Skip to content

Scitokens entries with Director/Origin/Discovery same endpoints #2236

@turetske

Description

@turetske

When the Director, Origin, and/or the Discovery URL are the same, then scitokens generation will merge the issuer entries.

This isn't what we want because director monitoring needs to have a specific user and the federation issuer (with the discovery url) also has specific requirements.

There are two issues:

Can Scitokens and XRootD properly handle multiple issuers where the issuer is the same but other things such as the user, base paths, or required_authorization are different?

If so, then we need to ensure that the monitoring and federation entry do not merge with the origin entries or each other.

It not, then we need to ensure the urls have different endpoints OR adjust xrootd/scitokens to handle the above case.

Metadata

Metadata

Assignees

Labels

bugSomething isn't workingcacheIssue relating to the cache componentoriginIssue relating to the origin component

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions