opensciencegrid / xrootd-lcmaps

Integration between Xrootd and LCMAPS.
Apache License 2.0
4 stars 11 forks source link

allow lcmaps policy to be read from config file #40

Closed ddavila0 closed 4 years ago

ddavila0 commented 4 years ago

This PR solves the problem of having a policy other than the default "xrootd_policy" e.g. "authorize_only" on --authzfunparms and then having a http request failing to find that policy[1]. It always tries to find the default one. Notice that this is only tru for 'http', when using 'root', things work fine.

[1] lcmaps[15907] LOG_DEBUG: 2020-01-09.18:28:00Z: lcmaps.mod-lcmaps_runPluginManager(): xrootd_policy lcmaps[15907] LOG_DEBUG: 2020-01-09.18:28:00Z: evaluationmanager: found plugin: lcmaps_verify_proxy2.mod lcmaps[15907] LOG_DEBUG: 2020-01-09.18:28:00Z: evaluationmanager: No more policies to run lcmaps[15907] LOG_DEBUG: 2020-01-09.18:28:00Z: lcmaps.mod-lcmaps_runPluginManager(): Error running evaluation manager lcmaps[15907] LOG_DEBUG: 2020-01-09.18:28:00Z: Credential Print: lcmaps[15907] LOG_DEBUG: 2020-01-09.18:28:00Z: lcmaps_run_with_stack_of_x509_and_return_account() error: could not run plugin manager lcmaps[15907] LOG_DEBUG: 2020-01-09.18:28:00Z: lcmaps_run_with_stack_of_x509_and_return_account(): failed ERROR in AuthzFun: LCMAPS failed or denied mapping

brianhlin commented 4 years ago

@ddavila0 can you tag the 1.7.5 release and build this for OSG 3.4 and OSG 3.5?

ddavila0 commented 4 years ago

I've put the link to the builds in the ticket: https://opensciencegrid.atlassian.net/browse/SOFTWARE-3967