Hi Ewan,
> > > Are they running on dedicated interface nodes?
> > Not for CephFS, we are mounting it directly on WNs with updated kernels.
> > We have started thinking about providing xrootd and WebDAV via dedicated
> > interface nodes.
> >
> So it's purely local atm? Something running on a RAL WN can see it as a
> filesystem, but there's no remote access? How does the security/authentication
> work with that, particularly for writes?
Correct, we're testing sharing file-system functionality between ARC CEs and VO jobs at the moment,
Andrew Lahiff can say more about that than me though.
The security model is simple, it's based on POSIX permissions. :-P
- James--
Scanned by iCritical.
|