Next: Translation definition
Up: Configuration
Previous: Policy definition
The definition of an AttributeRepository strictly depends on its type.
Currently available types are `and', `or', `voms' and `map'. The syntax common
among all types is:
<repository name="name" type="type">
...
...
</repository>
Parameters:
- name: mandatory.
String value that indicates the name of the AttributeRepository.
If another AttributeRepository with the same name has already been
specified, this pre-existing instance will be used.
No consistency check is performed to verify whether the two configurations
actually would produce identical AttributeRepositories.
- type: mandatory.
String value (`and'/`or'/`voms'/`map'/) that indicates the type of
AttributeRepository.
According to its type the complete definition of an AttributeRepository can be:
- `and'/'or' type:
<repository name="name" type="<and/or>">
<repository ... />
<repository ... />
...
</repository>
Parameters:
- repository: mandatory.
The definition of an AttributeRepository.
At least two separate definitions must be provided.
In the `and' type a query returns the intersection of the attributes
associated to a subject in the different sub-repositories.
In the `or' type a query returns the union of the attributes associated to
a subject in the different sub-repositories.
- `voms' type:
<repository name="name" type="voms">
<vomsdir>value</vomsdir>
<vomsdir>value</vomsdir>
...
<refreshperiod>value</refreshperiod>
<filter default="<allow/deny>">
<allow name="VO alias" />
...
<deny name="VO alias" />
...
</filter>
</repository>
Parameters:
- vomsdir: optional.
String value that indicates the pathname (with wildcards) where VOMS signer
certificates are stored. Several pathnames may be specified.
Default value is
`/etc/grid-security/vomsdir/*.pem'.
- refreshperiod: optional.
Integer value (seconds) that indicates how often the vomsdir
directories are scanned to load the VOMS signer certificates. Default value is
300. If set to 0 (zero) or a negative value, the directories are scanned upon
each VOMS signature verification.
- filter: optional.
Structure that enables filtering the content of the vomsdir
directories. The filtering rule can be set to `allow' or `deny'; the default
is `allow'.
allow: explicitly allows the specified VOMS alias name.
The name argument can be a regular expression.
deny: explicitly denies the specified VOMS alias name.
The name argument can be a regular expression.
- `map' type:
<repository name="name" type="map">
<map ... />
</repository>
Parameters:
- map: mandatory.
The definition of an AttributeMap.
- any other type will be treated as a Java class name, thus extensibility
is easily provided.
Next: Translation definition
Up: Configuration
Previous: Policy definition
2004-05-05