Print

Print

Hi @abh3 -

Not sure I'm entirely following here:

Should be possible but the end result should not have caused any problems in practice.

The multiuser plugin is necessary for accessing the data from the POSIX filesystem. It is set to bypass the DACs on the underlying filesystem.

Without it all files in the filesystem must either be world readable (bad) or xrootd readable (requiring complicated sticky group ownership schemes or ACLs). So indeed, it has caused problems in practice.

We're now having to advise sites to deploy configurations like this:

if named xrootd
  ofs.osslib ++ libXrdMultiuser.so
else
  ofs.osslib libXrdMultiuser.so default
fi

The second one is where libXrdMultiuser.so does the stacking itself. It's a huge bummer because we've spent years getting people to rip out the plugin-specific stacking and use the XRootD framework's built-in functionality (++).

Brian

—
Reply to this email directly, view it on GitHub, or unsubscribe.
You are receiving this because you commented.Message ID: <xrootd/xrootd/issues/1730/1278983731@github.com>

[ { "@context": "http://schema.org", "@type": "EmailMessage", "potentialAction": { "@type": "ViewAction", "target": "https://github.com/xrootd/xrootd/issues/1730#issuecomment-1278983731", "url": "https://github.com/xrootd/xrootd/issues/1730#issuecomment-1278983731", "name": "View Issue" }, "description": "View this Issue on GitHub", "publisher": { "@type": "Organization", "name": "GitHub", "url": "https://github.com" } } ]

Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1