Print

---

Thanks Wei; I will see if I can do this.


George

________________________________
From: Yang, Wei <[log in to unmask]>
Sent: 25 January 2019 18:17:27
To: Patargias, George (STFC,RAL,SC); Fischer, Max (SCC)
Cc: xrootd-l
Subject: Re: Map users to a single username

Then maybe you can do something similar to what Max described for ALICE?

--
Wei Yang  |  [log in to unmask]  |  650-926-3338 (O)


On 1/25/19, 9:56 AM, "[log in to unmask] on behalf of George Patargias - UKRI STFC" <[log in to unmask] on behalf of [log in to unmask]> wrote:

    There is only unix authentication plus the ALICE-specific token-based authentication mechanism pointed to xrootd through the ofs.authlib directive

    ____________________________
    From: Yang, Wei <[log in to unmask]>
    Sent: 25 January 2019 17:46
    To: Patargias, George (STFC,RAL,SC); Fischer, Max (SCC)
    Cc: xrootd-l
    Subject: Re: Map users to a single username

    How are "all users" authenticate to your CEPH/Xrootd gateway?

    --
    Wei Yang  |  [log in to unmask]  |  650-926-3338 (O)


    On 1/25/19, 7:25 AM, "[log in to unmask] on behalf of George Patargias - UKRI STFC" <[log in to unmask] on behalf of [log in to unmask]> wrote:

        Hi Max,


        Thanks for this. I was refering basically on the xrootd@proxy service running on a Ceph gateway.


        Do you mean to change the user/group settings in [log in to unmask]

        from "xrootd" to "alicesgm" ?


        What about the xrootd@ceph service?


        George



        ________________________________
        From: Fischer, Max (SCC) <[log in to unmask]>
        Sent: 25 January 2019 15:02:22
        To: Patargias, George (STFC,RAL,SC)
        Cc: [log in to unmask]
        Subject: Re: Map users to a single username

        Hi George,

        while it is not exactly what you are asking for:
        We simply run all ALICE xrootd services as the respective alicesgm user. That automatically maps all users to this identity for operations on the file system etc.

        Cheers,
        Max

        > Am 25.01.2019 um 14:44 schrieb George Patargias - UKRI STFC <[log in to unmask]>:
        >
        > Hello,
        >
        >
        > Is there any directive in the xrootd config that can map all users to a single username?
        >
        >
        > Basically, I am trying to find the equivalent of the following directive from the CASTOR xrootd-plugin
        >
        >
        > xcastor2.role * alicesgm
        >
        >
        > Many thanks,
        >
        >
        > George
        >
        > ########################################################################
        > Use REPLY-ALL to reply to list
        >
        > To unsubscribe from the XROOTD-L list, click the following link:
        > https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1

        ########################################################################
        Use REPLY-ALL to reply to list

        To unsubscribe from the XROOTD-L list, click the following link:
        https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1



    ########################################################################
    Use REPLY-ALL to reply to list

    To unsubscribe from the XROOTD-L list, click the following link:
    https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1



########################################################################
Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-L list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1