1 VOMS OrgDB plugin
The VOMS OrgDB plugin provides integration with the CERN organizational database.
When OrgDB integration is active:
- registration requests are validated so that only applicants present in the OrgDB can apply for VO membership.
- VO membership expiration time is linked to OrgDB membership expiration
1.1 Enabling the plugin
The plugin configuration is not currently provided by
voms-admin-configure
or the voms YAIM module.
Assuming the VO where you want to enable the OrgDB plugin is already configured, you will need to do the following changes
to the configuration:
- Edit the
voms.service.properties
file for the VO to enable the plugin
- Create the file
orgdb.properties
where orgdb database connection properties will be configured.
Both files can be found in the
/etc/voms-admin/<vo-name>
directory.
1.1.1 Changes to the voms.service.properties
file
Add the following lines at the bottom of the
voms.service.properties
file:
## External validation plugin options
voms.external-validators = orgdb
voms.ext.orgdb.configClass = org.glite.security.voms.admin.integration.orgdb.OrgDBConfigurator
voms.ext.orgdb.experimentName = ATLAS
voms.ext.orgdb.membership_check.period = 30
1.1.2 The orgdb.properties
configuration file
The
orgdb.properties
configuration provides hibernate settings to
connect to the
OrgDB Oracle database:
hibernate.connection.driver_class= oracle.jdbc.driver.OracleDriver
hibernate.connection.url= jdbc:oracle:oci:<the orgdb alias here>
hibernate.dialect= org.hibernate.dialect.Oracle10gDialect
hibernate.connection.username= orgdb_username
hibernate.connection.password= orgdb_password
hibernate.c3p0.acquire_increment=1
hibernate.c3p0.idle_test_period=100
hibernate.c3p0.min_size=5
hibernate.c3p0.max_size=100
hibernate.c3p0.max_statements=0
hibernate.c3p0.timeout=100
1.2 Troubleshooting
Check the voms-admin log in
/var/log/tomcat{5|6}
.
In case of succesfull configuration you will see something like:
2012-11-27 08:06:08.582Z - INFO [OrgDBConfigurator] - Connection to the OrgDB database is active.
2012-11-27 08:06:08.583Z - INFO [OrgDBConfigurator] - Setting OrgDB experiment name: ATLAS
2012-11-27 08:06:08.595Z - INFO [DefaultMembershipCheckBehaviour] - Expired users will be suspended after a grace period of 7 days.
2012-11-27 08:06:08.601Z - INFO [OrgDBConfigurator] - OrgDB request validator registered SUCCESSFULLY.
2012-11-27 08:06:08.604Z - INFO [VOMSExecutorService] - Scheduling task OrgDBMembershipSynchronizationTask with period: 30 seconds
2012-11-27 08:06:08.604Z - INFO [PluginManager] - 'orgdb' plugin configured SUCCESSFULLY.
--
AndreaCeccanti - 2012-11-27