1
.\" In .TH, FOO should be all caps, SECTION should be 1-8, maybe w/ subsection
2
.\" other parms are allowed: see man(7), man(1)
4
.\" This template provided by Tom Christiansen <tchrist@jhereg.perl.com>.
6
.TH LCMAPS_VOMS_LOCALACCOUNT.MOD 8 "March 6, 2012" "Stichting FOM/Nikhef" "Site Access Control"
8
lcmaps_voms_localaccount.mod \- LCMAPS plugin to switch user identity based on VOMS credentials by local accounts
12
.B lcmaps_voms_localaccount.mod
15
.RB [ --add-primary-gid-from-mapped-account ]
16
.RB [ --do-not-add-primary-gid-from-mapped-account ]
17
.RB [ --add-primary-gid-as-secondary-gid-from-mapped-account ]
18
.RB [ --add-secondary-gids-from-mapped-account ]
19
.RB [ -use_voms_gid | -use-voms-gid ]
23
This VOMS localaccount acquisition plugin is a 'VOMS-aware' modification of the
24
\fBlcmaps_localaccount.mod.8\fR plugin. The plugin tries to find a local
25
account (more specifically a UserID) based on the VOMS information that has
26
available from the LCMAPS, in particular the Fully Qualified Attribute Names
29
The VOMS credentials need to be available from the LCMAPS framework.
32
.BI "-gridmapfile " gridmapfile
33
This file must contain FQANs to (local) user account names.
34
If this option is set, it will override the default path of the
35
gridmapfile. It is advised to use an absolute path to the gridmapfile
36
to avoid usage of the wrong file(path).
39
.BI "--add-primary-gid-from-mapped-account"
40
After the account is mapped, add the primary Group ID from the passwd-file/LDAP of the mapped account as a part of the mapping result. Default is to not add the primary Group ID.
43
.BI "--do-not-add-primary-gid-from-mapped-account"
44
After the account is mapped, explicity avoid adding the primary Group ID from the passwd-file/LDAP of the mapped account as a part of the mapping result.. Default is to not add the primary Group ID.
47
.BI "--add-primary-gid-as-secondary-gid-from-mapped-account"
48
After the account is mapped, add the primary Group ID from the passwd-file/LDAP of the mapped account as a secondary Group ID as a part of the mapping result.
51
.BI "--add-secondary-gids-from-mapped-account"
52
After the account is mapped, add the secondary Group ID from the groups-file/LDAP of the mapped account as a secondary Group ID(s) as a part of the mapping result.
55
.BI "-use_voms_gid" | "-use-voms-gid"
56
Warning: Default enabled!
57
Switching this \fBon\fR will \fBdisable\fR the automatic inclusion of the primary Group ID and secondary Group ID(s) of the mapped account as a part of the mapping result.
58
We advise to switch this option \fBon\fR by default.
69
Please report any errors to the Nikhef Grid Middleware Security Team
70
<grid-mw-security-support@nikhef.nl>.
75
LCMAPS and the LCMAPS plug-ins were written by the Grid Middleware Security Team
76
<grid-mw-security@nikhef.nl>.
added
removed
doc/lcmaps_voms_localaccount.mod.8
