Project

General

Profile

SciSoft Service Offering

The notes here are primarily for the service providers.

Permission Groups

  • Read-write access to SciSoft is controlled via nfs4 Kerberos groups.
  • Each project or experiment will have their own group.
  • Permissions are set at the top of a directory tree and are granted on a per bundle or per package basis.
  • The group nas-scisoft-f has global read-write permissions.
  • To check the permission group for a bundle:
    • ssh scisoftportal.fnal.gov
    • ls /nasroot/SciSoft/bundles/<your bundle>
    • nfs4_getfacl /nasroot/SciSoft/bundles/<your bundle>
  • To check the permission group for a package:
    • ssh scisoftportal.fnal.gov
    • ls /nasroot/SciSoft/packages/<your package>
    • nfs4_getfacl /nasroot/SciSoft/packages/<your package>
  • At this time, there is no way to check the members of a group short of opening a service desk ticket.

How to request support through Service Now

You need to search for SciSoft on the dashboard and request service. That will open up a RITM request that allows for the
possibility of adding the associated catalog task request that will be required.

Those requests go to: Marc Mengel, myself, Robert Illingworth, Margherita (who will assign them), Adam Lyon (why?), and Dave Dykstra.

Dealing with SNOW requests

Creating a new package or bundle directory.

  • login to scisoftportal
  • Use mkdir to create the appropriate top level directory.
    mkdir /nasroot/SciSoft/packages/garsoft
    
  • Create a SNOW RITM ticket.
    • After the RITM reqest is created, scroll down until you see the catalog task line.
    • Make a new catalog task to ask that the appropriate NFS4 group be added to the new directory.

Adding users to an existing project

  • login to scisoftportal
  • Use nfs4_getfacl to check permissions. In the example below, has read-write permissions for /nasroot/SciSoft/packages/nutools.
    -bash-4.1$ nfs4_getfacl /nasroot/SciSoft/packages/nutools/
    A:fd:BUILTIN\Administrators:rwaDdxtTnNcCoy
    A:fdg:nas-scisoft-f@fnal.gov:rwadxtTnNcy
    A:fd:EVERYONE@:rxtncy
    A:fdg:nas-scisoft-nu@fnal.gov:rwadxtTnNcy
    
  • In the RITM reqest, scroll down until you see the catalog task line.
    • Make a new catalog task to ask that the user be added to the appropriate NFS4 group.

Catalog task details

  • Catalog tasks need to be assigned to Storage Network Services
    • Andy Romero usually deals with these requests, but we DO NOT assign them to an individual.
  • Short description: SciSoft permissions
  • Provide detailed information in the body.
    Please make Robert Hatcher a member of the nas-scisoft-f@fnal.gov NFS4 group.
    

Archival notes

The SciSoft Service Offering that we established is no longer functioning as expected.

Suggested wording for SciSoft Service Offering

Overview:
Maintain packages and permission groups on the SciSoft software delivery site.

Description:

Maintain packages and permission groups on the SciSoft software delivery site.
For example, submit a "request to service providers" if you wish to do the following:
  • request space on SciSoft for a new experiment or project
  • add or remove people from a permission list
  • add the build of a new package to SciSoft for an existing experiment or project