Print

Print


Looking at what I did for `XrdLcmaps`:
- *space*-separated list of groups. 
- They should start with a slash; VOMS groups are hierarchical (i.e., `/atlas/foo/bar` is distinct from `/atlas/baz`) unlike Unix groups.

One open question is how we should handle a proxy certificate with multiple VOMS extensions present - i.e., a proxy certificate with both ATLAS and CMS extensions.  After all, it's perfectly acceptable for the CMS VOMS server to sign an extensions with FQAN `/atlas`.  It's traditional that CMS group names are prefixed with `/cms`, but not enforced or validated by the client.

-- 
You are receiving this because you commented.
Reply to this email directly or view it on GitHub:
https://github.com/xrootd/xrootd/issues/566#issuecomment-323732506

########################################################################
Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1