search

ESGF / esgf-installer

ESGF P2P Node Installer
https://esgf.llnl.gov/
Other
20 stars 21 forks source link

Security subsystem script needs to be run on index node as well #553

Closed chrisacbr closed 5 years ago

chrisacbr commented 5 years ago

When installed as a standalone index node, the security XML configuration files are missing otherwise.

pchengi commented 5 years ago

When you have an index with an external IDP server, you don't need the security configuration on the index. Also, your change doesn't make it also install on INDEX type; it mandates that the INDEX type be on.

chrisacbr commented 5 years ago

I found they were needed because ORP is deployed by the installer on the index node and it requires those files; for example:

[INFO] esg.security.registry.service.impl.ReloadableFileSet: Using file:/esg/config/esgf_policies_local.xml
[INFO] esg.security.registry.service.impl.ReloadableFileSet: Using file:/esg/config/esgf_policies_common.xml
[INFO] esg.security.registry.service.impl.ReloadableFileSet: Using file:/esg/config/esgf_ats.xml
[INFO] esg.security.registry.service.impl.ReloadableFileSet: Using file:/esg/config/esgf_ats_static.xml

Note that the test $((sel & IDP_BIT+DATA_BIT+INDEX_BIT)) != 0 is a bitwise mask; ie. any one of the bits in the mask will cause the test to pass, hence the index bit can be on but isn't required.