Hi Stephen,
> The YAIM configuration should be documented in the YAIM manual ... the
> question of how the WMS matches FQANs is a subject of debate at the
> moment, there is not yet an answer to record!
In this context, I wanted to ask you how the WMS matches a catch-all
FQAN, like the ones with a * in the following groups.conf:
"/VO=desy/GROUP=/desy/ROLE=lcgadmin":::sgm:
"/VO=desy/GROUP=/desy/test/ROLE=lcgadmin":::sgm:
"/VO=desy/GROUP=/desy/ROLE=production":::prd:
"/VO=desy/GROUP=/desy/GROUP=test":desytest::test:desy
"/VO=desy/GROUP=/desy/GROUP=test/*":desytest::test:desy
"/VO=desy/GROUP=/desy/test":desytest::test:desy
"/VO=desy/GROUP=/desy/test/*":desytest::test:desy
"/VO=desy/GROUP=/desy":desy:::desy
"/VO=desy/GROUP=/desy/*":desy:::desy
Adding the catch-all lines was the only possibility to have a working
VOMS mapping when people come with a VOMS proxy with the FQAN attribute
like
/VO=desy/GROUP=/desy/test/subgroup
or
/VO=desy/GROUP=/desy/othergroup
Or did I do something wrong in the groups.conf file?
Best
Yves
--------------------------------------------
Yves Kemp
[log in to unmask] Desy IT 2b/312
Fon: +49-(0)40-8998-2318 Notkestr. 85
Fax: +49-(0)40-8994-2318 D-22607 Hamburg
--------------------------------------------
|