 |
 |
Dear,
No, I not using the -5.so extension:
if exec xrootd
xrd.protocol http:1094 /usr/lib64/libXrdHttp.so
http.secxtractor libXrdVoms.so
#http.cadir /etc/grid-security/certificates/
#http.cert /etc/grid-security/xrd/xrdcert.pem
#http.key /etc/grid-security/xrd/xrdkey.pem
#TLS config
xrd.tls /etc/grid-security/xrd/xrdcert.pem /etc/grid-security/xrd/xrdkey.pem
xrd.tlsca certdir /etc/grid-security/certificates
xrootd.tls capable all -data
http.exthandler xrdtpc libXrdHttpTPC.so
http.exthandler xrdmacaroons libXrdMacaroons.so
http.desthttps yes
http.trace all -debug
macaroons.secretkey /etc/xrootd/macaroon-secret
#macaroons.onmissing allow
macaroons.trace all
ofs.authlib libXrdMacaroons.so
http.listingdeny yes
#http.staticpreload http://static/robots.txt /etc/xrootd/robots.txt
#http.header2cgi Authorization authz
fi
I hope to be maped to group cms (g /cms or /cms/escms) but not as logsices:
210601 21:01:19 7828 anon.0:33@login1 sysXrdHttp: Setting host: [::ffff:10.10.150.1]
http Protocol 'gsi'
http Name 'locsices'
http Host '[::ffff:10.10.150.1]'
http Vorg 'cms cms'
http Role 'NULL NULL'
http Grps '/cms /cms/escms'
http Caps ''
http Pidn ''
http Crlen 0
http ueid 0
http uid 0
http gid 0
210601 21:01:19 7828 sysXrdHttp: read 204 of 1048576 bytes
210601 21:01:19 7828 XrootdBridge: locsices.3:33@login1 login as locsices
....
210601 21:01:19 7828 acc_Audit: locsices.3:33@login1 deny gsi locsices@[::ffff:10.10.150.1] create /store/temp/stor.davix.011
....
Regards, I
—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub, or unsubscribe.
Use REPLY-ALL to reply to list
To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1