[gin-auth] Multiple VO membership (Some ramblings and 1 question).

[David Bannon]

Dane, we've been looking at that but have decided, at least for now, the
end to end use is just not ready. So we'd dependant on gridmap files and
they really are a very, very blunt weapon!

The issues :

1. Gridmap files don't allow a user to be in several VOs and chose at
launch time.

2. VOMRS allows users to put themselves into any group/role they wish.
Indications are that this will be fixed in a July release.

3. Nothing seems to adequately interpret VOMS attributes at the glous
level.

David

On Wed, 2006-05-03 at 16:36 +0800, Dane Skow wrote:
....
> 
> I'd be very interested in operations experience of anyone who's gone  
> the full way to REQUIRING VOMS extensions so that they could do the  
> account mapping directly without having to have a gridmapfile preloaded.
> Is anyone running that way now ? planning on it soon ? Would sure  
> simplify maintenance and would seem reasonable for cross-grid  
> resources in my view (though it may be too complex for the users just  
> yet).
> 
> Dane