Skip to content

Render VOMS AC tags in arcproxy output

Andrii Salnikov requested to merge andrii/arc:arcproxy-tags-rendering into master

  1. Short FQANs (GFD.182 compliant) are used.

  2. Non-FQAN rendering of FQAN attributes were removed. Previously arcproxy includes following lines in addition to FQANs:

attribute : role = VO-Admin (moldyngrid)
  1. Tags rendering is not defined in GFD.182. As tags can be assigned to groups and roles as well, the FQAN-based rendering (that used in ARC SDK internally) were used to output this information.

Example arcproxy output:

====== AC extension information for VO moldyngrid ======
VO        : moldyngrid
subject   : /DC=org/DC=ugrid/O=people/O=KNU/CN=Andrii Salnikov
issuer    : /DC=org/DC=ugrid/O=hosts/O=KNU/CN=voms.grid.org.ua
uri       : voms.grid.org.ua:15110
attribute : /moldyngrid
attribute : /moldyngrid/Role=VO-Admin
attribute : /moldyngrid/Role=production
attribute : /moldyngrid/edu
tag       : /moldyngrid/Role=production:nickname=rolenickname
tag       : /moldyngrid/edu:test=groupedu
tag       : /moldyngrid:uniq=1
tag       : /moldyngrid:nickname=manf
tag       : /moldyngrid:test=breakmelogger
Edited by Maiken

Merge request reports