoto all'odio ed al terrore"
"un giorno senza un sorriso"
"è un giorno perso">>> Charlie Chaplin
|