Skip to content

A filesystem plugin to allow Xrootd write as a different Unix user

License

Notifications You must be signed in to change notification settings

abh3/xrootd-multiuser

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

53 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Multi-user SFS plugin for Xrootd

A filesystem plugin to allow Xrootd to interact with underlying POSIX filesystems as different Unix users.

This plugin will change the thread's filesystem UID to match Xrootd's user name, meaning a user with a login session mapped to user name atlas will read and write to the filesystem as the UID associated with the Unix user atlas. Without this plugin, Xrootd will always read and write as the Unix user xrootd.

Configuration

To configure the multi-user plugin, add the following line to the Xrootd configuration file:

xrootd.fslib libXrdMultiuser.so default

The plugin can also be used to manage the umask when creating files or directories. To set a umask (for example, to 0022), add the following line to the Xrootd configuration file:

multiuser.umask 0022

Startup

The Xrootd process must be started with the privileged Linux capabilities in order to successfully read and write as different users (i.e., execute the setfsuid and setfsgid calls). To support this, we have a separate systemd unit called [email protected].

To start the configuration in /etc/xrootd/xrootd-clustered.cfg with the multiuser plugin enabled, execute:

systemctl start xrootd-privileged@clustered

About

A filesystem plugin to allow Xrootd write as a different Unix user

Resources

License

Stars

Watchers

Forks

Packages

No packages published

Languages

  • C++ 91.0%
  • CMake 9.0%