Re: [HTCondor-users] how to configure voms proxies wirh ssl for mapping

[Maarten Litmaath <Maarten.Litmaath@xxxxxxx>]

Hi Emmanouil,

you need to use regex syntax like this:

SSL /\/DC=foo\/O=bar\/OU=abc\/CN=xyz,\/vo\/.*/ account

That is:

SSL /DN pattern,FQAN pattern/ account

You need to escape all '/' characters contained in those patterns,

as well as any commas appearing in them.

You can make use of regex tricks to simplify patterns and/or

allow them to match multiple cases.

---

From: HTCondor-users <htcondor-users-bounces@xxxxxxxxxxx> on behalf of Emmanouil Vamvakopoulos <emmanouil.vamvakopoulos@xxxxxxxxxxxxxxx>
Sent: Sunday, September 15, 2024 10:08 AM
To: htcondor-users@xxxxxxxxxxx <htcondor-users@xxxxxxxxxxx>
Subject: [HTCondor-users] how to configure voms proxies wirh ssl for mapping

 

[...]

Dear Condor developers

I saw in the condor wiki  https://htcondor-wiki.cs.wisc.edu/index.cgi/wiki?p=HowToUseProxiesWithSs


....
VOMS Attributes

In HTCondor 23.5.2 and later, the CE can use VOMS attributes from the client's X.509 proxy in the mapfiles. The attributes will be appended to the end of the certificate subject, separated with commas, when looking for matches in the mapfiles. To enable this optional behavior, set the following configuration parameter:

  USE_VOMS_ATTRIBUTES = True

This will also cause some job attributes to be set containing the VOMS attributes. If you want the VOMS attributes to be added to the job ad but not be used in the mapfiles, then set the following configuration parameter as well:

  AUTH_SSL_USE_VOMS_IDENTITY = False
...

I need a working syntax example where the voms attritues are used for the mapping

thank you in advance
best
e.v.

-------------------------------------------------------------------
Vamvakopoulos Emmanouil

Service Exploitation d' IJCLab
CNRS/Université Paris-Saclay/Université de Paris
Bât. 200, 15 rue Georges Clémenceau, 91405 Orsay
-------------------------------------------------------------------