Kostas, Sergio's explanation is correct. The software doesn't have to run as root but in its current packaging it does, thus my request to file this as a bug (which I just did now). cheers, German On Tue, 7 Jun 2005, Sergio Fantinel wrote: > Hi Kostas, > Kostas Georgiou wrote: > > On Tue, Jun 07, 2005 at 12:05:23PM +0200, Sergio Fantinel wrote: > > > > > > > Hi Kostas, > > > I would like to add some more words to this. > > > We use edg-fmon-server to collect GridICE information at site level. > > > The strange thing I see is that it is running on the CE! > > > By default (LCG standard distribution) it runs on an SE to collect the > > > info and then publish them through a gris. On each host monitored > > > (services nodes), only the edg-fmon-agent service need to be active! > > > > > > Is there any reason why it needs to run as root though? Is there any > > client authentication or does it allow everyone in the world to write > > to it? > > It is better to route this questions to German. About the auth I think LeMON > (ex. fmon) trust the LAN and leave to the site administration blocking access > by firewalls and/or iptables host config. But German I think can correct/add > more info on this. > Regards, > Sergio > > > > > Cheers, > > Kostas > > > > -- ------------------------------------------------------ German Cancio Melia IT/FIO CERN CH-1211 Geneve 23 tel. +41 2276 70921 mail: [log in to unmask] ------------------------------------------------------