From ee74c82a06c1680358203816dde7d8294746b7bb Mon Sep 17 00:00:00 2001
From: Giuseppe Lo Presti <giuseppe.lopresti@cern.ch>
Date: Mon, 2 Sep 2024 15:38:28 +0200
Subject: [PATCH] Detailed instructions to impersonate service accounts

---
 docs/web/projects/quota-for-project-space.md | 18 ++++++++++++------
 1 file changed, 12 insertions(+), 6 deletions(-)

diff --git a/docs/web/projects/quota-for-project-space.md b/docs/web/projects/quota-for-project-space.md
index aec85dc..bfadb21 100644
--- a/docs/web/projects/quota-for-project-space.md
+++ b/docs/web/projects/quota-for-project-space.md
@@ -3,14 +3,20 @@
 To check the quota for your project you need to impersonate the **Service Account** holder of the project.
  
 
-Log into lxplus, and run the eos command:
+1. Log into lxplus with your Primary Account
+2. Impersonate the relevant Service Account by obtaining a kerberos token:
+```bash
+kinit <your-service-account>
 ```
+3. Run the eos command:
+```bash
 eos root://eosproject.cern.ch quota /eos/project/<initial>/<project-name>
 ```
 ![](../../assets/images/project-quota-1.png) 
- 
-In the example, project swanee is using the quota as follows: 9.81 MB of the allowed 1.00 TB; 78 files of the allowed 1.00M files:
-```
+
+In the example, project "swanee" is using the quota as follows: 9.81 MB of the allowed 1.00 TB; 78 files of the allowed 1.00M files:
+
+```bash
 [swanee@lxplus701 ~]$ eos root://eosproject.cern.ch quota /eos/project/s/swanee
 # pre-configuring default route to /eos/user/s/swanee/
 # -use $EOSHOME variable to override
@@ -33,6 +39,6 @@ By group:
 
 ```
 
-It is possible to define the EOS_MGM_URL=root://eosproject.cern.ch variable beforehand. In which case, you would not need root://eosproject.cern.ch in the EOS command.
-
+Note that until you obtain again a kerberos token for your Primary Account, any further command you issue in that lxplus session will be executed with the Service Account's credentials.
 
+It is possible to define the `EOS_MGM_URL=root://eosproject.cern.ch` variable beforehand. In which case, you would not need `root://eosproject.cern.ch` in the EOS command.
-- 
GitLab