Print

Print


> It's possible but we would need to add that feature and it's not even clear where to put it in as the DN is not readily available outside of the particular security stack being used

Why not have a trace level that dumps the contents of the `XrdSecEntity` at the beginning of the security session?  Looking quickly at the GSI plugin, it seems that you can ask it to drop the DN into the `moninfo` field.

This would also cover the other security plugins as well.

> default EU GDPR does not allow displaying such information without additional privacy protections that we aren't able to implement

I'm not entirely sure this is _entirely_ true - GDPR is more of a framework on what you need to do manage PII rather than a set of yes/no.  However, I can see several reasons why this would be off by default in many setups (some sites will simply object to the volume of data!).

 Note this may help with various site traceability requirements as well.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/xrootd/xrootd/issues/1738#issuecomment-1188490709
You are receiving this because you are subscribed to this thread.

Message ID: <[log in to unmask]>
########################################################################
Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1