Argus: Policy Administration Point (PAP): Troubleshooting

Policies that use the pfqan attribute do not work properly (PAP v. 1.1)

PAP version 1.1 ships with a buggy configuration file that encodes policies that uses the pfqan attribute in a way that it's not understood by the PDP. This bug is tracked here. There is a quick workaround for this issue:

  • save your policies to a file
  • remove all policies from the pap (pap-admin rap command).
  • shut down the pap service.
  • edit the /opt/argus/pap/conf/attribute-mappings.ini and substitue the line:
    pfqan.xacml-id = http://authz-interop.org/xacml/subject/voms-primary-fqan
    with this line:
    pfqan.xacml-id = http://glite.org/xacml/attribute/fqan/primary
  • start the pap service.
  • import the previously saved policies with the pap-admin apf command.
Edit | Attach | Watch | Print version | History: r5 < r4 < r3 < r2 < r1 | Backlinks | Raw View | WYSIWYG | More topic actions
Topic revision: r5 - 2016-07-05 - MaartenLitmaath
 
    • Cern Search Icon Cern Search
    • TWiki Search Icon TWiki Search
    • Google Search Icon Google Search

    EGEE All webs login

This site is powered by the TWiki collaboration platform Powered by Perl This site is powered by the TWiki collaboration platformCopyright & by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Ask a support question or Send feedback