GridPP Technical Meeting - Token transition update
Virtual Only
Weekly meeting slot for technical topics. We will try and focus on one topic per meeting. We will announce at the Tuesday Ops meeting if this meeting is going ahead and if so the topic to be discussed.
Attending: Lots of people
Apologies: David C
Minutes: Matt
Alex presented his slides for LHCB (attached to agenda)
-asked if it would be useful if more sites volunteered for ARC-CE token testing, probably not until ARC7 out
Discussion of ARC7/ARC6 and tokens, several UK sites enabled tokens for DIRAC testing. Note however the trouble this this poses as token-jobs are not properly accounted (VO=none problem, as seen and fixed at great effort from Gordon at Glasgow).
-it was noted that the IAM teams were generally happy with DC24 results, many problems were revealed and fixes are in the works.
James shared Petr's token slides from the atlas s&c (behind CERN wall), although we only lightly scanned them:
https://indico.cern.ch/event/1355529/contributions/5786827/attachments/2796754/4878865/ATLAS%20S&C%20Week%20%2377%20-%20Site%20Storage%20Access%20with%20Tokens.pdf
-a good introduction to tokens at the start.
Matt mentions the Token Trust and Traceability Group, which has some slides here:
https://docs.google.com/presentation/d/1mRQZ8sWOGdBQuf48y2MON-09W4M9Gzxpc5k-kWrnSRg/edit?usp=sharing
Mention of https://dteam-auth.cern.ch/ - which is the preferred place for site admins to get their tokens to test functionality at sites. On Matt's to do list (from the TTT) is get some instructions together for "how to get a token" from here. Note that currently you have to manually request access to scopes, but hopefully this will be fixed soon.
At the end of the meeting it was decided to try to increase the reminder time on the indico notifications for the Tech Meetings - many were blindsided by the 24 hour notice and the meeting being set so far in advance meant we had generally forgotten about it.