§Unfriendly mass-updates via the ldap[add|search|delete] commands or the LDAP browser.
§Can’t handle CN name clashes within a given VO.
§Currently the LCG User
Registrationprocedure
allows a user to become a member of
only one VO at a time.
§There is no mechanism to tell the local resources what this user is authorised to do with(out) priviledges.