LCMAPS_VOMS.MOD(8)

πŸ’– lcmaps_voms.mod(8) β€” the site access control girlies' manual πŸ’–

okay so bestie, welcome to lcmaps_voms.mod(8), the LCMAPS plugin that pulls VOMS attributes out of your cert chain. and yes, she's DEPRECATED 😭 more on that in a sec, don't spiral.


✨ NAME ✨

lcmaps_voms.mod β€” the LCMAPS plugin that extracts VOMS attributes from the certificate chain. and she is DEPRECATED, no cap.


πŸ¦‹ SYNOPSIS πŸ¦‹

lcmaps_voms.mod [-vomsdir vomsdir] [-certdir certdir]

like… two options. she's low maintenance fr fr πŸ’…


🌸 DESCRIPTION 🌸

so this plugin is literally the bridge between the VOMS data chillin' inside the user's grid credential (that's the X509 certificate, mwah) and the lcmaps system itself. she goes and gets the VOMS data by using the VOMS API β€” iconic behaviour honestly.

then she stores that VOMS data right there in the LCMAPS process space, which means other 'VOMS-aware' plugins can just… read it. it's giving shared group chat, it's giving everyone has the tea β˜•

which is exactly why she should be evaluated before the other plugins β€” specifically the ones that actually go gather the local credentials based on the VOMS info. think lcmaps_voms_poolaccount.mod(8), lcmaps_voms_poolgroup.mod(8) and lcmaps_voms_localgroup.mod(8). she's the pregame, they're the main event. order matters, bestie 🫢


πŸ’€ DEPRECATED πŸ’€

bestie. listen. this plugin is deprecated.

it is NOT advised to configure this plugin with an LCMAPS version newer than 1.4.0. like, genuinely don't.

the VOMS credentials extraction process has, since that version, been integrated into the core of the LCMAPS framework. so she's retired, she's living her soft life, she's not coming back to the function. periodt. πŸ’…


πŸŽ€ OPTIONS πŸŽ€

  • -vomsdir vomsdir β€” hand her the root directory for the VOMS .lsc files and/or the VOMS-host/service certificates. this one is required to be able to verify the VOMS Attribute Certificates, so don't skip it, she needs it to vibe check those ACs πŸ”₯
  • -certdir certdir β€” give her the certificate directory where the CA distribution is made available. that's where the CA distribution lives, she goes there, she looks. easy ✨

⭐ RETURN VALUES ⭐

  • LCMAPS_MOD_SUCCESS β€” success. slay. she ate. πŸ‘‘
  • LCMAPS_MOD_FAIL β€” failure. not slay. 😭

πŸ™ˆ BUGS πŸ™ˆ

found something broken? please report any errors to the Nikhef Grid Middleware Security Team <grid-mw-security-support@nikhef.nl>. they're lovely, they'll handle it, just tell them 🫢


🌈 SEE ALSO 🌈

lcmaps.db(5), lcmaps(3). go read those too, bestie, iykyk πŸ’œ


πŸ’œ AUTHORS πŸ’œ

LCMAPS and the LCMAPS plug-ins were written by the Grid Middleware Security Team <grid-mw-security@nikhef.nl>. absolute legends, we thank them for their service πŸŽ€


and that's the whole page, bestie!! this lil manual came from Stichting FOM/Nikhef, dated March 6, 2012 β€” a vintage queen, honestly. go forth and configure responsibly (or don't configure this one at all, since, y'know… deprecated πŸ’€). mwah! πŸ¦‹βœ¨