 |
 |
Sure, we can take this offline. I can point to the topic on how to set it up and you can pass along the uid/gid. Then we have everything we need to do the fsuid() fsgid() magic. On Fri, 19 Jun 2020, Wei Yang wrote: > I guess you meant ?sss, not ssi?. Currently xrootdfs explicitly fill the XrdSecEntity with username. Maybe that can be simplied somehow. > > We should take this discussion to somewhere else. Not polluting this ticket. > > regards, > -- > Wei Yang | [log in to unmask]<mailto:[log in to unmask]> | 650-926-3338(O) > > On 6/19/20, 1:40 PM, "Andrew Hanushevsky" <[log in to unmask]<mailto:[log in to unmask]>> wrote: > > I meant SSS security -- the problem when working on unrelated plugins, > sigh. > > On Fri, 19 Jun 2020, Wei Yang wrote: > >> Hi Brian, >> >> With the ?sss? security, the xrootd-fuse does pass the original client?s username to the server, in XrdSecEntity (again, username, not uid) >> >> regards, >> -- >> Wei Yang | [log in to unmask]<mailto:[log in to unmask]> | 650-926-3338(O) >> >> On 6/19/20, 1:14 PM, "Brian P Bockelman" <[log in to unmask]<mailto:[log in to unmask]>> wrote: >> >> >> I recall the plugin was waiting on some feature of XRootD V5 that would make it simpler -- although honestly I can't recall what that was. >> >> Anyhow, it's been running well at a few sites over the past few years. Looking at the code, there's a few opportunities for cleanup. >> >> That said, it's not clear if this would fix the original problem? Looks like the original problem was that xrootd-fuse wasn't passing along the username from the client to the server itself. >> >> ? >> You are receiving this because you commented. >> Reply to this email directly, view it on GitHub<https://github.com/xrootd/xrootd/issues/1219#issuecomment-646844566>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/ABHVGA5SXJTMOEXZ4XJ2MR3RXPBLXANCNFSM4OCYFANQ>. >> >> >> -- >> You are receiving this because you commented. >> Reply to this email directly or view it on GitHub: >> https://github.com/xrootd/xrootd/issues/1219#issuecomment-646846687 > > > ? > You are receiving this because you commented. > Reply to this email directly, view it on GitHub<https://github.com/xrootd/xrootd/issues/1219#issuecomment-646852695>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/ABHVGA4YZ2K54C2A6SLYPUDRXPEMHANCNFSM4OCYFANQ>. > > > -- > You are receiving this because you commented. > Reply to this email directly or view it on GitHub: > https://github.com/xrootd/xrootd/issues/1219#issuecomment-646853666 -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/xrootd/xrootd/issues/1219#issuecomment-646854769 ######################################################################## Use REPLY-ALL to reply to list To unsubscribe from the XROOTD-DEV list, click the following link: https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1