When a per-request mapping is made (such as with SciTokens), the mapped name is not put in the typical Entity.name but rather an extended attribute. Only authorization plugins that have been explicitly updated to look for this attribute can be usefully chained after per-request mapping.

These changes allow the acc subsystem to be chained in a useful manner after a token plugin (such as SciTokens).

You can view, comment on, or merge this pull request online at:

https://github.com/xrootd/xrootd/pull/1637

Commit Summary

770de01 Make the `acc` subsystem aware of request-based name mapping.

File Changes

(2 files)

M src/XrdAcc/XrdAccAccess.cc (16)
M src/XrdSciTokens/XrdSciTokensAccess.cc (1)

Patch Links:

—
Reply to this email directly, view it on GitHub, or unsubscribe.
Triage notifications on the go with GitHub Mobile for iOS or Android.
You are receiving this because you are subscribed to this thread.

[ { "@context": "http://schema.org", "@type": "EmailMessage", "potentialAction": { "@type": "ViewAction", "target": "https://github.com/xrootd/xrootd/pull/1637", "url": "https://github.com/xrootd/xrootd/pull/1637", "name": "View Pull Request" }, "description": "View this Pull Request on GitHub", "publisher": { "@type": "Organization", "name": "GitHub", "url": "https://github.com" } } ]

Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1