| globus_gss_assist_gridmap(3) | globus_gss_assist | globus_gss_assist_gridmap(3) |
globus_gss_assist_gridmap - Gridmap Authorization
- Gridmap Authorization and Local User Mapping.
#define GlobusGssAssistFreeDNArray(dn_a)
Free array of distinguished names.
int globus_gss_assist_gridmap (char *globusidp, char
**useridp)
Look up the default mapping for a Grid identity in a gridmap file. int
globus_gss_assist_userok (char *globusid, char *userid)
Gridmap entry existence check. int globus_gss_assist_map_local_user
(char *local_user, char **globusidp)
Look up the default Grid identity associated with a local user name.
globus_result_t globus_gss_assist_lookup_all_globusid (char
*username, char **dns[], int *dn_count)
Look up all Grid IDs associated with a local user ID. globus_result_t
globus_gss_assist_map_and_authorize (gss_ctx_id_t context, char
*service, char *desired_identity, char *identity_buffer, unsigned int
identity_buffer_length)
Authorize the peer of a security context to use a service. globus_result_t
globus_gss_assist_map_and_authorize_sharing (char
*shared_user_certificate, gss_ctx_id_t context, char *desired_identity, char
*identity_buffer, unsigned int identity_buffer_length)
Authorize a particular credential for shared access.
Gridmap Authorization and Local User Mapping.
Functions in this group are used to authorize a GSSAPI credential to perform some action on the local machine. In addition to checking whether a credential is authorized, it can also be mapped to a local user name.
Free array of distinguished names. Free the contents of a name array created during a successful call to globus_gss_assist_lookup_all_globusid()
Parameters
Return values
Look up the default mapping for a Grid identity in a gridmap file. The globus_gss_assist_gridmap() function parses the default gridmap file and modifies its useridp parameter to point to a copy of the string containing the default local identity that the grid identity is mapped to. If successful, the caller is responsible for freeing the string pointed to by useridp.
By default, globus_gss_assist_gridmap() looks for the default gridmap file defined by the value of the GRIDMAP environment variable. If that is not set, it falls back to $HOME/.gridmap.
Parameters
Returns
Return values
Look up all Grid IDs associated with a local user ID. The globus_gss_assist_lookup_all_globusid() function parses a gridmap file and finds all Grid IDs that map to a local user ID. The dns parameter is modified to point to an array of Grid ID strings from the gridmap file, and the dn_count parameter is modified to point to the number of Grid ID strings in the array. The caller is responsible for freeing the array using the macro GlobusGssAssistFreeDNArray().
By default, globus_gss_assist_lookup_all_globusid() looks for the default gridmap file defined by the value of the GRIDMAP environment variable. If that is not set, it falls back to $HOME/.gridmap.
Parameters
Returns
Return values
Authorize the peer of a security context to use a service. The globus_gss_assist_map_and_authorize() function attempts to authorize the peer of a security context to use a particular service. If the desired_identity parameter is non-NULL, the authorization will succeed only if the peer is authorized for that identity. Otherwise, any valid authorized local user name will be used. If authorized, the local user name will be copied to the string pointed to by the identity_buffer parameter, which must be at least as long as the value passed as the identity_buffer_length parameter.
If authorization callouts are defined in the callout configuration file, globus_gss_assist_map_and_authorize() will invoke both the GLOBUS_GENERIC_MAPPING_TYPE callout and the GLOBUS_GENERIC_AUTHZ_TYPE callout; otherwise the default gridmap file will be used for mapping and no service-specific authorization will be done.
If globus_gss_assist_map_and_authorize() uses a gridmap file, it first looks for a file defined by the value of the GRIDMAP environment variable. If that is not set, it falls back to $HOME/.gridmap.
Parameters
Returns
Return values
Authorize a particular credential for shared access. The globus_gss_assist_map_and_authorize_sharing() function attempts to authorize a particular credential for shared access. the desired_identity parameter is non-NULL, the authorization will succeed only if the credential is authorized for that identity. Otherwise, any valid authorized local user name will be used. If authorized, the local user name will be copied to the string pointed to by the identity_buffer parameter, which must be at least as long as the value passed as the identity_buffer_length parameter.
If authorization callouts are defined in the callout configuration file, globus_gss_assist_map_and_authorize_sharing() will invoke both the GLOBUS_GENERIC_MAPPING_TYPE callout and the GLOBUS_GENERIC_AUTHZ_TYPE callout; otherwise the default gridmap file will be used for mapping and no service-specific authorization will be done.
If globus_gss_assist_map_and_authorize_sharing() uses a gridmap file, it first looks for a file defined by the value of the GRIDMAP environment variable. If that is not set, it falls back to $HOME/.gridmap.
Parameters
Returns
Return values
Look up the default Grid identity associated with a local user name. The globus_gss_assist_map_local_user() function parses the gridmap file to determine a if the user name passed as the local_user parameter is the default local user for a Grid ID in the gridmap file. If so, it modifies globusidp to point to a copy of that ID. Otherwise, it searches the gridmap file for a Grid ID that has a non-default mapping for local_user and modifies globusidp to point to a copy of that ID. If successful, the caller is responsible for freeing the string pointed to by the globusidp pointer.
By default, globus_gss_assist_map_local_user() looks for the default gridmap file defined by the value of the GRIDMAP environment variable. If that is not set, it falls back to $HOME/.gridmap.
Parameters
Returns
Return values
Gridmap entry existence check. The globus_gss_assist_userok() function parses the default gridmap file and checks whether any mapping exists for the grid identity passed as the globusid parameter and the local user identity passed as the @ userid parameter.
By default, globus_gss_assist_userok() looks for the default gridmap file defined by the value of the GRIDMAP environment variable. If that is not set, it falls back to $HOME/.gridmap.
Parameters
Returns
Return values
Generated automatically by Doxygen for globus_gss_assist from the source code.
| Tue Jul 5 2022 | Version 12.7 |