WLCG Token AuthN/Z for EOS

Hello,

Now I am setting up scitoken config for EOS to meet the new WLCG requirements.

Based on EOS docs I already have:

mgmofs.macaroonslib libXrdMacaroons.so libXrdAccSciTokens.so

Question: I’m confused about the /opt/xrd/etc/Authfile file and can’t find any EOS information about that, is that still required or is that documentation out of date?

Under the WLCG configuration docs, information is given for various SE implementations (dCache, etc.) but not EOS. But I did find some EOS-related documentation under the xrootd section.
Based on that it looks like I should try the path-based mapping, to the user that owns that path.

So the remaining steps should be just writing a scitokens.cfg file and name mapfile.
If I have all the pieces right (?) I can try to write an EOS section in the WLCG docs.

One other question: what is the significance of EOS’ own addresses in audience = ? I suppose I should use the public address of the MGM, but this is different from the private address of the MGM that it uses internally and is reported by hostname -f.

Thanks!