XROOTD-L Archives

Support use of xrootd by HEP experiments

XROOTD-L@LISTSERV.SLAC.STANFORD.EDU

Options: Use Forum View

Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
George Patargias - UKRI STFC <[log in to unmask]>
Reply To:
Support use of xrootd by HEP experiments <[log in to unmask]>
Date:
Wed, 19 Feb 2020 14:09:06 +0000
Content-Type:
text/plain
Parts/Attachments:
text/plain (65 lines)
Hello Andy,


Many thanks for clarifying this.


George

________________________________
From: Andrew Hanushevsky <[log in to unmask]>
Sent: 19 February 2020 12:57:26
To: Patargias, George (STFC,RAL,SC)
Cc: [log in to unmask]
Subject: Re: Multiple auth libs in xrootd

Hi George,

1) You do need ofs.authorize otherwise the authorization plugin will not
be called. I suppose we shold issue a warning message if a plugin was
loaded but the directive was not specified.

2) You don't need the authdb directive because your Alice plugin doesn't
need it.

Andy


On Wed, 19 Feb 2020, George Patargias - UKRI STFC wrote:

> Hello,
>
>
> In our xrootd config, we have the following so as to enable authentication/authorisation via the
>
> very specific ALICE auth plugin
>
>
> ofs.authorize
> ofs.authlib /usr/lib64/libXrdAliceTokenAcc.so
> acc.audit deny grant
>
> Do we also need to specify an authdb file? According to the documentation, we have to (since we have
> ofs.authorize). We removed the reference to an authdb file because we thought that it is not used by
> ALICE; the tokens/envelopes contain all the authentication/authorisation they need: based on file,
> operation, file checksum, storage endpoint etc.
>
> Or we don't need ofs.authorize at all?
>
> Many thanks,
>
> George
>
> ########################################################################
> Use REPLY-ALL to reply to list
>
> To unsubscribe from the XROOTD-L list, click the following link:
> https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1
>

########################################################################
Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-L list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1

ATOM RSS1 RSS2