-
The WLCG goals for DC24 are
Third-party-copy transfers for supported sites. These will be done with audience-restricted, RSE-wide tokens, with scopes either storage.read for the source or storage.mo…
-
Dear IAM experts,
Our FTS services at CERN have observed that refresh tokens given via the urn:ietf:params:oauth:grant-type:token-exchange grant type are single-shot. Whilst the FTS software handl…
-
After starting work on the CLI for creating origin tokens, I realized we're pretty lackadaisical about how we create and verify tokens throughout the code base. We should pick an internal profile and …
-
Hi,
stat permissions are needed for most operations (including write and deletes), but scitokens currently includes them only in the read scope, meaning write operations need read scopes added to it…
-
-
Hi,
I wanted to use the `account/search` [API](https://indigo-iam.github.io/v/v1.8.3/docs/reference/api/account-api/#get-iamaccountsearch) to list the users in IAM.
For that, I created a new cli…
chaen updated
9 months ago
-
Any **user** can register client with **arbitrary** non-restricted (unknown) **scope name** like `my_personal_scope`. I see several issues with this behavior
* difficult to catch misspelled scope nam…
vokac updated
8 months ago
-
Hi @zachmann,
instead of creating a new dynamically registered client at the IAM provider, I'd like to use an _existing client_. Basically, the `mytoken` equivalent to `oidc-gen --client-id abc123 …
XMol updated
9 months ago
-
I have been testing the perfsonar toolkit pre 5.1 for a few weeks. After the last nightly updafe, opensearch may be broken. I don't results published for tests starting in my host
https://monit-gra…
-
We have found that there seems to be a limit of 100 hostgroups in PWA. Once we hit that limit, you can create a new hostgroup but it will not persist. Logging out and logging back into PWA, the hos…