LISTSERV 16.5 - XROOTD-DEV Archives

OK, I misunderstood slightly from the last couple exchanges. What you describe below is what I thought originally.

Will do, Al

________________________________________________
Albert L. Rossi
Senior Software Developer
Scientific Computing Division, Scientific Data Services, Distributed Data Development
FCC 229A
Mail Station 369 (FCC 2W)
Fermi National Accelerator Laboratory
Batavia, IL 60510
(630) 840-3023

________________________________
From: Andrew Hanushevsky ***@***.***>
Sent: Friday, March 11, 2022 3:14 PM
To: xrootd/xrootd ***@***.***>
Cc: Albert Rossi ***@***.***>; Mention ***@***.***>
Subject: Re: [xrootd/xrootd] ZTN and Scitokens auth (Issue #1584)

Hi Albert,

No, the upshot is as follows:

1) If the client specified a ScoToken in the CGI use it, otherwise
2) If ztn was used, use the ztn SciToken (if it is a SciToken), otherwise
3) Passthrough the authorization.

Brian's pull request will implement the above in the SciToken library as
xrootd aleady supplies access to the token obtained via ztn.

So, dCache should do the same.

Andy

On Fri, 11 Mar 2022, Albert Rossi wrote:

> Just so I understand the upshot of this: essentially nothing changes on the server end for dCache with this because the client puts the ztn token in the CGI?
>
> Sorry if I am a bit out of the loop here, have been quite busy with other things, but I want to make sure dCache doesn't get out of sync ...
>
> Thanks, Al
>
> ________________________________________________
> Albert L. Rossi
> Senior Software Developer
> Scientific Computing Division, Scientific Data Services, Distributed Data Development
> FCC 229A
> Mail Station 369 (FCC 2W)
> Fermi National Accelerator Laboratory
> Batavia, IL 60510
> (630) 840-3023
>
> ________________________________
> From: Brian P Bockelman ***@***.***>
> Sent: Friday, March 11, 2022 2:03 PM
> To: xrootd/xrootd ***@***.***>
> Cc: Albert Rossi ***@***.***>; Mention ***@***.***>
> Subject: Re: [xrootd/xrootd] ZTN and Scitokens auth (Issue #1584)
>
>
> OK, so now ztn will point to the initial token via the Entity.creds field. Can I close this?
>
> Yes, I think this is good enough to close! Will try to send a corresponding PR today / tomorrow.
>
> ?
> Reply to this email directly, view it on GitHub<https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_xrootd_xrootd_issues_1584-23issuecomment-2D1065461921&d=DwMCaQ&c=gRgGjJ3BkIsb5y6s49QqsA&r=60rQ0HHqHmEY1P6VSdyuTQ&m=VHF-kSw5kbR-VKKywcAmT2ixMFQm1UBviX5Iv6FCfjJ29oDU6xewWc-AR0hhJAfW&s=QNNb2Y-oXtWYxOKpZYLxNJeFUKi5vEv5rDTRZlzHpg8&e=%3E, or unsubscribe<https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_notifications_unsubscribe-2Dauth_AA6NBHEYOMYRATAUX5H3GNDU7ORH7ANCNFSM5LUMRMZQ&d=DwMCaQ&c=gRgGjJ3BkIsb5y6s49QqsA&r=60rQ0HHqHmEY1P6VSdyuTQ&m=VHF-kSw5kbR-VKKywcAmT2ixMFQm1UBviX5Iv6FCfjJ29oDU6xewWc-AR0hhJAfW&s=M7Ov5Eg9f4M68yZhXVeiid6DOGBTasEhzRWgF5qLYcg&e=%3E.
> Triage notifications on the go with GitHub Mobile for iOS<https://urldefense.proofpoint.com/v2/url?u=https-3A__apps.apple.com_app_apple-2Dstore_id1477376905-3Fct-3Dnotification-2Demail-26mt-3D8-26pt-3D524675&d=DwMCaQ&c=gRgGjJ3BkIsb5y6s49QqsA&r=60rQ0HHqHmEY1P6VSdyuTQ&m=VHF-kSw5kbR-VKKywcAmT2ixMFQm1UBviX5Iv6FCfjJ29oDU6xewWc-AR0hhJAfW&s=_fsBXJh9kfuws0y6GB5vjzs-p9iQhSAQHV4JkxN3cwo&e=%3E or Android<https://urldefense.proofpoint.com/v2/url?u=https-3A__play.google.com_store_apps_details-3Fid-3Dcom.github.android-26referrer-3Dutm-5Fcampaign-253Dnotification-2Demail-2526utm-5Fmedium-253Demail-2526utm-5Fsource-253Dgithub&d=DwMCaQ&c=gRgGjJ3BkIsb5y6s49QqsA&r=60rQ0HHqHmEY1P6VSdyuTQ&m=VHF-kSw5kbR-VKKywcAmT2ixMFQm1UBviX5Iv6FCfjJ29oDU6xewWc-AR0hhJAfW&s=47-h7UozRGvdqw7EWE8OtuLSBy42omuMmhmYBxfZmDw&e=%3E.
> You are receiving this because you were mentioned.Message ID: ***@***.***>
>
>
> --
> Reply to this email directly or view it on GitHub:
> https://github.com/xrootd/xrootd/issues/1584#issuecomment-1065472655<https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_xrootd_xrootd_issues_1584-23issuecomment-2D1065472655&d=DwQCaQ&c=gRgGjJ3BkIsb5y6s49QqsA&r=60rQ0HHqHmEY1P6VSdyuTQ&m=zrESHh0aIdZGT1jG-e9CgPHk9vuWqbjDeOXVUbEgc8rzcJxWCyb9CurXIMoIGWKt&s=BkRRwcd4GUKNZoxAOtirQ98duLB2_7-af7NyPsWoyas&e=>
> You are receiving this because you were assigned.
>
> Message ID: ***@***.***>

