Provided by: lcmaps-plugins-basic-localaccount_1.6.1-3_i386 bug

NAME

       lcmaps_localaccount.mod - LCMAPS plugin to switch user identity

SYNOPSIS

       lcmaps_localaccount.mod [-gridmapfile gridmapfile]

DESCRIPTION

       This plugin is an Acquisition Plugin and will provide the LCMAPS system
       with Local Account credential information.  To do this it needs to look
       up  the  Distinguished  Name  (DN)  from  a  user's  certificate in the
       gridmapfile.  If this DN is found in the gridmapfile the  plugin  knows
       the mapped local (system) account username.  By knowing the username of
       the local account the plugin can gather  additional  information  about
       this  account.   The  plugin  will  resolve  the  UID,  GID and all the
       secondary GIDs.  When this has been done and there weren't any problems
       detected,  the  plugin  will add this information to a datastructure in
       the  Plugin  Manager.   The  plugin  will  finish  its   run   with   a
       LCMAPS_MOD_SUCCESS.  This result will be reported to the Plugin Manager
       which started this plugin and  it  will  forward  this  result  to  the
       Evaluation  Manager,  which  will take appropriate actions for the next
       plugin  to  run.   Normally  this  plugin  would  be  followed  by   an
       Enforcement  plugin  that can apply these gathered credentials in a way
       that is appropriate to a system administration's needs.

OPTIONS

       -gridmapfile gridmapfile
              When this option is set it will override the default path of the
              gridmapfile.   It  is  advised  to  use  an absolute path to the
              gridmapfile to avoid usage of the wrong file(path).

RETURN VALUES

       LCMAPS_MOD_SUCCESS
              Success.

       LCMAPS_MOD_FAIL
              Failure.

NOTES

       Since version  1.6.0  the  localaccount  plugin  supports  grid-mapfile
       entries   with   multiple  usernames,  separated  by  a  comma  without
       whitespace.  This  can  be  used  in  combination  with  specifying   a
       requested username  (such as by gsissh), to pick any of these accounts.
       When no  requested username is  specified,  the  first  is  used.  This
       requires LCMAPS version 1.6.0 or newer.

BUGS

       Please  report  any  errors to the Nikhef Grid Middleware Security Team
       <grid-mw-security-support@nikhef.nl>.

SEE ALSO

       lcmaps.db(5), lcmaps(3).

AUTHORS

       LCMAPS and the LCMAPS plug-ins were  written  by  the  Grid  Middleware
       Security Team <grid-mw-security@nikhef.nl>.

                               February 25, 2013    LCMAPS_LOCALACCOUNT.MOD(8)