Hi Stephen,
I think you are a victim of the inherited group.conf file.
Mine looks like this, i.e. very close to the yaim one:
"/atlas/ROLE=lcgadmin":::sgm:
"/atlas/ROLE=production":::prd:
"/atlas/ROLE=pilot":::pilot:
"/atlas/*"::::
"/atlas"::::
"/biomed/ROLE=lcgadmin":::sgm:
"/biomed/ROLE=production":::prd:
"/biomed/*"::::
"/biomed"::::
"/calice/ROLE=lcgadmin":::sgm:
"/calice/ROLE=production":::prd:
"/calice/*"::::
"/calice"::::
"/camont/ROLE=lcgadmin":::sgm:
"/camont/ROLE=production":::prd:
"/camont/*"::::
"/camont"::::
"/cedar/ROLE=lcgadmin":::sgm:
"/cedar/ROLE=production":::prd:
"/cedar/*"::::
"/cedar"::::
"/cms/ROLE=lcgadmin":::sgm:
"/cms/ROLE=production":::prd:
"/cms/ROLE=hiproduction":::prd:
"/cms/ROLE=priorityuser":::pri:
"/cms/*"::::
"/cms"::::
"/dteam/ROLE=lcgadmin":::sgm:
"/dteam/ROLE=production":::prd:
"/dteam/*"::::
"/dteam"::::
[etc]
Technically the VOs are meant to fill out the CIC portal correctly, in
practice the CIC portal is often left behind a bit.
Cheers,
Daniela
On 2 August 2012 16:24, Stephen Jones <[log in to unmask]> wrote:
> Hi all,
>
> I have another question for the GridPPers who have been here for a while and
> who know the history of things. There is a file called
> /opt/glite/etc/groups.conf that contains a set of FQANs from the various VOs
> that we support. The groups.conf file specifies the local accounts the user
> should be mapped to. Our file contains only two types of entry; a standard
> one, and a pilot one for some experiments, i.e.:
>
> # Standard Setup (many)
> "/somevo/sgm":::sgm:
> "/somevo/lcgprod":::prd:
> "/somevo/ROLE=lcgadmin":::sgm:
> "/somevo/ROLE=production":::prd:
> "/somevo"::::
> "/somevo/*"::::
>
> # Pilot Setup (alice, atlas, cms, lhcb, ops)
> "/anothervo/sgm":::sgm:
> "/anothervo/lcgprod":::prd:
> "/anothervo/ROLE=lcgadmin":::sgm:
> "/anothervo/ROLE=production":::prd:
> "/anothervo/ROLE=pilot":::pilot:
> "/anothervo"::::
> "/anothervo/*"::::
>
> But the VOID Cards (CIC Portal) specify a different set of FQANs. For
> example, ATLAS says:
>
> /atlas/Role=pilot
> /atlas/Role=lcgadmin
> /atlas/Role=production
> /atlas
> /atlas/lcg1
>
> There is an obvious, but partial, corelation between these sets of data.
> Adding to the confusion, the Yaim guide gives this example, which fits
> neither!
>
> "/dteam/ROLE=lcgadmin":::sgm:
> "/dteam/ROLE=production":::prd:
> "/dteam"::::
>
>
> (https://twiki.cern.ch/twiki/bin/view/LCG/YaimGuide400#groups_conf)
>
> So that's the problem - three standards; anyone know which is correct? And,
> once we know, where should this be "defined". I'd be grateful if anyone can
> throw some light on this problem. Is it a convention at present, or (if not)
> how do people set this data?
>
>
> Cheers,
>
>
> Steve
>
> --
> Steve Jones [log in to unmask]
> System Administrator office: 220
> High Energy Physics Division tel (int): 42334
> Oliver Lodge Laboratory tel (ext): +44 (0)151 794 2334
> University of Liverpool http://www.liv.ac.uk/physics/hep/
--
Sent from the pit of despair
-----------------------------------------------------------
[log in to unmask]
HEP Group/Physics Dep
Imperial College
Tel: +44-(0)20-75947810
http://www.hep.ph.ic.ac.uk/~dbauer/
|