@@ -136,44 +136,6 @@ For example, the following groups and roles have been used by the ATLAS and CMS
136136```
137137
138138
139- Using Bearer Tokens with HTCondor-CE
140- ------------------------------------
141-
142- In order to support Token AAI, your CE must be based on OSG 3.6 or OSG 3.5-upcoming.
143- You will need HTCondor 9.0.0 or newer, and ` SCITOKENS ` must be enabled as an auth method (this is the default).
144-
145- You must have a mapfile which provides mappings from bearer tokens to Unix usernames,
146- based on the token's issuer and, optionally, subject.
147- The OSG distributes the ` osg-scitokens-mapfile ` RPM package that includes default mappings for use by OSG CEs.
148-
149- Token mapfile lines look like:
150- ```
151- SCITOKENS /^https\:\/\/scitokens\.org\/ligo,/ ligo
152- SCITOKENS /^https\:\/\/cilogon\.org\/gm2,gm2pilot\@fnal\.gov$/ gm2pilot
153- ```
154- These are regular expressions; the first matches a token with the issuer ` https://scitokens.org/ligo `
155- and any subject, and maps it to the ` ligo ` user.
156- Note the trailing ` , ` in the regular expression: this separates the issuer from the subject.
157-
158- The second example matches the issuer ` https://cilogon.org/gm2 ` _ and_ the subject ` gm2pilot@fnal.gov ` ,
159- and maps it to the ` gm2pilot ` user.
160-
161- A ` SCITOKENS ` mapfile line supports WLCG tokens as well.
162- Note that mapping can only be done on issuer and subject, _ not_ ` wlcg.groups ` .
163-
164- See the [ configuring authentication documentation for HTCondor-CE]
165- (https://opensciencegrid.org/docs/compute-element/install-htcondor-ce/#configuring-authentication )
166- for further information.
167-
168-
169- Using Bearer Tokens with XRootD
170- -------------------------------
171-
172- In order to support Token AAI, your XRootD installation must be based on OSG 3.6 or OSG 3.5-upcoming.
173- You will need XRootD 5.0.2 or newer, with the ` xrootd-scitokens ` plugin.
174- Follow the [ configuring XRootD authorization documentation] ( https://opensciencegrid.org/docs/data/xrootd/xrootd-authorization )
175- for information on how to configure XRootD to accept bearer tokens.
176-
177139
178140Validating Tokens in Pilot Jobs
179141-------------------------------
0 commit comments