You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Motivation:
NIS it not used by sites, thus makes no sense to keep NIS support in
dCache.
Modification:
Drop gplazma2-nis plugin.
Result:
Less unused code.
Acked-by: Karen Hoyos
Target: master
Require-book: yes
Require-notes: yes
Copy file name to clipboardExpand all lines: docs/TheBook/src/main/markdown/config-gplazma.md
+4-90Lines changed: 4 additions & 90 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -704,9 +704,8 @@ gid must also be obtained.
704
704
705
705
Out of the box, dCache supports multiple ways of obtaining the uid and gid from
706
706
a username. This could be done by querying an LDAP service (see `ldap` plugin),
707
-
an NIS service (see `nis` plugin) or the dCache server's local user account
708
-
lookup service (see `nsswitch` plugin). It is also possible to use explicit
709
-
configuration files (see `multimap` plugin).
707
+
or the dCache server's local user account lookup service (see `nsswitch` plugin).
708
+
It is also possible to use explicit configuration files (see `multimap` plugin).
710
709
711
710
##### kpwd
712
711
@@ -775,37 +774,6 @@ Example:
775
774
776
775
In this example following is happening: extract user's DN (1), extract and verify VOMS attributes (2), map DN+Role to a local account (3), extract uid and gids for a local account (4) and, finally, extract users home directory (5).
777
776
778
-
##### nis
779
-
780
-
The `nis` uses an existing `NIS` service to map username+password to a username.
781
-
782
-
Properties
783
-
784
-
**gplazma.nis.server**
785
-
786
-
`NIS` server host
787
-
Default: `nisserv.domain.com`
788
-
789
-
790
-
**gplazma.nis.domain**
791
-
792
-
`NIS` domain
793
-
Default: `domain.com`
794
-
795
-
The result of `nis` can be used by other plug-ins:
796
-
797
-
Example:
798
-
799
-
# Map grid or kerberos users to local accounts
800
-
auth optional x509 #1
801
-
auth optional voms #2
802
-
map requisite vorolemap #3
803
-
map optional krb5 #4
804
-
map optional nis #5
805
-
session requisite nis #6
806
-
807
-
In this example two access methods are considered: grid based and kerberos based. If user comes with grid certificate and VOMS role: extract user’s DN (1), extract and verify VOMS attributes (2), map DN+Role to a local account (3). If user comes with `Kerberos` ticket: extract local account (4). After this point in both cases we talk to `NIS` to get uid and gids for a local account (5) and, finally, adding users home directory (6).
808
-
809
777
##### mutator
810
778
811
779
The `mutator` plugin is used to convert principal returned by third-party plugin into a principal, which is understood by gplazma plugins. For example, when the `jaas` plugin is configured to be used with an _ActiveMQ_ server, then login module specific principal is returned.
@@ -920,8 +888,8 @@ Example:
920
888
auth optional voms
921
889
map requisite vorolemap
922
890
map optional krb5
923
-
map optional nis
924
-
session requisite nis
891
+
map optional ldap
892
+
session requisite ldap
925
893
account requisite banfile
926
894
927
895
#### session Plug-ins
@@ -978,44 +946,6 @@ Example:
978
946
979
947
In this example following is happening: extract user's DN (1), extract and verify VOMS attributes (2), map DN+Role to a local account (3), extract uid and gids for a local account (4) and, finally, extract users home directory (5).
980
948
981
-
982
-
983
-
##### nis
984
-
985
-
The `nis` plug-in adds root and home path information to the session, based on the username using your site’s `NIS` service.
986
-
987
-
988
-
989
-
Properties
990
-
991
-
**gplazma.nis.server**
992
-
993
-
`NIS` server host
994
-
Default: `nisserv.domain.com`
995
-
996
-
997
-
998
-
**gplazma.nis.domain**
999
-
1000
-
`NIS` domain
1001
-
Default: `domain.com`
1002
-
1003
-
The result of `nis` can be used by other plug-ins:
1004
-
1005
-
Example:
1006
-
1007
-
# Map grid or kerberos users to local accounts
1008
-
auth optional x509 #1
1009
-
auth optional voms #2
1010
-
map requisite vorolemap #3
1011
-
map optional krb5 #4
1012
-
map optional nis #5
1013
-
session requisite nis #6
1014
-
1015
-
In this example two access methods are considered: grid based and kerberos based. If user comes with grid certificate and VOMS role: extract user's DN (1), extract and verify VOMS attributes (2), map DN+Role to a local account (3). If user comes with `Kerberos` ticket: extract local account (4). After this point in both cases we talk to NIS to get uid and gids for a local account (5) and, finally, adding users home directory (6).
1016
-
1017
-
1018
-
1019
949
##### ldap
1020
950
1021
951
The `ldap` is a map, session and identity plugin.
@@ -1457,22 +1387,6 @@ a value. This means those values must start with a `/`.
1457
1387
1458
1388
The `nsswitsch` provides forward and reverse mapping for `NFSv4.1` using your system's `nsswitch` service.
1459
1389
1460
-
##### nis
1461
-
1462
-
The `nis` plug-in forward and reverse mapping for `NFSv4.1` using your site's NIS service.
1463
-
1464
-
Properties
1465
-
1466
-
**gplazma.nis.server**
1467
-
1468
-
`NIS` server host
1469
-
Default: `nisserv.domain.com`
1470
-
1471
-
**gplazma.nis.domain**
1472
-
1473
-
`NIS` domain
1474
-
Default: domain.com
1475
-
1476
1390
## Using X509 Certificates
1477
1391
1478
1392
Most plug-ins of `gPlazma` support `X.509` certificates for authentication and authorisation. `X.509` certificates are used to identify entities (e.g., persons, hosts) in the Internet. The certificates contain a DN (Distinguished Name) that uniquely describes the entity. To give the certificate credibility it is issued by a CA (Certificate Authority) which checks the identity upon request of the certificate (e.g., by checking the persons id). For the use of X.509 certificates with dCache your users will have to request a certificate from a CA you trust and you need host certificates for every host of your dCache instance.
0 commit comments