.\" In .TH, FOO should be all caps, SECTION should be 1-8, maybe w/ subsection .\" other parms are allowed: see man(7), man(1) .\" .\" This template provided by Tom Christiansen . .\" .TH LCMAPS_VOMS_LOCALGROUP.MOD 8 "March 7, 2012" "Stichting FOM/Nikhef" "Site Access Control" .SH NAME lcmaps_voms_localgroup.mod \- LCMAPS plugin to switch user identity based on VOMS credentials by local groups .SH SYNOPSIS .nh .ad l .B lcmaps_voms_localgroup.mod .RB [ -groupmapfile .IR groupmapfile ] .RB [ --map-to-secondary-groups ] .RB [ -mapall ] .RB [ -mapmin .IR "number of minimal mappings" ] .hy .ad b .SH DESCRIPTION The VOMS localgroup acquisition plugin is a 'VOMS-aware' plugin. It uses the VOMS information to gather primary and secondary Group IDs. This is accomplished by matching VOMS FQANs in the so-called groupmapfile (gridmapfile style) with the credentials presented by the user. The resulting list of groups will be looked up in the /etc/groups and/or LDAP directories to determine which Group IDs to be added as a mapping result. When enabled, the plug-in will map all the FQANs of the user to secondary Group IDs. There will be no primary Group ID set by this plug-in. This option is off by default, thus by default the plug-in will always set the first FQAN .SH OPTIONS .TP .BI "-groupmapfile " groupmapfile This option is used to determine the groupmapfile path. The plug-in will open the file and use the content for the FQAN to Group ID mapping. The same formatting rules of the grid-mapfile apply to the groupmapfile. Provide a full path. .TP .BI "--map-to-secondary-groups" When enabled, the plug-in will map all the FQANs of the user to secondary Group IDs. There will be no primary Group ID set by this plug-in when enabled. .TP .BI "-mapall" When enabled, a failure will be triggered if not all of the FQANs could be mapped to primary or secondary Group IDs. .TP .BI "-mapmin " "number of minimal mappings" When set the \fBnumber of minimal mappings\fR will be enforced by the plug-in to ensure that at least this number of FQAN to Group ID mappings has occured. When absent... .SH "RETURN VALUES" .TP .B LCMAPS_MOD_SUCCESS Success. .TP .B LCMAPS_MOD_FAIL Failure. .SH BUGS Please report any errors to the Nikhef Grid Middleware Security Team . .SH "SEE ALSO" .BR lcmaps.db (5), .BR lcmaps (3). .SH AUTHORS LCMAPS and the LCMAPS plug-ins were written by the Grid Middleware Security Team .