Status of Roles/Groups

02 May 2006

11:56

• VOMS Service
  • In production.

• Data Management

• LFC
  • LFC in gLite-3.0 will map VOMS roles and groups to (internal) virtual uid/gid.  POSIX ACLs are implemented.

• DPM
  • DPM in gLite-3.0 will map VOMS roles and groups to (internal) vitual uid/gid.  POSIX ACLs are implemented.
• dCache
  • Under implementation; timescale for delivery ??
  • Call out to gplazma database - but similar scheme to DPM with internal mappings and POSIX ACLs.
  • Status (Rome - April Hepix meeting): internal testing by dCache team.
• Castor
  • Intends to use DPM implementation.  Timescale ??
• Consistency between file catalogue and SE
  • Now: user responsibility
  • Future: Replica Registration Service
• FTS
  • Defines roles for "submitters", "VO admins", "Channel admins" and these can be based on DN's or VOMS roles.  Internal db to do the mapping.
  • Has been in FTS for some time, but not really tested as never used in production.
• lcg-utils
  • Tools should recognise VOMS proxy and pick up VO

• Workload Management

• CE - main issue is how to manage job priorities on the batch systems.
  • Under discussion in the TCG job priorities working group led by D. Liko; see attached summary from Jeff Templon.
  • Agreement (?) that for SC4 a set of a few (2 or 3) queues (prod, long, short) will be sufficient.  Requires the set up of 2 or 3 CE's at each site.
  • Standard LCAS/LCMAPS libraries are available (from LCG-2.7.0 onward)
  • No agreed schema for mapping user roles and groups to local users.