Skip to content
This repository was archived by the owner on May 23, 2022. It is now read-only.

Fix example XRootD groupname auth for VOMS FQANs#928

Merged
matyasselmeci merged 1 commit intomasterfrom
fix-voms-group-auth-example
Feb 23, 2022
Merged

Fix example XRootD groupname auth for VOMS FQANs#928
matyasselmeci merged 1 commit intomasterfrom
fix-voms-group-auth-example

Conversation

@brianhlin
Copy link
Copy Markdown
Member

We get it right in the example here https://opensciencegrid.org/docs/data/xrootd/xrootd-authorization/#authorization-database. From Wei:

XrdVoms maps a typical VOMS attributes

VO: atlas <-- o:
VO group: /atlas/usatlas <- g:

You have also have self defined "Special Compound ID"s, for example

= atlprod o: atlas g: /atlas r: production
This define "atlprod" as VO "atlas", VO group "/atlas", Role "production"

x atlprod /xrootd/atlas rwildn
This define what access privilege "atlprod" has

The auth file are evaluated in order. The first match will be picked up.

Copy link
Copy Markdown
Contributor

@matyasselmeci matyasselmeci left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Aha!

We get it right in osg-test, too.

@matyasselmeci matyasselmeci merged commit 5d8324d into master Feb 23, 2022
@brianhlin brianhlin deleted the fix-voms-group-auth-example branch February 23, 2022 22:10
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants