Operations / Shifter - Subsection

In this subsection administrators may specify a list of user/group pairs whom proxy certificates will be used for executing actions outside of the DIRAC environment.

Examples include, but are not limited to::
  • issuing transfer requests to an external system (e.g. FTS3)

  • querying grid databases (e.g. GOC DB)

Name

Description

Example

<ShifterName>

Name of service managers

Admin ProductionManager DataManager MonteCarloGeneration DataProcessing

<ShifterName>/User

DIRAC user name

User = vhamar

<ShifterName/Group

DIRAC user group

Group = dirac_admin

Running agents can use these “shifters” for executing the examples above: agents requiring to act with a credential can specify the option shifterProxy, or using a certain default, like “DataManager”.

In general, to force any Agent to execute using a “shifter” credential, instead of the certificate of the server it is only necessary to add a valid shifterProxy option in its configuration (in the /Systems section).