Skip to content

Commit

Permalink
Do not require user mapping for CMS XCache
Browse files Browse the repository at this point in the history
https://github.com/opensciencegrid/xrootd-lcmaps/releases/tag/v1.5.0

> This release adds a new option to the xrootd-lcmaps plugin,
  --no-authz, that actually skips the LCMAPS callout.
>
> This can be used in cases where one would like a consistent invocation
of Globus and VOMS to validate the GSI and VOMS pieces, but don't need
to map the Xrootd user to a local Unix user.
  • Loading branch information
brianhlin committed Aug 1, 2019
1 parent 7da8306 commit 9ea248a
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion configs/cms-xcache/config.d/50-cms-xcache-authz.cfg
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ sec.protocol /usr/lib64 gsi \
-cert:/etc/grid-security/xrd/xrdcert.pem \
-key:/etc/grid-security/xrd/xrdkey.pem \
-crl:1 -authzfun:libXrdLcmaps.so \
-authzfunparms:lcmapscfg=/etc/xrootd/lcmaps.cfg,loglevel=1 \
-authzfunparms:lcmapscfg=/etc/xrootd/lcmaps.cfg,loglevel=1,no-authz \
-gmapopt:10 -gmapto:0

# The Authorization file for which users can do which actions:
Expand Down

0 comments on commit 9ea248a

Please sign in to comment.