Difference between revisions of "ARC CE Hints"
From GridPP Wiki
(→Mapping to pool accounts) |
(→Mapping to pool accounts) |
||
Line 10: | Line 10: | ||
"--allow-limited-proxy"<br/> | "--allow-limited-proxy"<br/> | ||
pepc = "lcmaps_c_pep.mod" | pepc = "lcmaps_c_pep.mod" | ||
− | "--pep-daemon-endpoint-url https:// | + | "--pep-daemon-endpoint-url https://argus.domain:8154/authz" |
"--resourceid http://authz-interop.org/xacml/resource/resource-type/arc" | "--resourceid http://authz-interop.org/xacml/resource/resource-type/arc" | ||
"--actionid http://glite.org/xacml/action/execute" | "--actionid http://glite.org/xacml/action/execute" | ||
Line 19: | Line 19: | ||
arc: | arc: | ||
verify_proxy -> pepc | verify_proxy -> pepc | ||
+ | where ''argus.domain'' should be replace with the hostname of your Argus server. |
Revision as of 18:56, 17 June 2014
Mapping to pool accounts
Argus in combination with lcmaps can be used to map DNs to pool accounts. In the [gridftpd] section of /etc/arc.conf include the following:
unixmap="* lcmaps liblcmaps.so /usr/lib64 /etc/lcmaps/lcmaps.db voms" unixmap="nobody:nobody all"
where /etc/lcmaps/lcmaps.db is
path = /usr/lib64/lcmaps
verify_proxy = "lcmaps_verify_proxy.mod" "-certdir /etc/grid-security/certificates" "--discard_private_key_absence" "--allow-limited-proxy"
pepc = "lcmaps_c_pep.mod" "--pep-daemon-endpoint-url https://argus.domain:8154/authz" "--resourceid http://authz-interop.org/xacml/resource/resource-type/arc" "--actionid http://glite.org/xacml/action/execute" "--capath /etc/grid-security/certificates/" "--certificate /etc/grid-security/hostcert.pem" "--key /etc/grid-security/hostkey.pem"
# Policies: arc: verify_proxy -> pepc
where argus.domain should be replace with the hostname of your Argus server.