From 9ea248a2f1d1644bbc7dc9602f8fe248632a378d Mon Sep 17 00:00:00 2001 From: Brian Lin Date: Thu, 1 Aug 2019 15:29:00 -0500 Subject: [PATCH] Do not require user mapping for CMS XCache https://github.com/opensciencegrid/xrootd-lcmaps/releases/tag/v1.5.0 > This release adds a new option to the xrootd-lcmaps plugin, --no-authz, that actually skips the LCMAPS callout. > > This can be used in cases where one would like a consistent invocation of Globus and VOMS to validate the GSI and VOMS pieces, but don't need to map the Xrootd user to a local Unix user. --- configs/cms-xcache/config.d/50-cms-xcache-authz.cfg | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/configs/cms-xcache/config.d/50-cms-xcache-authz.cfg b/configs/cms-xcache/config.d/50-cms-xcache-authz.cfg index 56a883e7..0ee74125 100644 --- a/configs/cms-xcache/config.d/50-cms-xcache-authz.cfg +++ b/configs/cms-xcache/config.d/50-cms-xcache-authz.cfg @@ -15,7 +15,7 @@ sec.protocol /usr/lib64 gsi \ -cert:/etc/grid-security/xrd/xrdcert.pem \ -key:/etc/grid-security/xrd/xrdkey.pem \ -crl:1 -authzfun:libXrdLcmaps.so \ - -authzfunparms:lcmapscfg=/etc/xrootd/lcmaps.cfg,loglevel=1 \ + -authzfunparms:lcmapscfg=/etc/xrootd/lcmaps.cfg,loglevel=1,no-authz \ -gmapopt:10 -gmapto:0 # The Authorization file for which users can do which actions: