Unable to explain login "group:" and "oidcgrp:"

Open vokac opened this issue 4 years ago • 1 comments

I'm using multimap gplazma plugin where it is possible to use group: and oidcgrp:, but these prefixes doesn't work when I try to use them in the admin shell e.g. with explain login group:groupname or explain login oidcgrp:groupname and it is necessary to use full class name, e.g. explain login org.dcache.auth.GroupNamePrincipal:groupname or explain login org.dcache.auth.OpenIdGroupPrincipal:groupname.

It would be nice if we could get consistent behavior for explain login with prefixes that can be used in the gplazma plugins. Hopefully it should be sufficient to add few lines in the

https://github.com/dCache/dcache/blob/ecbf8740ee3aaea33cb51e161376af647e09c6f6/modules/common/src/main/java/org/dcache/auth/Subjects.java#L438-L518

Dec 05 '21 12:12 vokac

Thanks @vokac for reporting this.

Adding support for these principals should be pretty straight forward.

Dec 06 '21 13:12 paulmillar