[gin-auth] Re: [gin-data] Re: progress...

[David Bannon]

Here is a page showing how we are doing it in the APACGrid :

http://www.vpac.org/twiki/bin/view/APACgrid/UserMapping

David



On Thu, 2006-07-27 at 15:40 +0200, Erwin Laure wrote:
> Hi Bill,
> 
> It is as you say in your last sentence. VOMS basically provides a 
> database of users. This information (either directly from the VOMS 
> server or indirectly via the webpage or RSS feed) is used by the 
> individual grids to map the DNs into their own user space. It's up to 
> the Grid how they do the mapping, most use pool-accounts though, I believe.
> 
> I've cc'ed the gin-auth group for further details and corrections.
> 
> Cheers,
> 
> -- Erwin
> 
> William E. Allcock wrote:
> > Never having used VOMS, I guess I am also a little confused.  I went to the
> > registration page, and I looked in the gridmapfile.  However, the gridmap
> > file isn't really a gridmap file, because it doesn't actually map anything.
> > It has a list of DNs, but there are no accounts associated with them, which
> > is what the gridmap file does.  So, I think Gregor's (and my) question is,
> > what account will the GridFTP server that gets invoked be run under?  Or
> > does each Grid take responsibility for mapping it to some appropriately
> > restricted account and we can just not worry about that?
> > 
> > Bill 
> > 
> > 
> >>-----Original Message-----
> >>From: owner-gin-data at ggf.org [mailto:owner-gin-data at ggf.org] 
> >>On Behalf Of Erwin Laure
> >>Sent: Thursday, July 27, 2006 4:22 AM
> >>To: Gregor von Laszewski
> >>Cc: gin-data at ggf.org; Mihael Hategan; Raj Kettimuthu
> >>Subject: [gin-data] Re: progress...
> >>
> >>Hi Gregor,
> >>
> >>You can get an initial list of Grids for testing purposes from:
> >>http://wiki.nesc.ac.uk/read/gin-jobs?GinResources
> >>
> >>Why do you need accounts on these Grids? Wouldn't simply 
> >>joining the GIN 
> >>VO do? Information on how to join the VO is available at 
> >>http://wiki.nesc.ac.uk/read/gin-jobs
> >>This VO is supported by all GIN sites.
> >>
> >>Cheers,
> >>
> >>-- Erwin
> >>
> >>Gregor von Laszewski wrote:
> >>
> >>>Erwin:
> >>>
> >>>    we have tested our tool and it works as expected. 
> >>
> >>However, there is  
> >>
> >>>some issue in regards to renewing accounts and alloctaions 
> >>
> >>on TG to  run 
> >>
> >>>this that are not yet resolved. To no longer delay the  
> >>
> >>publication of 
> >>
> >>>the data, we have involved Raj that will start the  program 
> >>
> >>for us on 
> >>
> >>>the TG. We hope this takes place tomorrow. This  also 
> >>
> >>allows us to test 
> >>
> >>>the "easy deploy" requirement of the systems  so it could 
> >>
> >>be replicated 
> >>
> >>>on other systems. Mike is improving the  documentation to make this 
> >>>happening.
> >>>
> >>>In return we have one question that we issued to this 
> >>
> >>mailinglist  before:
> >>
> >>>On which other Grids should we test our software?
> >>>Is there someone in the GIN working group that can let us 
> >>
> >>know which  
> >>
> >>>Grids we should approach next? From the experience we had with  
> >>>obtaining accouts, it looks like we want to get this 
> >>
> >>established  ASAP. 
> >>
> >>>in order to start the application program. We probably need 
> >>
> >> some kind 
> >>
> >>>of "sponsor" or "champion" to push this out on the other  
> >>
> >>Grids. So if 
> >>
> >>>there are people from other Grids (other than TG) in  this working 
> >>>group, maybe you can let us know how we should approach  getting 
> >>>accounts on your Grids.
> >>>
> >>>I would assume this applies also to the other technologies 
> >>
> >>from the  
> >>
> >>>GIN-WG, do you have a uniform project description that I can point  
> >>>other Grids to as part of the application process?
> >>>
> >>>Gregor
> >>>
> >>>
> >>>On Jul 25, 2006, at 4:39 AM, Erwin Laure wrote:
> >>>
> >>>
> >>>>Hi,
> >>>>
> >>>>GGF18 is coming up soon. Could we please get an update on 
> >>
> >>the  interop 
> >>
> >>>>tests of SRB, SRM, and gridFTP?
> >>>>
> >>>>We will use this information to make an interop matrix 
> >>
> >>available on  
> >>
> >>>>the GIN gridforge pages.
> >>>>
> >>>>Also, we should prepare instructions of how people can run these  
> >>>>tests themselves, i.e. test, whether their infrastructure is  
> >>>>interoperable with others.
> >>>>
> >>>>Cheers,
> >>>>
> >>>>-- Erwin
> >>>>
> >>>
> >>
> > 
>