esindril
July 9, 2021, 9:51am
2
Hi Emmanouil,
You can find some info about this here:https://eos-docs.web.cern.ch/configuration/http_tpc.html
EOS uses in general the /etc/grid-security/gridmap-file for mapping DNs to local users but you can also use the vid functionality to map VO info to specific accounts. You can also find more info in this thread:
Hi George,
All this depends actually what and how the certificate attributes are extracted. You can figure out what was extracted by looking at the log line where each info is printed in the MGM log file. For example, in an instance with the following gsi config:
sec.protocol gsi -crl:0 -cert:/etc/grid-security/daemon/hostcert.pem -key:/etc/grid-security/daemon/hostkey.pem -gridmap:/etc/grid-security/grid-mapfile -d:1 -gmapopt:2 -vomsat:1 -moninfo:1
And my certificate VOMS extension looking l…
Cheers,
1 Like