Print

Print


Hi Jyothish,

Authorization plugins are stackable.  You can do this, for example:

ofs.authlib ++ libXrdAccSciTokens.so
ofs.authlib ++ libXrdMacaroons.so

in order to have the token first examined as a SciToken and, failing then, then as a Macaroon.

I'm less familiar with the technical pieces of the ALICE plugin.  However, it looks like this repo is fairly well-maintained:

https://gitlab.cern.ch/eos/alicetokenacc

and flipping through the source code, either does already layer or would need minor changes.

Brian

> On Jun 12, 2023, at 9:48 AM, Jyothish Thomas - STFC UKRI <[log in to unmask]> wrote:
> 
> Hi All,
> I’m thinking on ways of handling requests with different authentication systems (currently ALICE tokens and Macaroons, then Scitokens for the foreseeable future) in the same xrootd server.
> The initial Idea I had was to make a ‘switch’ plugin that would decide which auth system to use depending on the filepath requested.
> but before that I wanted to ask if there’s an existing/preferred way of handling such cases.
>  Regards,
> Jyothish
> 
> Use REPLY-ALL to reply to list
> To unsubscribe from the XROOTD-DEV list, click the following link:
> https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1



########################################################################
Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1