—
Reply to this email directly, view it on GitHub<https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_xrootd_xrootd_issues_1584-23issuecomment-2D1065533398&d=DwMCaQ&c=gRgGjJ3BkIsb5y6s49QqsA&r=60rQ0HHqHmEY1P6VSdyuTQ&m=zrESHh0aIdZGT1jG-e9CgPHk9vuWqbjDeOXVUbEgc8rzcJxWCyb9CurXIMoIGWKt&s=88ZLpBOjf_b4JI1roH-Eanlbue82S1BlHE7bRQS0tOs&e=>, or unsubscribe<https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_notifications_unsubscribe-2Dauth_AA6NBHBC5EUB2VSOIY245YDU7OZSLANCNFSM5LUMRMZQ&d=DwMCaQ&c=gRgGjJ3BkIsb5y6s49QqsA&r=60rQ0HHqHmEY1P6VSdyuTQ&m=zrESHh0aIdZGT1jG-e9CgPHk9vuWqbjDeOXVUbEgc8rzcJxWCyb9CurXIMoIGWKt&s=d0ilE8iLP8qR5HzQb0jrhT3nn4PwiyALDRGhgPr-hDs&e=>.
Triage notifications on the go with GitHub Mobile for iOS<https://urldefense.proofpoint.com/v2/url?u=https-3A__apps.apple.com_app_apple-2Dstore_id1477376905-3Fct-3Dnotification-2Demail-26mt-3D8-26pt-3D524675&d=DwMCaQ&c=gRgGjJ3BkIsb5y6s49QqsA&r=60rQ0HHqHmEY1P6VSdyuTQ&m=zrESHh0aIdZGT1jG-e9CgPHk9vuWqbjDeOXVUbEgc8rzcJxWCyb9CurXIMoIGWKt&s=9Wf4CNriphqFaCyeiiYKhKDrrJYvmXvqnd6PcXZkqwI&e=> or Android<https://urldefense.proofpoint.com/v2/url?u=https-3A__play.google.com_store_apps_details-3Fid-3Dcom.github.android-26referrer-3Dutm-5Fcampaign-253Dnotification-2Demail-2526utm-5Fmedium-253Demail-2526utm-5Fsource-253Dgithub&d=DwMCaQ&c=gRgGjJ3BkIsb5y6s49QqsA&r=60rQ0HHqHmEY1P6VSdyuTQ&m=zrESHh0aIdZGT1jG-e9CgPHk9vuWqbjDeOXVUbEgc8rzcJxWCyb9CurXIMoIGWKt&s=n4q5VHdO0pUjvCW7Mv_sAKzxkRGAcuoR5iTpv7fqwj4&e=>.
You are receiving this because you were mentioned.Message ID: ***@***.***>

—
Reply to this email directly, view it on GitHub, or unsubscribe.
Triage notifications on the go with GitHub Mobile for iOS or Android.
You are receiving this because you commented.

[ { "@context": "http://schema.org", "@type": "EmailMessage", "potentialAction": { "@type": "ViewAction", "target": "https://github.com/xrootd/xrootd/issues/1584#issuecomment-1065539413", "url": "https://github.com/xrootd/xrootd/issues/1584#issuecomment-1065539413", "name": "View Issue" }, "description": "View this Issue on GitHub", "publisher": { "@type": "Organization", "name": "GitHub", "url": "https://github.com" } } ]

Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1