Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

explain login does not understand op:<OIDC-provider> as input #7590

Open
onnozweers opened this issue Jun 4, 2024 · 1 comment
Open

explain login does not understand op:<OIDC-provider> as input #7590

onnozweers opened this issue Jun 4, 2024 · 1 comment

Comments

@onnozweers
Copy link
Contributor

I have an OIDC mapping based on OIDC provider:

[root@hedgehog14 /etc/dcache]# grep op:DTEAM multimap.conf 
op:DTEAM   username:dteam uid:14444 group:dteam gid:15555,true

I tried to test this mapping with explain login, but it fails:

[root@hedgehog14 /etc/dcache]# dcache-admin-command gPlazma 'explain login "op:DTEAM"'
(3) java.lang.IllegalArgumentException: No matching class found: op from ac_explain_login_$_1_99

Mappings based on sub work though:

[root@hedgehog14 /etc/dcache]# dcache-admin-command gPlazma 'explain login "oidc:***********************@DTEAM"'
LOGIN FAIL
 |    in: OidcSubjectPrincipal[***********************@DTEAM]
 |   out: OidcSubjectPrincipal[***********************@DTEAM]
....

Perhaps, when someone is going to look into #7576, this could be implemented at the same time? No hurry.

@onnozweers
Copy link
Contributor Author

onnozweers commented Jun 4, 2024

Tested version:

[root@hedgehog14 /etc/dcache]# dcache version
10.0.0-SNAPSHOT

[root@hedgehog14 /etc/dcache]# rpm -q dcache
dcache-10.0.0.96893bc-1.noarch

Built on December 5rd.

And also on this golden release:

[root@dcmain ~]# dcache version
9.2.18

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant