This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "xrootd".
The branch, master has been updated
via e5ff16af57971b9f16e39c0b890c9cbbd3e11850 (commit)
via 1ab2de882bb63f050ebef66f3b5cc1240ec95f68 (commit)
from 7a6056aaf0b6e008e18a619f560ff1bf451e5dc0 (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit e5ff16af57971b9f16e39c0b890c9cbbd3e11850
Merge: 1ab2de882bb63f050ebef66f3b5cc1240ec95f68 7a6056aaf0b6e008e18a619f560ff1bf451e5dc0
Author: Gerri Ganis <[log in to unmask]>
Date: Fri Jun 10 20:59:20 2011 +0200
Merge branch 'master' of http://xrootd.org/repo/xrootd
commit 1ab2de882bb63f050ebef66f3b5cc1240ec95f68
Author: Gerri Ganis <[log in to unmask]>
Date: Fri Jun 10 20:58:29 2011 +0200
Extend the functionality of the authorization plug-in recently introduced.
The plug-in now contains three 'extern C' functions:
1. The main function
int XrdSecgsiAuthzFun(XrdSecEntity &entity)
allowing to modify the content of sec entity object according to the content
of the proxy;
2. The initialization fucntion
int XrdSecgsiAuthzInit(const char *params);
3. The key function
int XrdSecgsiAuthzKey(XrdSecEntity &entity, char **key)
defining the key for caching the results.
The key and the main function of this plug-in are now called after the handshake is
successful and the DN to user mappind is done, if required.
An example of the new form of the plug-in is provide in src/XrdSecgsi/XrdSecgsiAuthzFunDN.cc,
and more details about the functions are given in the header of XrdSecProtocolgsi::LoadAuthzFun .
The expiration time of the associated cache entries is controlled by proxy expiration time,
being limited to the value specified via the switch -authzto:<secs> (default: 12h, with -1
indicating no limit).
The patch also introduces the use of standard tracing functions in XrdSecgsiGMAPFunDN.
-----------------------------------------------------------------------
Summary of changes:
src/XrdSecgsi/GNUmakefile | 18 ++-
src/XrdSecgsi/XrdSecProtocolgsi.cc | 363 +++++++++++++++++++++++++++-------
src/XrdSecgsi/XrdSecProtocolgsi.hh | 25 ++-
src/XrdSecgsi/XrdSecgsiAuthzFunDN.cc | 153 ++++++++++++++
src/XrdSecgsi/XrdSecgsiGMAPFunDN.cc | 14 +-
5 files changed, 490 insertions(+), 83 deletions(-)
create mode 100644 src/XrdSecgsi/XrdSecgsiAuthzFunDN.cc
hooks/post-receive
--
xrootd
