vokac

What is the progress with this issue? I can see again fancy certificate chain for DESY dCache that should be fine, but dCache TPC fails ```bash $ export SRC=https://lcg-se0.ifh.de:2880/pnfs/ifh.de/data/atlas/atlasdatadisk/rucio/mc16_13TeV/45/7f/HITS.31660887._173089.pool.root.1 $...

Very basic [documentation for oidc plugin](https://github.com/dCache/dcache/blob/master/docs/TheBook/src/main/markdown/dcache-configuration-oicd.md) is available, but it doesn't really describe all details and configuration options that must be used for [real storage with token support configuration](https://github.com/WLCG-AuthZ-WG/wlcg-authz-docs/blob/master/docs/token-based-authorization/configuration/dcache.md#atlas). Also...

Thanks, I missed new [oidc plugin reference](https://www.dcache.org/manuals/Book-9.2/config-gplazma.shtml#oidc), looks good and provides a quicker overview of plugin configuration than my previous method of studying source code. You already wrote [stoarge-authzdb to...

Would it be possible to increase priority to this item not to require workarounds in the clients and their configuration, e.g. https://github.com/indigo-dc/oidc-agent/issues/310

I heard that support for standard way to request audience will be available in oidc-agent by June. Does this mean it'll no longer be possible to use IAM proprietary way...

Related [GGUS:155077](https://ggus.eu/index.php?mode=ticket_info&ticket_id=155077)

Why we are talking just about "stats" while original [GGUS ticket](https://ggus.eu/index.php?mode=ticket_info&ticket_id=155077) asks for "list of users of each IAM VOMs"?

Tested NFS ACL update on ~ 6M directories and it is 3.6x slower (~ 34 hours) than updating individual directories with `chimera` (~ 9 hours). Our typical storage have roughly...

I found that suggested NFS ACL update is sufficiently [easy](https://wlcg-authz-wg.github.io/wlcg-authz-docs/token-based-authorization/configuration/dcache/#acl-configuration) and also storage sites that support just grid use-cases (no storage for local users) may not even need to add...

gfal/davix ignore unknown lines in performance markers. In the XRootD ticket https://github.com/xrootd/xrootd/issues/1963 @bbockelm mentioned that `Stripe ` prefix doesn't make too much sense (GridFTP specific) and should be dropped from...