search

glideinWMS / glideinwms

The glideinWMS Project
http://tinyurl.com/glideinwms
Apache License 2.0
16 stars 45 forks source link

idtoken_lifetime parameter set in global but not applied to groups #261

Closed mmascher closed 1 year ago

mmascher commented 1 year ago

Describe the bug When idtoken_lifetime is only set in the global section of the frontend.xml (not set in the groups), then the value set in the group.descript will be the default one, making the value set essentially useless.

To Reproduce Set idtoken_lifetime in the global configuration to something different than the default 24, but do not set it in the but not in the groups:

   <security classad_proxy="/var/lib/gwms-frontend/.globus/x509_service_proxy.proxy" proxy_DN="/DC=ch/DC=cern/OU=computers/CN=frontend04/vocms080.cern.ch" security_name="CMSG-ITB_gWMSFrontend-v1_0" sym_key="aes_256_cbc" idtoken_lifetime="120">

launch reconfigure and then grep:

[mmascher@vocms0802 ~]$ grep IDTokenLifetime /data/gwms-frontend/vofrontend/ -r
/data/gwms-frontend/vofrontend/group_CERN_CAF/group.descript:IDTokenLifetime    24
/data/gwms-frontend/vofrontend/group_opportunistic_conservative/group.descript:IDTokenLifetime  24
/data/gwms-frontend/vofrontend/group_comet/group.descript:IDTokenLifetime   24
/data/gwms-frontend/vofrontend/group_main-arm/group.descript:IDTokenLifetime    24
/data/gwms-frontend/vofrontend/frontend.descript:IDTokenLifetime    120

Expected behavior Only the frontend.descript should be set.

Info (please complete the following information):