Skip to content

Commit

Permalink
Merge pull request #67 from brianhlin/fixup-authzfunparms
Browse files Browse the repository at this point in the history
Fixup authzfunparms and disable lcmaps authz for CMS XCache
  • Loading branch information
brianhlin authored Aug 1, 2019
2 parents 46f1ba5 + 9ea248a commit 812a5b5
Show file tree
Hide file tree
Showing 3 changed files with 3 additions and 4 deletions.
3 changes: 1 addition & 2 deletions configs/cms-xcache/config.d/50-cms-xcache-authz.cfg
Original file line number Diff line number Diff line change
Expand Up @@ -15,8 +15,7 @@ sec.protocol /usr/lib64 gsi \
-cert:/etc/grid-security/xrd/xrdcert.pem \
-key:/etc/grid-security/xrd/xrdkey.pem \
-crl:1 -authzfun:libXrdLcmaps.so \
-authzfunparms:--lcmapscfg=/etc/xrootd/lcmaps.cfg,\
--loglevel=1 \
-authzfunparms:lcmapscfg=/etc/xrootd/lcmaps.cfg,loglevel=1,no-authz \
-gmapopt:10 -gmapto:0

# The Authorization file for which users can do which actions:
Expand Down
2 changes: 1 addition & 1 deletion configs/stash-cache/config.d/50-stash-cache-authz.cfg
Original file line number Diff line number Diff line change
Expand Up @@ -32,7 +32,7 @@ if named stash-cache-auth
-key:/etc/grid-security/xrd/xrdkey.pem \
-crl:1 \
-authzfun:libXrdLcmaps.so \
-authzfunparms:--lcmapscfg=/etc/xrootd/lcmaps.cfg,--no-authz \
-authzfunparms:lcmapscfg=/etc/xrootd/lcmaps.cfg,no-authz \
-gmapopt:0 \
-authzto:3600
sec.protbind * gsi
Expand Down
2 changes: 1 addition & 1 deletion configs/stash-origin/config.d/50-stash-origin-authz.cfg
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@ if named stash-origin-auth
-key:/etc/grid-security/xrd/xrdkey.pem \
-crl:1 \
-authzfun:libXrdLcmaps.so \
-authzfunparms:--lcmapscfg=/etc/xrootd/lcmaps.cfg,--no-authz \
-authzfunparms:lcmapscfg=/etc/xrootd/lcmaps.cfg,no-authz \
-gmapopt:0 \
-authzto:3600

Expand Down

0 comments on commit 812a5b5

Please sign in to comment.