Hi,
I'm not sure if I'm the first to see this in this community but this was
the recommended forum for my query!...
I have a UKHEP certificate which I have used to register with the
following VO's:
User Guidelines VO at in2p3
Babar VO
gridpp Testbed VO
I have also a eScience Certificate which until Friday was registered only
with the Babar VO. It is now registered with the User Guidelines
VO.
There are two points I need to make.
1, It took me a week to get into the User Guidelines VO with my new
certificate given that I already had an entry with my old certificate. I
think however that Sophie Nicoud is in contact with John Gordan about
automating this process.
2, It seems that various sites are setup differently with how they handle
VO membership for mkgridmap:
Manchester's BaBar Farm uses only the BaBarVO having only the line
group ldap://babar-vo.gridpp.ac.uk/ou=babar,dc=gridpp,dc=ac,dc=uk .babar
in the mkgridmap.conf file
Bristol Farm via bottom
group ldap://babar-vo.gridpp.ac.uk/ou=babar,dc=gridpp,dc=ac,dc=uk .babar
group ldap://grid-vo.nikhef.nl/ou=apptb,o=gdmpservers,dc=eu-datagrid,dc=org gdmp
group ldap://vo.gridpp.ac.uk/ou=gdmpservers,dc=gridpp,dc=ac,dc=uk gdmp
gmf_local /opt/edg/etc/grid-mapfile-local
RAL's farm via gppce04
group ldap://babar-vo.gridpp.ac.uk/ou=babar,dc=gridpp,dc=ac,dc=uk .babar
auth ldap://marianne.in2p3.fr/ou=People,o=testbed,dc=eu-datagrid,dc=org
So to run at Manchester I need to do the .babar-grid-certid thing.
To run at RAL I also need to have signed the Use Conditions for EDG.
At Bristol I must not use UKHEP... I'm not entirely sure why but
eScience cert now maps me to babar001 and my UKHEP mapped me to a
gridppXXX account a couple of weeks ago (now not to any account though
this might be due to an infrequent ldap search?). Only
babarXXX accounts have the correct setup to read home-dir across to the
WNs.
I have not successfully run elsewhere in the UK.
I think there needs to be a policy about resources having a uniform way of
dealing with multiple VO's so that /at least/ primarily Babar resources
map babar VO members first in the mapfile and other's second; and other
resources other general configurations. I think this should cure quite a
lot of headaches later on while we're still waiting for VOMS etc to come
along.
On a completely different note:
At least one machine I run to is set up so that if you GJR/S to fork
you get one home directory and if you GJS/R to pbs you get another. This
is kind of weird and unexpected! There may be use cases for having to mix
use of these two jobmanagers up!
Mike
--
/------------------------------oOo------------------------------\
|Mike AS Jones, Grid and eScience Consultant|
|SVE, G49.3, Manchester Computing, The University of Manchester|
|Tel: (+44 161 27) 57038, Fax: 56800, http://www.sve.man.ac.uk |
\---------------------------------------------------------------/
|