HowTo: Configuring gPlazma

From Public PIC Wiki
Revision as of 06:43, 6 September 2017 by Mcaubet (talk | contribs) (→‎multimap)
Jump to navigation Jump to search

Configuring gPlazma

dCache Authorization by protocol

WebDAV

  • htpasswd
Authentication: JAAS, custom /etc/dcache/jgss.conf
Mapping: glazma Mutator (to convert LDAP specific result to dCache internal principals) + NSSwitch (to map user name to uid)

NFSv3/NFSv41

  • Authentication: Not performed in the dCache system, is made through OpenLDAP server.
  • Mapping: sername/Password already authenticated through OpenLDAP, NSSwitch for mapping.

GridFTP

DCap/GSI-DCap

XRootD

HTPasswd

  • This is intended only for the WebDAV protocol.

x509 Certificates

  • This is mostly intented for the WebDAV protocol.

VOMS Certificates

  • This is intented for GRID Users, mostly using GridFTP, GSI-DCap & SRM protocols.

JAAS

  • This is intended for PIC LDAP users accessing to WebDAV.

multimap

  • Useful for OIDC authentication (i.e. through Google or INDIGO Accounts)