This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "xrootd".
The branch, master has been updated
via acec0c8a40b803726f38d52ac5278daf96580456 (commit)
from f420d956329ec4c0c688d32b23b790fe1f8b3997 (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit acec0c8a40b803726f38d52ac5278daf96580456
Author: Gerri Ganis <[log in to unmask]>
Date: Thu Jun 7 17:25:44 2012 +0200
Add possibility to load a function for VOMS extraction via plug-in.
The plug-in must contain two functions, to be all declared as 'extern C':
1. The main function:
int XrdSecgsiVOMSFun(XrdSecEntity &entity)
here entity is the XrdSecEntity object associated with the handshake on the
server side. On input entity contains:
- in 'name' the username, DN, DN hash according to the GMAP option
- in 'host' the client hostname
- in 'creds'the proxy chain
The proxy chain can be either in 'raw' or 'PEM base64' format (see below).
This function returns
0 on success
<0 on error (implies authentication failure if VOMS
attributes are required)
2. The initialization function:
int XrdSecgsiVOMSInit(const char *)
here 'parameters' is the string of parameters, separated by ' '.
This function return <0 in case of failure or the format type of the proxy chain
expected by the main function:
0 raw, to be used with XrdCrypto tools
1 PEM (base64 standard string)
An example of plug-in doing exactly what is now done by XrdSecProtocolgsi::ExtractVOMS
can be found in XrdSecgsiVOMSFunLite.cc under src/XrdSecgsi.
Load of this plugin is controlled by two new switches for the GSI plugin:
-vomsfun defining the location of the library
-vomsfunparms defining the parameters parsed by XrdSecgsiVOMSInit
The existing switch 'vomsat' has been augmented of one case to include the case when
VOMS attributes are required:
-vomsat 0 do not look for VOMS
1 extract if available
2 fail if not available
-----------------------------------------------------------------------
Summary of changes:
src/XrdSecgsi/XrdSecProtocolgsi.cc | 219 +++++++++++++++++++++++++++++---
src/XrdSecgsi/XrdSecProtocolgsi.hh | 16 ++-
src/XrdSecgsi/XrdSecgsiVOMSFunLite.cc | 182 +++++++++++++++++++++++++++
3 files changed, 393 insertions(+), 24 deletions(-)
create mode 100644 src/XrdSecgsi/XrdSecgsiVOMSFunLite.cc
hooks/post-receive
--
xrootd
########################################################################
Use REPLY-ALL to reply to list
To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1
