NAME

       lcmaps_voms_localgroup.mod  -  LCMAPS  plugin  to switch user identity based on VOMS credentials by local
       groups

SYNOPSIS

       lcmaps_voms_localgroup.mod [-groupmapfile group-mapfile] [--map-to-secondary-groups] [-mapall] [-mapmin
       number of minimal mappings]

DESCRIPTION

       The    VOMS    localgroup    acquisition    plugin    is   a   'VOMS-aware'   plugin   similar   to   the
       lcmaps_voms_localaccount.mod.8 plugin, but for groups instead of accounts.   The  plugin  tries  to  find
       local groups (more specifically GroupIDs) based on the VOMS information that is available from LCMAPS, in
       particular the Fully Qualified Attribute Names (FQANs).  It tries to  find  FQAN  to  localgroup  mapping
       using  the  so-called  group-mapfile  (similar  to a grid-mapfile).  The resulting list of groups will be
       looked up in the /etc/groups and/or LDAP directories to determine which Group IDs should be  added  as  a
       mapping result.

OPTIONS

       -groupmapfile group-mapfile
              This  file  must  contain FQAN to local group name mappings, similar to the grid-mapfile. The same
              formatting rules of the grid-mapfile apply to the group-mapfile.  It is strongly advised to set it
              to  an  absolute  path  to  avoid  usage of the wrong file(path).  In a (setuid-)root application,
              relative paths are taken with respect to /etc/grid-security/.  It is  important  to  not  mix  the
              grid-mapfile and group-mapfile.

       --map-to-secondary-groups
              When  enabled,  the plug-in will map also the first FQAN of the user to secondary Group IDs, hence
              there will be no primary Group ID set by this plug-in when enabled. Note that also  if  the  first
              FQAN does not give a mapping, there will be no primary Group ID set by this plug-in.

       -mapall
              When  enabled,  a  failure  will  be triggered if not all of the FQANs were successfully mapped to
              primary or secondary Group IDs.

       -mapmin minimum number of mappings
              This option will set a minimum amount of FQANs that have to be mapped for the plugin  to  succeed.
              Default  is  '0'.   Note: if the minimum is unset or set to 0 the plugin will succeed (if no other
              errors occur) even if no pool-groups were found.

RETURN VALUES

       LCMAPS_MOD_SUCCESS
              Success.

       LCMAPS_MOD_FAIL
              Failure.

BUGS

       Please  report  any  errors  to   the   Nikhef   Grid   Middleware   Security   Team   <grid-mw-security-
       support@nikhef.nl>.

SEE ALSO

       lcmaps.db(5), lcmaps(3).

AUTHORS

       LCMAPS   and   the  LCMAPS  plug-ins  were  written  by  the  Grid  Middleware  Security  Team  <grid-mw-
       security@nikhef.nl>.