dcache icon indicating copy to clipboard operation
dcache copied to clipboard

LinkGroupAuthzFile requires empty line between LinkGroups

Open paulmillar opened this issue 2 years ago • 0 comments

The current LinkGroupAuthzFile format requires that the LinkGroup keyword appears as the first non-comment in the file. This starts the declaration of that linkgroup's authorisation.

The file also supports defining authorisation for additional linkgroups, by including a subsequent line starting with the LinkGroup keyword. However, this line must be proceeded by an empty line (or one containing only whitespace).

The following example illustrates this. Two LinkGroups are authorised, each accepting a single FQAN,

LinkGroup foo
/foo

LinkGroup bar
/bar

However, both of the two following examples will authorise only the one linkgroup: foo.

LinkGroup foo
/foo
LinkGroup bar
/bar
LinkGroup foo
/foo
#
# Some comment describing "bar"
#
LinkGroup bar
/bar

This behaviour is (likely) counter intuitive.

paulmillar avatar Jul 20 '22 11:07 paulmillar