Testbed Support for GridPP member institutes [mailto:TB-
> [log in to unmask]] On Behalf Of John Gordon said:
> So how does one state that one wishes a job to run as a particular VO
> if one is a member of more than one?
This is something I've been banging on about for years, to almost zero effect. VOMS is about authorisation, it says what I'm *allowed* to do. However middleware developers frequently use it to infer what I *want* to do, despite the fact that that's a completely different question. My usual analogy is that if I had a US visa in my passport an airline would just automatically put me on a plane to the US, regardless of where I actually want to go. What the middleware should do is provide some independent way to specify the action you want - using the information in the proxy as a default may be reasonable, but it should be possible to override it. However, like many things, as long as it works well enough for LCG there is no pressure to improve it.
Stephen
PS slide 10:
http://117.103.105.177/MaKaC/materialDisplay.py?contribId=52&sessionId=121&materialId=slides&confId=3
|