• Print
• View
• History
• Login

Tiers of ATLAS

Space tokens for ATLAS :

[root@fs01 ~]# /opt/lcg/bin/dpns-chown root  /dpm/grid.uj.ac.za/home/atlas/atlaslocalgroupdisk
[root@fs01 ~]# /opt/lcg/bin/dpns-chgrp atlas/za  /dpm/grid.uj.ac.za/home/atlas/atlaslocalgroupdisk
[root@fs01 ~]# /opt/lcg/bin/dpns-entergrpmap --group "atlas/za"
[root@fs01 ~]# /opt/lcg/bin/dpns-entergrpmap --group "atlas/za/Role=production"
[root@fs01 ~]# /opt/lcg/bin/dpns-setacl -m g:atlas:r-x,m:r-x,d:g:atlas:r-x,d:m:r-x /dpm/grid.uj.ac.za/home/atlas/atlaslocalgroupdisk
[root@fs01 ~]# /opt/lcg/bin/dpns-setacl -m g:atlas/za/Role=production:rwx,m:rwx,d:g:atlas/za/Role=production:rwx,d:m:rwx  /dpm/grid.uj.ac.za/home/atlas/atlaslocalgroupdisk
[root@fs01 ~]# /opt/lcg/bin/dpm-updatespace  --token_desc ATLASLOCALGROUPDISK --group atlas/za/Role=production,atlas/Role=production

resulting permissions :

[sahal@lxplus415]~% dpns-getacl /dpm/grid.uj.ac.za/home/atlas/atlaslocalgroupdisk/                                                                                              
# file: /dpm/grid.uj.ac.za/home/atlas/atlaslocalgroupdisk/
# owner: root
# group: atlas/za
user::rwx
group::rwx		#effective:rwx
group:atlas:r-x		#effective:r-x
group:atlas/Role=production:rwx		#effective:rwx
group:atlas/za/Role=production:rwx		#effective:rwx
mask::rwx
other::r-x
default:user::rwx
default:group::rwx
default:group:atlas:r-x
default:group:atlas/Role=production:rwx
default:group:atlas/za/Role=production:rwx
default:mask::rwx
default:other::r-x

[sahal@lxplus415]~% dpns-getacl /dpm/grid.uj.ac.za/home/atlas/atlasscratchdisk/   
# file: /dpm/grid.uj.ac.za/home/atlas/atlasscratchdisk/
# owner: atlas
# group: atlas
user::rwx
group::rwx		#effective:rwx
group:atlas:rwx		#effective:rwx
group:atlas/Role=production:rwx		#effective:rwx
mask::rwx
other::r-x
default:user::rwx
default:group::rwx
default:group:atlas:rwx
default:group:atlas/Role=production:rwx
default:mask::rwx
default:other::r-x

[sahal@lxplus415]~% dpns-getacl /dpm/grid.uj.ac.za/home/atlas/atlashotdisk/    
# file: /dpm/grid.uj.ac.za/home/atlas/atlashotdisk/
# owner: atlas
# group: atlas/Role=production
user::rwx
group::rwx		#effective:rwx
group:atlas:r-x		#effective:r-x
group:atlas/Role=production:rwx		#effective:rwx
group:atlas/ROLE=production:rwx		#effective:rwx
mask::rwx
other::r-x
default:user::rwx
default:group::rwx
default:group:atlas:r-x
default:group:atlas/Role=production:rwx
default:mask::r-x
default:other::r-x

Comparison with the ZA-WITS-CORE SE:

[sahal@lxplus415]~% export DPNS_HOST=se.core.wits.ac.za                               
[sahal@lxplus415]~% dpns-getacl /dpm/core.wits.ac.za/home/atlas/atlaslocalgroupdisk/
# file: /dpm/core.wits.ac.za/home/atlas/atlaslocalgroupdisk/
# owner: root
# group: atlas/za
user::rwx
group::rwx		#effective:rwx
group:atlas:r-x		#effective:r-x
group:atlas/Role=production:rwx		#effective:rwx
group:atlas/za/Role=production:rwx		#effective:rwx
mask::rwx
other::r-x
default:user::rwx
default:group::rwx
default:group:atlas:r-x
default:group:atlas/Role=production:rwx
default:group:atlas/za:rwx
default:group:atlas/za/Role=production:rwx
default:mask::rwx
default:other::r-x

[sahal@lxplus415]~% dpns-getacl /dpm/core.wits.ac.za/home/atlas/atlashotdisk        
# file: /dpm/core.wits.ac.za/home/atlas/atlashotdisk
# owner: root
# group: atlas/Role=production
user::rwx
group::rwx		#effective:rwx
group:atlas/Role=production:rwx		#effective:rwx
mask::rwx
other::r-x
default:user::rwx
default:group::rwx
default:other::r-x

[sahal@lxplus415]~% dpns-getacl /dpm/core.wits.ac.za/home/atlas/atlasscratchdisk
# file: /dpm/core.wits.ac.za/home/atlas/atlasscratchdisk
# owner: root
# group: atlas/Role=production
user::rwx
group::rwx		#effective:rwx
group:atlas:rwx		#effective:rwx
group:atlas/Role=production:rwx		#effective:rwx
mask::rwx
other::r-x
default:user::rwx
default:group::rwx
default:group:atlas:rwx
default:group:atlas/Role=production:rwx
default:mask::rwx
default:other::r-x

Endpoint definition:

'ZA-UJ_HOTDISK':
  {
    'domain': '.*grid.uj.ac.za.*/atlashotdisk/.*',
    'email': 'sergio.ballestrero@cern.ch',
    'toolAssigner': 'lcg',
    'fts': CNAFFTS,
    'srm': 'token:ATLASHOTDISK::srm://fs01.grid.uj.ac.za:8446/srm/managerv2?SFN=/dpm/grid.uj.ac.za/home/atlas/atlashotdisk/',
    'alternateName' : [ 'ZA-WITS-CORE' ],
    'seinfo': dpm,
  },

'ZA-UJ_LOCALGROUPDISK':
  {
    'domain': '.*grid.uj.ac.za.*/atlaslocalgroupdisk/.*',
    'email': 'sergio.ballestrero@cern.ch',
    'toolAssigner': 'lcg',
    'fts': CNAFFTS,
    'srm': 'token:ATLASLOCALGROUPDISK:srm://fs01.grid.uj.ac.za:8446/srm/managerv2?SFN=/dpm/grid.uj.ac.za/home/atlas/atlaslocalgroupdisk/',
    'permissions': ItPermission,
    'alternateName' : [ 'ZA-UJ' ],
    'seinfo': dpm,
  },

'ZA-UJ_SCRATCHDISK':
  {
    'domain': '.*grid.uj.ac.za.*/atlasscratchdisk/.*',
    'email': 'sergio.ballestrero@cern.ch',
    'toolAssigner': 'lcg',
    'fts': CNAFFTS,
    'srm': 'token:ATLASSCRATCHDISK:srm://fs01.grid.uj.ac.za:8446/srm/managerv2?SFN=/dpm/grid.uj.ac.za/home/atlas/atlasscratchdisk/',
    'permissions': ScratchPermission,
    'alternateName' : [ 'ZA-UJ' ],
    'seinfo': dpm,
  }