...
- LSST operated advanced FTP service
- vsftp server software: very secure; high performance; restartable transfers; virtual ftp-only accounts
- installed and running on LSST service VM (VM is "SCS Standard")
- access to /nfs/farm/g/lsst/u2
- New lsst-ftp account to have ownership privs on a single NFS partition: /nfs/farm/g/lsst/u2 (which will be a short-term buffer from which a permanent archive will be made)
- Individual virtual vsftp accounts for Vendors A and B.
- This FTP area would be considered a "vendor playpen" from which copies would be archived to permanent LSST storage
Potential Security Issues and Mitigations (not complete!!)
...