Minutes of last meeting and action list Room: 600/R-002

Firewall Configuration Issue

• Vangelis

Room: 600/R-002 > You probably remember that in DNA4.4.1 I wrote about the following > firewall-related issue concerning the production infrastructure: > > > The configuration of firewalls of CE and SE services are neither > unified nor specified in EGEE, resulting unpredictable accessibility > for users and their jobs. It is a fact that only a subset of SEs can > be seen and reached from the CEs of the same VO, moreover this > accessibility matrix changes over time without users getting notified. > As a consequence, the users’ jobs can very often use EGEE VOs as sets > of independent clusters, within which a cluster can access only its > "close SE" and no data transfer is possible from one site to the > other. As this limitation degrades EGEE VOs to "set of clusters", some > users decide to return to their local clusters instead. EGEE-III (or > the VOs?) should develop and force firewall policies to the sites, and > should develop test suits for users that could use to check the > accessibility relationships of CEs and SEs.

Review of JSPG Updated Policies

• John/Oliver

Room: 600/R-002 As discussed at last week's meeting http://indico.cern.ch/conferenceDisplay.py?confId=56981 Virtual Organisation Registration Security Policy - V2.5, dated 18 May 2009. https://edms.cern.ch/document/573348/9 http://www.jspg.org/wiki/Virtual_Organisation_Registration_Security_Policy Virtual Organisation Membership Management Policy - V3.6, dated 18 May 2009. https://edms.cern.ch/document/428034/4 http://www.jspg.org/wiki/Virtual_Organisation_Membership_Management_Policy

AOB Room: 600/R-002 Reporting that gLite 3.0 will be declared obsolete at the end of April.