Changes between Version 92 and Version 93 of Doc/gLite/TemplateCustomization

Timestamp:

Oct 5, 2008, 12:01:38 AM (17 years ago)

Author:

/O=GRID-FR/C=FR/O=CNRS/OU=LAL/CN=Michel Jouvin

Comment:

--

Doc/gLite/TemplateCustomization

@@ -68 +68 @@
 
 
+=== VO accounts ===
+
+Templates related to VO configuration handle everything related to VO configuration on a specific node, including creation of VO accounts (pool accounts, SW manager...). See below for the parameters related to account creation.
+
+By default, the VO accounts are created locked to prevent their interactive use. There is one exception : if variable `GSISSH_SERVER_ENABLED` equals `true`, these accounts are automatically unlocked. This happens mainly on UI and VOBOX.
+
+
 === Site Specific Defaults for VO Parameters ===
 
@@ -103 +110 @@
 }}}
 
+In addition to `VOS_SITE_PARAMS`, '''which is the recommended method''' to specify site-specific parameters for VO configuration, it is also possible to execute a site-specific template before doing the configuration related to VOs. Use variable `NODE_VO_CONFIG` to specify the name of the template.
 
 === Adding a New VO ===
@@ -616 +624 @@
 __Base template__ : `machine-types/ui`.
 
+UI may be run on a non-grid machine where the proposed base template is not suitable. In this case, if the machine is managed by Quattor, it is possible to reuse part of the base template on the target machine : mainly VO configuration, `glite/service/ui` and gLite updates.
+
+On a standard UI, user accounts must be created  using a method appropriate to the local site. It can be NIS, LDAP or using the template provided with QWG to manage user creation.
+
+It is also possible to configure a UI to be accessed through gsissh. In this configuration, users use their grid certificate to authenticate on the UI and are mapped to a pool account of the VO. To configure a UI with gsissh, it is only necessary to define variable `GSISSH_SERVER_ENABLED` to `true` in the machine profile.
+
 
 == RPMs Repositories ==