Information that is shown at operations portal (vo information section) about
number of members for each VO should be extended and explained what does it
really means.
there are 3 types of users who are members of a VO and are registered at VOMS:
1) Real - active users, who at least in last 3months do not have CPU Time equal
to 0. (data can be taken only from accounting portal)
2) Not Real - users, who are registered at VO, but have never run any job and
their CPUTime is equal to 0 in at last 3months. (data can be taken only from
accounting portal)
3) real + not real users, all users simply registered at VO in a VOMS but it's
not known if they do any computing or not or do they have valid grid
certificate
Use Case:
Assume that user has a grid certificate which expires tomorrow and today he
subscribes to a VO at VOMS server, after VOMS recognizes that user as a member
of a VO and keeps his record forever. (Latest version of VOMS has plug-in which
sets expiration date for user being a member of VO but only known to VOMS and
with user's grid certificate expiration there's no connection)
There's no way for VOMS to know if user' still has valid certificate or not
after that day he subscribes to a VO.
VOMS should not be used to count real members. Unless membership of the VO is
allowed without gird certificate.
GGUS for REF: https://ggus.eu/dmsu/dmsu_ticket.php?ticket=70479
I woud like to see in a operations portal at least explanation of what to be a
VO member means in that context depending on how the information and from where
it is taken.
Karolis