• ophaned gfal2-util package - FTS notified
• DPM support from EGI side ends in a month
  • support for migration to dCache
  • CERN support for DPM is just theoretical (zero effort already during last year)
  • experiments are generally happy they don't have to deal with yet another storage while configuring tokens
    • one or two T2 sites per experiment may become diskless or disappear because they don't have (any) manpower to support grid activities
• dCache shifted root directory (omnisession / storage-authz) - dangerous configuration in token age with capabilities(?!)
  • dCache provides configuration to shift namespace for authorized clients (e.g. root:/)
  • VO can see only part of their namespace (e.g. root:/dune)
    • DUNE seems to plan to use tokens that always starts with /dune path, e.g. storage.modify:/dune
    • global namespace for multi-VO dune dCache must look like, e.g. /dune/dune/RSE
      • where OIDC plugin configuration use something like
      • gplazma.oidc.provider!dune = https://cilogon.org/dune -profile=wlcg -prefix=/dune
      •  
  • in case dCache administrator makes a mistake and configure DUNE access to root:/
    • storage.modify:/ gives DUNE permission to destroy all dCache data
    • this would be critical security issue for multi-VO dCache
    • can we sufficiently trust dCache administrators?
      • actually this is not really different than setting wrong ACLs by storage administrator
      •