 |
 |
Hi George, 1) You do need ofs.authorize otherwise the authorization plugin will not be called. I suppose we shold issue a warning message if a plugin was loaded but the directive was not specified. 2) You don't need the authdb directive because your Alice plugin doesn't need it. Andy On Wed, 19 Feb 2020, George Patargias - UKRI STFC wrote: > Hello, > > > In our xrootd config, we have the following so as to enable authentication/authorisation via the > > very specific ALICE auth plugin > > > ofs.authorize > ofs.authlib /usr/lib64/libXrdAliceTokenAcc.so > acc.audit deny grant > > Do we also need to specify an authdb file? According to the documentation, we have to (since we have > ofs.authorize). We removed the reference to an authdb file because we thought that it is not used by > ALICE; the tokens/envelopes contain all the authentication/authorisation they need: based on file, > operation, file checksum, storage endpoint etc. > > Or we don't need ofs.authorize at all? > > Many thanks, > > George > > ######################################################################## > Use REPLY-ALL to reply to list > > To unsubscribe from the XROOTD-L list, click the following link: > https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1 > ######################################################################## Use REPLY-ALL to reply to list To unsubscribe from the XROOTD-L list, click the following link: https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1