Paul Millar
Paul Millar
Hi Onno, Thanks for reporting this. As you can probably tell, I've opened an issue against the CaNL library, to include more information. I think this is the natural way...
As I understand it, the problem here is that the macaroon itself contains limited information about the user who generated the macaroon; specifically, the macaroon contains the macaroon-generator's uid, primary...
> in the end you map username to something in mutlimap - this is where you just add qos role. What am I missing? What you're missing is that the...
I'm not arguing against updating Macaroons so that they also carry information about roles: this should be done. However, what you describe ("only one authorized user is allowed to change...
FWIW, you're right dCache claims to support staging in xrootd but doesn't really. Such requests will succeed but are (silently) ignored. The behaviour is because staging via xroot was only...
Just to clarify what is happening here (a little). The `LSC file parsing error` comes from the Java CaNL library, not from dCache. The fact that a single bad LSC...
Perhaps to reanimate this discussion, I can add some comments here. First, adding support for multiple URL is something I am interested. I would have opened an issue on this...
Just to update this issue, the oidc-agent family of packages is available in [EPEL 9](https://dl.fedoraproject.org/pub/epel/9/Everything/x86_64/Packages/o/), [EPEL 8](https://dl.fedoraproject.org/pub/epel/8/Everything/x86_64/Packages/o/) and [EPEL 7](https://dl.fedoraproject.org/pub/epel/7/x86_64/Packages/o/). Therefore, I believe we can close this issue. My thanks...
Here is an example to illustrate the problem. ```console paul@celebrimbor:~$ curl -H "Authorization: Bearer $(oidc-token EGI-CHECKIN)" -X COPY -H "Credential: none" -H "Source: https://prometheus.desy.de/Video/BlenderFoundation/Tears%20of%20steel.webm" https://dcache-door-doma01.desy.de:2443/Users/paul/test%201 Perf Marker Timestamp: 1708331124 State:...
Realistically, fixing this problem is probably not urgent and will probably end up with me fixing the problem (when I get a spare moment) anyway. I wanted this issue mostly...