I guess you meant ‘sss, not ssi‘. Currently xrootdfs explicitly fill the XrdSecEntity with username. Maybe that can be simplied somehow.

We should take this discussion to somewhere else. Not polluting this ticket.

regards,
--
Wei Yang | [log in to unmask]<mailto:[log in to unmask]> | 650-926-3338(O)

On 6/19/20, 1:40 PM, "Andrew Hanushevsky" <[log in to unmask]<mailto:[log in to unmask]>> wrote:

I meant SSS security -- the problem when working on unrelated plugins,
sigh.

On Fri, 19 Jun 2020, Wei Yang wrote:

> Hi Brian,
>
> With the ?sss? security, the xrootd-fuse does pass the original client?s username to the server, in XrdSecEntity (again, username, not uid)
>
> regards,
> --
> Wei Yang | [log in to unmask]<mailto:[log in to unmask]> | 650-926-3338(O)
>
> On 6/19/20, 1:14 PM, "Brian P Bockelman" <[log in to unmask]<mailto:[log in to unmask]>> wrote:
>
>
> I recall the plugin was waiting on some feature of XRootD V5 that would make it simpler -- although honestly I can't recall what that was.
>
> Anyhow, it's been running well at a few sites over the past few years. Looking at the code, there's a few opportunities for cleanup.
>
> That said, it's not clear if this would fix the original problem? Looks like the original problem was that xrootd-fuse wasn't passing along the username from the client to the server itself.
>
> ?
> You are receiving this because you commented.
> Reply to this email directly, view it on GitHub<https://github.com/xrootd/xrootd/issues/1219#issuecomment-646844566>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/ABHVGA5SXJTMOEXZ4XJ2MR3RXPBLXANCNFSM4OCYFANQ>.
>
>
> --
> You are receiving this because you commented.
> Reply to this email directly or view it on GitHub:
> https://github.com/xrootd/xrootd/issues/1219#issuecomment-646846687



You are receiving this because you commented.
Reply to this email directly, view it on GitHub<https://github.com/xrootd/xrootd/issues/1219#issuecomment-646852695>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/ABHVGA4YZ2K54C2A6SLYPUDRXPEMHANCNFSM4OCYFANQ>.


You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or unsubscribe.

[ { "@context": "http://schema.org", "@type": "EmailMessage", "potentialAction": { "@type": "ViewAction", "target": "https://github.com/xrootd/xrootd/issues/1219#issuecomment-646853666", "url": "https://github.com/xrootd/xrootd/issues/1219#issuecomment-646853666", "name": "View Issue" }, "description": "View this Issue on GitHub", "publisher": { "@type": "Organization", "name": "GitHub", "url": "https://github.com" } } ]

Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1