|
1 | 1 | title: Configuring XRootD Authorization |
2 | | -DateReviewed: 2021-11-12 |
| 2 | +DateReviewed: 2022-05-06 |
3 | 3 |
|
4 | 4 | Configuring XRootD Authorization |
5 | 5 | ================================ |
@@ -192,27 +192,6 @@ so if you are using the mappings provided in `/usr/share/osg/voms-mapfile-defaul |
192 | 192 | you will have to copy them to `/etc/grid-security/voms-mapfile`. |
193 | 193 |
|
194 | 194 |
|
195 | | -### Authenticating Proxies (deprecated) ### |
196 | | - |
197 | | -!!! info "OSG 3.5 end-of-life" |
198 | | - OSG 3.5 will reach its end-of-life in [May 2022](../../release/release_series.md#series-overviews). |
199 | | - |
200 | | -In [OSG 3.5](../../release/release_series.md#series-overviews), [LCMAPS](../../security/lcmaps-voms-authentication.md) is |
201 | | -used to authenticate X.509 and VOMS proxies to usernames utilized by the |
202 | | -[authorization database](#authorization-database). |
203 | | -Perform the following instructions on all data nodes: |
204 | | - |
205 | | -1. Install [CA certificates](../../common/ca.md#installing-ca-certificates) and |
206 | | - [manage CRLs](../../common/ca.md#managing-certificate-revocation-lists) |
207 | | - |
208 | | -1. Copy your host certificate and key to `/etc/grid-security/xrd/xrdcert.pem` and `/etc/grid-security/xrd/xrdkey.pem`, |
209 | | - respectively. |
210 | | - |
211 | | -1. Configure the [LCMAPS VOMS plugin](../../security/lcmaps-voms-authentication.md) |
212 | | - |
213 | | -1. Any subject DN or VOMS FQAN mappings from LCMAPS will result in usernames that can be used in the |
214 | | - [authorization database](#authorization-database). |
215 | | - |
216 | 195 | ### Authorization database ### |
217 | 196 |
|
218 | 197 | XRootD allows configuring fine-grained file access permissions based on authenticated identities and paths. |
|
0 commit comments