Am 08.06.2012 um 20:19 schrieb Rayson Ho: > Thanks William - I was also wondering how others do this in the field. > > As far as I know, only the primary group is considered - it was like > that since many, many years ago. But I was not sure how you guys > define ACLs that need to handle the non-primary group case. > > IMO, using external tools to sync. Unix group membership to Grid > Engine internal ACL is a bit less nice, but that's what we can do for > now. > > And it may not be due to performance reasons - I have not looked into > this issue in detail but I believe it has to do with the Grid Engine > protocol.
Only one group is stored for the submitted job AFAIK to lower the necessary memory per job entry. This way the user can use `newgrp` to make any of his secondary groups the primary one and submit jobs this way for this GID. In case you want to use it, don't forget to set in SGE's configuration: execd_params USE_QSUB_GID=TRUE -- Reuti > I was going to check if Grid Engine sends the non-primary > group IDs during job submission, but if Joseph is OK with using a cron > job to sync. membership then I can leave it aside for now - I will > need to work on a few more urgent things but will have more time later > this month. > > Rayson > > > > On Fri, Jun 8, 2012 at 1:46 PM, William Hay <[email protected]> wrote: >> On 8 June 2012 18:12, Joseph Farran <[email protected]> wrote: >>> Greetings. >>> >>> How does one set access to an OGE queue to have access from more than one >>> Linux group? >>> >>> So if I have Linux groups staff, bio, and chem, how do I make my "test" >>> queue only accessible by these 3 groups? >> Create an access_list (with qconf -Au). Put @staff,@bio,@chem in the >> entries field. Add the access list to the user_lists entry >> of the queue. Alternatively create three separate lists for the three >> groups and add them all to the user_lists entry of the queue. >> NB: This only works for the user's primary group (some sort of >> performance thing I believe). If you want to have secondary groups >> then you could create a cron job to synchronise your Grid Engine >> access_list with your unix groups. >> >> William >> >> >>> What kind of Q type do I setup? >>> >>> _______________________________________________ >>> users mailing list >>> [email protected] >>> https://gridengine.org/mailman/listinfo/users >>> >>> >> _______________________________________________ >> users mailing list >> [email protected] >> https://gridengine.org/mailman/listinfo/users > > _______________________________________________ > users mailing list > [email protected] > https://gridengine.org/mailman/listinfo/users > _______________________________________________ users mailing list [email protected] https://gridengine.org/mailman/listinfo/users
