Skip to content

Commit

Permalink
Update xrootd.md
Browse files Browse the repository at this point in the history
  • Loading branch information
vokac authored Aug 28, 2024
1 parent 091395b commit 5b0947f
Showing 1 changed file with 3 additions and 0 deletions.
3 changes: 3 additions & 0 deletions docs/token-based-authorization/configuration/xrootd.md
Original file line number Diff line number Diff line change
Expand Up @@ -26,6 +26,7 @@ issuer = https://wlcg.cloud.cnaf.infn.it/
base_path = /data/grid/wlcg
map_subject = false
default_user = xrootd
#authorization_strategy = capability group mapping
```

- Note that the `onmissing = passthrough` part is needed to continue with
Expand Down Expand Up @@ -53,6 +54,8 @@ http.header2cgi Authorization authz
= wlcgtknusr o: https://wlcg.cloud.cnaf.infn.it/ g: /wlcg
x wlcgtknusr /data/grid/wlcg a /data/grid/srr lr
```
- SciToken library together with XRootD 5.7.0 support explicit authorization
stragegy configuration (related [xrootd#2121](https://github.com/xrootd/xrootd/issues/2121))

This configuration enables flat authorization access on the storage to members
of the WLCG VO with the `/wlcg` group,, i.e. all users will have read and write
Expand Down

0 comments on commit 5b0947f

Please sign in to comment.