Skip to content

Commit 0d6166a

Browse files
committed
gplazma: drop nis support
Motivation: NIS it not used by sites, thus makes no sense to keep NIS support in dCache. Modification: Drop gplazma2-nis plugin. Result: Less unused code. Acked-by: Karen Hoyos Target: master Require-book: yes Require-notes: yes
1 parent 8ad4e09 commit 0d6166a

8 files changed

Lines changed: 7 additions & 351 deletions

File tree

docs/TheBook/src/main/markdown/config-gplazma.md

Lines changed: 4 additions & 90 deletions
Original file line numberDiff line numberDiff line change
@@ -704,9 +704,8 @@ gid must also be obtained.
704704

705705
Out of the box, dCache supports multiple ways of obtaining the uid and gid from
706706
a username. This could be done by querying an LDAP service (see `ldap` plugin),
707-
an NIS service (see `nis` plugin) or the dCache server's local user account
708-
lookup service (see `nsswitch` plugin). It is also possible to use explicit
709-
configuration files (see `multimap` plugin).
707+
or the dCache server's local user account lookup service (see `nsswitch` plugin).
708+
It is also possible to use explicit configuration files (see `multimap` plugin).
710709

711710
##### kpwd
712711

@@ -775,37 +774,6 @@ Example:
775774

776775
In this example following is happening: extract user's DN (1), extract and verify VOMS attributes (2), map DN+Role to a local account (3), extract uid and gids for a local account (4) and, finally, extract users home directory (5).
777776

778-
##### nis
779-
780-
The `nis` uses an existing `NIS` service to map username+password to a username.
781-
782-
Properties
783-
784-
**gplazma.nis.server**
785-
786-
`NIS` server host
787-
Default: `nisserv.domain.com`
788-
789-
790-
**gplazma.nis.domain**
791-
792-
`NIS` domain
793-
Default: `domain.com`
794-
795-
The result of `nis` can be used by other plug-ins:
796-
797-
Example:
798-
799-
# Map grid or kerberos users to local accounts
800-
auth optional x509 #1
801-
auth optional voms #2
802-
map requisite vorolemap #3
803-
map optional krb5 #4
804-
map optional nis #5
805-
session requisite nis #6
806-
807-
In this example two access methods are considered: grid based and kerberos based. If user comes with grid certificate and VOMS role: extract user’s DN (1), extract and verify VOMS attributes (2), map DN+Role to a local account (3). If user comes with `Kerberos` ticket: extract local account (4). After this point in both cases we talk to `NIS` to get uid and gids for a local account (5) and, finally, adding users home directory (6).
808-
809777
##### mutator
810778

811779
The `mutator` plugin is used to convert principal returned by third-party plugin into a principal, which is understood by gplazma plugins. For example, when the `jaas` plugin is configured to be used with an _ActiveMQ_ server, then login module specific principal is returned.
@@ -920,8 +888,8 @@ Example:
920888
auth optional voms
921889
map requisite vorolemap
922890
map optional krb5
923-
map optional nis
924-
session requisite nis
891+
map optional ldap
892+
session requisite ldap
925893
account requisite banfile
926894

927895
#### session Plug-ins
@@ -978,44 +946,6 @@ Example:
978946

979947
In this example following is happening: extract user's DN (1), extract and verify VOMS attributes (2), map DN+Role to a local account (3), extract uid and gids for a local account (4) and, finally, extract users home directory (5).
980948

981-
982-
983-
##### nis
984-
985-
The `nis` plug-in adds root and home path information to the session, based on the username using your site’s `NIS` service.
986-
987-
988-
989-
Properties
990-
991-
**gplazma.nis.server**
992-
993-
`NIS` server host
994-
Default: `nisserv.domain.com`
995-
996-
997-
998-
**gplazma.nis.domain**
999-
1000-
`NIS` domain
1001-
Default: `domain.com`
1002-
1003-
The result of `nis` can be used by other plug-ins:
1004-
1005-
Example:
1006-
1007-
# Map grid or kerberos users to local accounts
1008-
auth optional x509 #1
1009-
auth optional voms #2
1010-
map requisite vorolemap #3
1011-
map optional krb5 #4
1012-
map optional nis #5
1013-
session requisite nis #6
1014-
1015-
In this example two access methods are considered: grid based and kerberos based. If user comes with grid certificate and VOMS role: extract user's DN (1), extract and verify VOMS attributes (2), map DN+Role to a local account (3). If user comes with `Kerberos` ticket: extract local account (4). After this point in both cases we talk to NIS to get uid and gids for a local account (5) and, finally, adding users home directory (6).
1016-
1017-
1018-
1019949
##### ldap
1020950

1021951
The `ldap` is a map, session and identity plugin.
@@ -1457,22 +1387,6 @@ a value. This means those values must start with a `/`.
14571387

14581388
The `nsswitsch` provides forward and reverse mapping for `NFSv4.1` using your system's `nsswitch` service.
14591389

1460-
##### nis
1461-
1462-
The `nis` plug-in forward and reverse mapping for `NFSv4.1` using your site's NIS service.
1463-
1464-
Properties
1465-
1466-
**gplazma.nis.server**
1467-
1468-
`NIS` server host
1469-
Default: `nisserv.domain.com`
1470-
1471-
**gplazma.nis.domain**
1472-
1473-
`NIS` domain
1474-
Default: domain.com
1475-
14761390
## Using X509 Certificates
14771391

14781392
Most plug-ins of `gPlazma` support `X.509` certificates for authentication and authorisation. `X.509` certificates are used to identify entities (e.g., persons, hosts) in the Internet. The certificates contain a DN (Distinguished Name) that uniquely describes the entity. To give the certificate credibility it is issued by a CA (Certificate Authority) which checks the identity upon request of the certificate (e.g., by checking the persons id). For the use of X.509 certificates with dCache your users will have to request a certificate from a CA you trust and you need host certificates for every host of your dCache instance.

modules/gplazma2-nis/README.md

Lines changed: 0 additions & 2 deletions
This file was deleted.

modules/gplazma2-nis/pom.xml

Lines changed: 0 additions & 40 deletions
This file was deleted.

modules/gplazma2-nis/src/main/java/org/dcache/gplazma/plugins/Nis.java

Lines changed: 0 additions & 199 deletions
This file was deleted.

modules/gplazma2-nis/src/main/resources/META-INF/gplazma-plugins.xml

Lines changed: 0 additions & 6 deletions
This file was deleted.

0 commit comments

Comments
 (0)