-
Similarly to the #5950 and as discussed recently in WLCG AuthZ mailing list same problem apply also to `wlcg.groups` or generally token group identity mapping. Nobody can guarantee that two different …
vokac updated
2 years ago
-
### Description
Katy from RAL asked the FTS team to investigate erroneous RSE values within the central WLCG monitoring system. After investigating the problem, the FTS team discovered that RUCIO is …
-
gfal-bringonline
and gfal-xattr
dunepro@dunegpvm01 74]$ gfal-xattr root://fndca1.fnal.gov:1094//pnfs/fnal.gov/usr/dune/tape_backed/dunepro//fardet-hd/hit-reconstructed/2023/mc/out1/fd_mc_2023a/0…
-
Dear dCache devs,
I got a token from an IAM that made dCache refuse my upload with a `403`.
```
{
"wlcg.ver": "1.0",
"sub": "15666f36-40a0-4ef0-af8b-08d962deb769",
"aud": "https:…
-
Per page 7, the `wlcg.ver`, which is a required claim, denotes
> the version of the WLCG token profile the relying party must understand to validate the token
The current version of the document …
-
The publishing of new Issuers for dissemination across sites needs to be done in a secure manner.
In addition, contact details for issuer admins need to also be well recorded in a trustworthy place…
-
JustIN at one point had a pinning feature for FNAL_DCACHE which is currently disabled.
Please re-enable this. FNAL_DCACHE now supports the WLCG bring-online mechanism which it did not previously,
w…
-
The document defines groups as forming a hierarchy, where the group name represents a path through that hierarchy. For example, the group `/group-1` is a top-level group because it has no parent gro…
-
With the addition of [#719](https://github.com/PelicanPlatform/pelican/pull/719), Pelican generates a lot more WLCG-conformant tokens. We use these tokens for everything from advertising namespaces to…
-
### Background
The AARC project (and successors) introduced a standard way to represent group-membership. This was codified as [AARC guideline G002](https://aarc-project.eu/guidelines/aarc-g002/),…