Hi Matt,
From the policy point of view:
1) The EGI Multi-User Pilot Job policy says:
"The pilot job framework must meet the fine-grained monitoring and control requirements defined in the Grid Security Traceability and Logging policy. The use of gLexec in identity switching-mode is one solution that meets these needs."
2) The WLCG Management Board decided to "suspend" this policy requirement in some cases - for a limited period of time, while experiments deploy glExec. There is no new WLCG policy statement as such.
Regards
Dave
------------------------------------------------
Dr David Kelsey
Particle Physics Department
STFC Rutherford Appleton Laboratory
Chilton, DIDCOT, OX11 0QX, UK
e-mail: [log in to unmask]
Tel: [+44](0)1235 445746 (direct)
Fax: [+44](0)1235 446733
------------------------------------------------
-----Original Message-----
From: Testbed Support for GridPP member institutes [mailto:[log in to unmask]] On Behalf Of Matt Doidge
Sent: 04 August 2015 15:06
To: [log in to unmask]
Subject: Re: glexec for small VOs
Hello all,
Thinking on this a little more I believe that this, err, request, may stray *slightly* from WLCG policy on the matter, in that we're being asked to implimate glexec user switching or bust. IIRC (and I could be wrong), the policy from WLCG allows for glexec(y) stuff to run in "logging-only" mode - as a second-best, we'd rather you didn't but it's better then naught - option.
AFAICS that *isn't* an viable option in this instance - as I said above, it's looks like we need to implement user switching or, well, another four-letter acronym starting with 'G' that isn't suitable for a polite discussion.
Do I have the right end of the stick?
Cheers all,
Matt
|