|
1 | 1 | title: Configuring XRootD Authorization
|
2 |
| -DateReviewed: 2021-11-12 |
| 2 | +DateReviewed: 2022-05-06 |
3 | 3 |
|
4 | 4 | Configuring XRootD Authorization
|
5 | 5 | ================================
|
@@ -192,27 +192,6 @@ so if you are using the mappings provided in `/usr/share/osg/voms-mapfile-defaul
|
192 | 192 | you will have to copy them to `/etc/grid-security/voms-mapfile`.
|
193 | 193 |
|
194 | 194 |
|
195 |
| -### Authenticating Proxies (deprecated) ### |
196 |
| - |
197 |
| -!!! info "OSG 3.5 end-of-life" |
198 |
| - OSG 3.5 will reach its end-of-life in [May 2022](../../release/release_series.md#series-overviews). |
199 |
| - |
200 |
| -In [OSG 3.5](../../release/release_series.md#series-overviews), [LCMAPS](../../security/lcmaps-voms-authentication.md) is |
201 |
| -used to authenticate X.509 and VOMS proxies to usernames utilized by the |
202 |
| -[authorization database](#authorization-database). |
203 |
| -Perform the following instructions on all data nodes: |
204 |
| - |
205 |
| -1. Install [CA certificates](../../common/ca.md#installing-ca-certificates) and |
206 |
| - [manage CRLs](../../common/ca.md#managing-certificate-revocation-lists) |
207 |
| - |
208 |
| -1. Copy your host certificate and key to `/etc/grid-security/xrd/xrdcert.pem` and `/etc/grid-security/xrd/xrdkey.pem`, |
209 |
| - respectively. |
210 |
| - |
211 |
| -1. Configure the [LCMAPS VOMS plugin](../../security/lcmaps-voms-authentication.md) |
212 |
| - |
213 |
| -1. Any subject DN or VOMS FQAN mappings from LCMAPS will result in usernames that can be used in the |
214 |
| - [authorization database](#authorization-database). |
215 |
| - |
216 | 195 | ### Authorization database ###
|
217 | 196 |
|
218 | 197 | XRootD allows configuring fine-grained file access permissions based on authenticated identities and paths.
|
|
0 commit comments