 |
 |
Thank you, that was what I needed for sss. I now successfully relay the ztn credentials to the origin. My last sticking point is that I can't figure out how to map the token subject to a unix username. Is this a SciTokens plugin issue rather than a credential forwarding issue? On the proxy server's scitokens config I get a `name_mapfile` match as I pasted in my original note, but on the origin I see the token subject, not the mapped username. ``` 221207 10:09:51 8449 multiuser_UserSentry: Switching FS uid for user xrootd 221207 10:09:51 8449 multiuser_UserSentry: Switching FS uid for user xrootd 221207 10:09:51 11912 XrootdXeq: U2.3393788:25@dtnxxxx pub IP46 login as http://cilogon.org/serverA/users/xxxxxxx via ztn auth for bhess.230397:34@origin 221207 10:09:51 11912 multiuser_UserSentry: XRootD mapped request to username that does not exist: http://cilogon.org/serverA/users/xxxxxxx 221207 10:09:51 11912 multiuser_UserSentry: XRootD mapped request to username that does not exist: http://cilogon.org/serverA/users/xxxxxxx 221207 10:09:51 11912 ofs_open: U2.3393788:25@dtnxxxx Unable to create /gluex/bbb; permission denied 221207 10:09:51 11912 U2.3393788:25@dtn2201 Xrootd_Response: sending err 3010: Unable to create /gluex/bbb; permission denied 221207 10:09:51 11912 XrootdXeq: U2.3393788:25@dtnxxxx disc 0:00:00 221207 10:09:51 11912 multiuser_UserSentry: XRootD mapped request to username that does not exist: http://cilogon.org/serverA/users/xxxxxxx ``` -- Reply to this email directly or view it on GitHub: https://github.com/xrootd/xrootd/issues/1851#issuecomment-1341129811 You are receiving this because you are subscribed to this thread. Message ID: <[log in to unmask]> ######################################################################## Use REPLY-ALL to reply to list To unsubscribe from the XROOTD-DEV list, click the following link: https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1