LCMAPS_VOMS_LOCALGROUP.MOD(8)

💖 LCMAPS_VOMS_LOCALGROUP.MOD 💖

okay so bestie, gather round, because this is lcmaps_voms_localgroup.mod(8) from section 8 of the manual, and she is that girl 💅

✨ NAME ✨

lcmaps_voms_localgroup.mod — an LCMAPS plugin that switches up the user identity based on VOMS credentials, but like… by local groups 🫶

✨ SYNOPSIS ✨

lcmaps_voms_localgroup.mod [-groupmapfile group-mapfile] [--map-to-
secondary-groups] [-mapall] [-mapmin number of minimal mappings]

✨ DESCRIPTION ✨

So the VOMS localgroup acquisition plugin is a VOMS-aware plugin, and she's basically the sibling of the lcmaps_voms_localaccount.mod.8 plugin — same energy, except she's about groups instead of accounts. Not me having a whole fandom 🌸

What she does: she tries to find local groups (more specifically GroupIDs) based on the VOMS info that LCMAPS has on hand, especially the Fully Qualified Attribute Names (FQANs). She hunts for FQAN → localgroup mappings using the so-called group-mapfile (which is basically a grid-mapfile's cousin, iykyk).

Then the resulting list of groups gets looked up in /etc/groups and/or LDAP directories to figure out which Group IDs should be added as a mapping result. slay 🔥

✨ OPTIONS ✨

• -groupmapfile group-mapfile — this file has to contain FQAN → local group name mappings, just like the grid-mapfile. The exact same formatting rules of the grid-mapfile apply to the group-mapfile, no cap. It is strongly advised to set it to an absolute path so you don't accidentally use the wrong file(path) 😭 In a (setuid-)root application, relative paths are taken with respect to /etc/grid-security/. And it is important to not mix the grid-mapfile and group-mapfile — they are not the same girl, do not confuse them 💀
• --map-to-secondary-groups — when enabled, the plug-in will map also the first FQAN of the user to secondary Group IDs, which means there will be no primary Group ID set by this plug-in while it's enabled. Also note: even if the first FQAN does not give a mapping, there will still be no primary Group ID set by this plug-in. So like, primary Group ID? Not today ✨
• -mapall — when enabled, a failure gets triggered if not all of the FQANs were successfully mapped to primary or secondary Group IDs. She's an all-or-nothing queen 👑
• -mapmin minimum number of mappings — this option sets a minimum amount of FQANs that have to be mapped for the plugin to succeed. Default is '0'. Note: if the minimum is unset or set to 0, the plugin will succeed (if no other errors occur) even if no pool-groups were found. Lowkey generous of her 🙈

✨ RETURN VALUES ✨

• LCMAPS_MOD_SUCCESS — success. ate, no crumbs 🎀
• LCMAPS_MOD_FAIL — failure. it's giving sad girl hours 😭

✨ BUGS ✨

Please report any errors to the Nikhef Grid Middleware Security Team <grid-mw-security-support@nikhef.nl>. They wanna hear it fr fr 💜

✨ SEE ALSO ✨

lcmaps.db(5), lcmaps(3).

✨ AUTHORS ✨

LCMAPS and the LCMAPS plug-ins were written by the Grid Middleware Security Team <grid-mw-security@nikhef.nl>. iconic behavior honestly 👑

Stichting FOM/Nikhef, February 6, 2015 — that's the whole vibe, that's the whole source and date, and this manual page? She said what she said. mwah 💋 🦋