def get_auth_token_gss(account, gsscred, appid, ip=None, vo='def'):
"""
Authenticate a Rucio account temporarily via a GSS token.
The tokens lifetime is 1 hour.
:param account: Account identifier as a string.
:param gsscred: GSS principal@REALM as a string.
:param appid: The application identifier as a string.
:param ip: IP address of the client as a string.
:param vo: The VO to act on.
:returns: A models.Token object as saved to the database.
"""
kwargs = {'account': account, 'gsscred': gsscred}
if not permission.has_permission(
issuer=account, vo=vo, action='get_auth_token_gss', kwargs=kwargs):
raise exception.AccessDenied(
'User with identity %s can not log to account %s' %
(gsscred, account))
account = InternalAccount(account, vo=vo)
return authentication.get_auth_token_gss(account, gsscred, appid, ip)
def get_auth_token_gss(account, gsscred, appid, ip=None):
"""
Authenticate a Rucio account temporarily via a GSS token.
The tokens lifetime is 1 hour.
:param account: Account identifier as a string.
:param gsscred: GSS principal@REALM as a string.
:param appid: The application identifier as a string.
:param ip: IP address of the client as a string.
:returns: Authentication token as a variable-length string.
"""
kwargs = {'account': account, 'gsscred': gsscred}
if not permission.has_permission(issuer=account, action='get_auth_token_gss', kwargs=kwargs):
raise exception.AccessDenied('User with identity %s can not log to account %s' % (gsscred, account))
return authentication.get_auth_token_gss(account, gsscred, appid, ip)
def get_auth_token_gss(account, gsscred, appid, ip=None):
"""
Authenticate a Rucio account temporarily via a GSS token.
The tokens lifetime is 1 hour.
:param account: Account identifier as a string.
:param gsscred: GSS principal@REALM as a string.
:param appid: The application identifier as a string.
:param ip: IP address of the client as a string.
:returns: Authentication token as a variable-length string.
"""
kwargs = {'account': account, 'gsscred': gsscred}
if not permission.has_permission(issuer=account, action='get_auth_token_gss', kwargs=kwargs):
raise exception.AccessDenied('User with identity %s can not log to account %s' % (gsscred, account))
return authentication.get_auth_token_gss(account, gsscred, appid, ip)