Am 15.10.2014 um 22:01 schrieb John Desantis: > Reuti, > >>> These users do belong to several userset lists each with a type >>> defined as "ACL DEPT". From what I've read, users can only belong to >>> 1 department but multiple ACL's. >> >> You refer to this sentence from the man page? > > I was reading from the SGE N1 admin guide, too. > > "Departments are used for the configuration of the functional policy > and the override > policy. Departments differ from access lists in that a user can be a > member of only one > department, whereas one user can be included in multiple access lists. " > > Is there anything special one should know (not explained in the > documentation) when using the userset list type "ACL DEPT"?
And by using "ACL DEPT" several users were assigned to multiple departments or are they still unambiguously assigned to only one? -- Reuti > Thanks, > John DeSantis > > > 2014-10-15 15:43 GMT-04:00 Reuti <re...@staff.uni-marburg.de>: >> Am 15.10.2014 um 20:12 schrieb John Desantis: >> >>> Looking at our "accounting" file and aRCO DB, we're seeing some users >>> with multiple departments listed on completed jobs. We can also >>> confirm this via `qstat -u \* -ext` for said users. >>> >>> These users do belong to several userset lists each with a type >>> defined as "ACL DEPT". From what I've read, users can only belong to >>> 1 department but multiple ACL's. >> >> You refer to this sentence from the man page? >> >> When using departments, each user or group enlisted may only be enlisted in >> one department, in order to ensure a unique assignment of jobs to >> departments. >> >> -- Reuti >> >>> The man page for access_list states >>> that "ACL" and "DEPT" can both be used together. >>> The only ACL that we're using now is the beloved "xusers" for >>> temporary banning, otherwise the user_lists is set to NONE on all >>> queues and execution hosts. >>> >>> Has anyone else with a similar configuration seen this before? Does >>> this behavior have anything to do with functional tickets being >>> exhausted from a department (qstat -ext did show 'fticket' values != >>> 0)? I'll paste some sanitized output below. >>> >>> #jobs #user #department >>> >>> 9241 sge-user qchem >>> 6 sge-user cas.chem.hlw >>> 3 sge-user qchem_dev >>> >>> 3093 sge-user2 cas_chem >>> 1 sge-user2 cas.chem.hlw >>> >>> 47 sge-user3 rogers >>> 3 sge-user3 gaussian >>> >>> Thank you! >>> John DeSantis >>> _______________________________________________ >>> users mailing list >>> users@gridengine.org >>> https://gridengine.org/mailman/listinfo/users >> _______________________________________________ users mailing list users@gridengine.org https://gridengine.org/mailman/listinfo/users
