[Clas_offline] CCPR 102688 UPDATE (Cannot submit jobs)

[Andy Kowalski]

Johann,

The IT Division has only been providing people with notifications and education based on best practices, DOE guidance/directives and as part of lessons learned from actual incidents.  In this case, when a home directory is open to all JLab account holders, not just open to fellow CLAS collaborators.  We have not been changing permissions for people.  However, one can work collaboratively and securely.  The two are not mutually exclusive. 

Sandy has offered one way to help elevate the problems caused by everyone using different environment settings and not picking up global changes for the CLAS environment.  I would suggest you discuss with Harut what you think the CLAS software environment should look like.  I am willing to provide resources to help you design something that is both easier to manage and secure if that is the direction Harut wants to go.

--Andy

On Apr 23, 2014, at 9:40 AM, Johann Goetz wrote:

> Dear Common User Environment managers and cyber security professionals of JLab,
> A recent change in notifications to the users about security and home directories on the CUE machines as moved many users to lock down their home directories so only they and the root user can see what is inside. It is my opinion that this makes it too difficult to collaborate - in particular when I am asked (by the scicomp group no less) to debug a .cshrc file in someone's home directory, I see this:
> 
> goetz at ifarm1101:~>ls ~badui/
> ls: cannot open directory /home/badui/: Permission denied
> 
> I see no reason on the whole to prevent anyone with a CUE account to access (read-only of course) other user's home directories. Users who wish to have some measure of privacy could restrict permission of subdirectories, or better yet, could use a private computer since the login notice explicitly says "Users (authorized or
> unauthorized) have no explicit or implicit expectation of privacy."
> 
> Anyways, I have come across this enough times where it is starting to interfere with my own work. Maybe I'm totally alone in this, but I suspect not (hence the email blast).
> 
> 
> On Wed, Apr 23, 2014 at 8:39 AM, <ccpr_reply at jlab.org> wrote:
> 
> 
> 
> 
> Here is an update to the help request you submitted.
> When you reply to THIS message, Please DO NOT include the original text below.
> 
> Mod Date:   2014/04/23
> Mod Time:   08:39:48
> Mod User:   rackley
> Current State:   FEEDBACK
> 
> STATE changed from (RECEIVED) to FEEDBACK.
> 
> 
> --------------------------------------------------------------
> This seems to be the result of your .cshrc file which includes:
> 
> source /site/common_environment/set_environment
> /sit/common_environment/jlab_default_settingis.dat clas12 -v
> 
> This file does not exist anymore. It seems that the environment
> settings for clas software environment have changed since the last
> time you used your account. I would contact the clas software
> environment folks to get the correct environment settings for clas.
> 
> A good starting point would be Johann Goetz (goetz at jlab.org) who
> I believe has set up the new software environment. Additional
> information should be found on the CLAS wiki but I am not sure of the
> exact link for the information:
> 
> https://clasweb.jlab.org/wiki/index.php/Main_Page
> 
> 
> --------------------------------------------------------------
> Here is a copy of your Original Request:
> 
> Email:    badui at jlab.org
> Name:
> Username:
> Staff:    philpott
> Platform:
> Building:
> Room:
> Hostname:
> Category: SCIENTIFIC COMPUTING
> Subject:  Cannot submit jobs
> 
> Request:
> Hi whenever I try to submit jobs, I get an error saying "can't exec 'jsub': No such file or directory." This may be related from an error I get when I login "/site/common_environment/set_environment: no such file or directory." Also, I used to use csh by default and now it's logging into bash.
> 
> 
> The following link will bring you to a list of open CCPR's
> 
> http://mis.jlab.org/mis/ccpr/ccpr_user/ccprframe_user.html
> 
> 
> 
> _______________________________________________
> Clas_offline mailing list
> Clas_offline at jlab.org
> https://mailman.jlab.org/mailman/listinfo/clas_offline