LISTSERV 16.5 - XROOTD-DEV Archives

Thank you, that was what I needed for sss. I now successfully relay the ztn credentials to the origin.

My last sticking point is that I can't figure out how to map the token subject to a unix username. Is this a SciTokens plugin issue rather than a credential forwarding issue?

On the proxy server's scitokens config I get a name_mapfile match as I pasted in my original note, but on the origin I see the token subject, not the mapped username.

221207 10:09:51 8449 multiuser_UserSentry: Switching FS uid for user xrootd
221207 10:09:51 8449 multiuser_UserSentry: Switching FS uid for user xrootd
221207 10:09:51 11912 XrootdXeq: U2.3393788:25@dtnxxxx pub IP46 login as http://cilogon.org/serverA/users/xxxxxxx via ztn auth for bhess.230397:34@origin
221207 10:09:51 11912 multiuser_UserSentry: XRootD mapped request to username that does not exist: http://cilogon.org/serverA/users/xxxxxxx
221207 10:09:51 11912 multiuser_UserSentry: XRootD mapped request to username that does not exist: http://cilogon.org/serverA/users/xxxxxxx
221207 10:09:51 11912 ofs_open: U2.3393788:25@dtnxxxx Unable to create /gluex/bbb; permission denied
221207 10:09:51 11912 U2.3393788:25@dtn2201 Xrootd_Response: sending err 3010: Unable to create /gluex/bbb; permission denied
221207 10:09:51 11912 XrootdXeq: U2.3393788:25@dtnxxxx disc 0:00:00
221207 10:09:51 11912 multiuser_UserSentry: XRootD mapped request to username that does not exist: http://cilogon.org/serverA/users/xxxxxxx

—
Reply to this email directly, view it on GitHub, or unsubscribe.
You are receiving this because you are subscribed to this thread.

[ { "@context": "http://schema.org", "@type": "EmailMessage", "potentialAction": { "@type": "ViewAction", "target": "https://github.com/xrootd/xrootd/issues/1851#issuecomment-1341129811", "url": "https://github.com/xrootd/xrootd/issues/1851#issuecomment-1341129811", "name": "View Issue" }, "description": "View this Issue on GitHub", "publisher": { "@type": "Organization", "name": "GitHub", "url": "https://github.com" } } ]

Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1