Reuti, > But then the assignment of a user to a department is no longer unique, and > the behavior you observe is exactly like written in the man page.
Thanks for clearing up the confusion! John DeSantis 2014-10-16 9:16 GMT-04:00 Reuti <re...@staff.uni-marburg.de>: > Am 16.10.2014 um 15:08 schrieb John Desantis: > >> Reuti, >> >>> And by using "ACL DEPT" several users were assigned to multiple departments >>> or are they still unambiguously assigned to only one? >> >> All of the users manifesting multiple departments in the aRCO DB and >> "accounting" log are all within multiple userset lists which have been >> defined as the type "ACL DEPT". We do not have any userset lists >> solely of the type "DEPT". They are all either "ACL" or "ACL DEPT". >> >> For example, the sanitized user "sge-user" I listed previously was >> logged in 3 departments. I'll paste sanitized output below: > > But then the assignment of a user to a department is no longer unique, and > the behavior you observe is exactly like written in the man page. > > -- Reuti > > >>>>>> 9241 sge-user qchem >>>>>> 6 sge-user cas.chem.hlw >>>>>> 3 sge-user qchem_dev >> >> # qconf -su qchem >> name qchem >> type ACL DEPT >> fshare 0 >> oticket 0 >> entries user1,user2,user3,user4,user5,user6,user7,user8,user9, \ >> user10,user11,sge-user,user12,user13,user14,user15,user16, \ >> .... more users.... >> >> # qconf -su qchem_dev >> name qchem_dev >> type ACL DEPT >> fshare 0 >> oticket 0 >> entries user1,user2,user3,sge-user,user4,user5 >> >> # qconf -su cas.chem.hlw >> name cas.chem.hlw >> type ACL DEPT >> fshare 100 >> oticket 0 >> entries user1,user2,user3,user4,user5,user6,user7,sge-user, \ >> ... more users... \ >> >> John DeSantis >> >> 2014-10-16 4:49 GMT-04:00 Reuti <re...@staff.uni-marburg.de>: >>> Am 15.10.2014 um 22:01 schrieb John Desantis: >>> >>>> Reuti, >>>> >>>>>> These users do belong to several userset lists each with a type >>>>>> defined as "ACL DEPT". From what I've read, users can only belong to >>>>>> 1 department but multiple ACL's. >>>>> >>>>> You refer to this sentence from the man page? >>>> >>>> I was reading from the SGE N1 admin guide, too. >>>> >>>> "Departments are used for the configuration of the functional policy >>>> and the override >>>> policy. Departments differ from access lists in that a user can be a >>>> member of only one >>>> department, whereas one user can be included in multiple access lists. " >>>> >>>> Is there anything special one should know (not explained in the >>>> documentation) when using the userset list type "ACL DEPT"? >>> >>> And by using "ACL DEPT" several users were assigned to multiple departments >>> or are they still unambiguously assigned to only one? >>> >>> -- Reuti >>> >>> >>>> Thanks, >>>> John DeSantis >>>> >>>> >>>> 2014-10-15 15:43 GMT-04:00 Reuti <re...@staff.uni-marburg.de>: >>>>> Am 15.10.2014 um 20:12 schrieb John Desantis: >>>>> >>>>>> Looking at our "accounting" file and aRCO DB, we're seeing some users >>>>>> with multiple departments listed on completed jobs. We can also >>>>>> confirm this via `qstat -u \* -ext` for said users. >>>>>> >>>>>> These users do belong to several userset lists each with a type >>>>>> defined as "ACL DEPT". From what I've read, users can only belong to >>>>>> 1 department but multiple ACL's. >>>>> >>>>> You refer to this sentence from the man page? >>>>> >>>>> When using departments, each user or group enlisted may only be enlisted >>>>> in one department, in order to ensure a unique assignment of jobs to >>>>> departments. >>>>> >>>>> -- Reuti >>>>> >>>>>> The man page for access_list states >>>>>> that "ACL" and "DEPT" can both be used together. >>>>>> The only ACL that we're using now is the beloved "xusers" for >>>>>> temporary banning, otherwise the user_lists is set to NONE on all >>>>>> queues and execution hosts. >>>>>> >>>>>> Has anyone else with a similar configuration seen this before? Does >>>>>> this behavior have anything to do with functional tickets being >>>>>> exhausted from a department (qstat -ext did show 'fticket' values != >>>>>> 0)? I'll paste some sanitized output below. >>>>>> >>>>>> #jobs #user #department >>>>>> >>>>>> 9241 sge-user qchem >>>>>> 6 sge-user cas.chem.hlw >>>>>> 3 sge-user qchem_dev >>>>>> >>>>>> 3093 sge-user2 cas_chem >>>>>> 1 sge-user2 cas.chem.hlw >>>>>> >>>>>> 47 sge-user3 rogers >>>>>> 3 sge-user3 gaussian >>>>>> >>>>>> Thank you! >>>>>> John DeSantis >>>>>> _______________________________________________ >>>>>> users mailing list >>>>>> users@gridengine.org >>>>>> https://gridengine.org/mailman/listinfo/users >>>>> >>> > _______________________________________________ users mailing list users@gridengine.org https://gridengine.org/mailman/listinfo/users
