Skip to content
Snippets Groups Projects
Commit 7deff7bf authored by Julien Leduc's avatar Julien Leduc
Browse files

krb5 then unix xrootd on client

and create all the needed users accounts and groups on the mgm so that we can `xrdcp` files from the `client` pod.
parent 746b4535
No related branches found
No related tags found
No related merge requests found
......@@ -239,6 +239,16 @@ kubectl --namespace=${instance} exec kdc cat /root/cta-frontend.keytab | kubectl
kubectl --namespace=${instance} exec kdc cat /root/eos.keytab | kubectl --namespace=${instance} exec -i ctaeos -- bash -c "cat > /etc/eos.krb5.keytab"
kubectl --namespace=${instance} exec ctacli -- kinit -kt /root/admin1.keytab admin1@TEST.CTA
kubectl --namespace=${instance} exec client -- kinit -kt /root/user1.keytab user1@TEST.CTA
# create users on the mgm
kubectl --namespace=${instance} exec ctaeos -- groupadd --gid 1001 ctausers
kubectl --namespace=${instance} exec ctaeos -- groupadd --gid 1002 ctaadmins
kubectl --namespace=${instance} exec ctaeos -- useradd --uid 10000 --gid 1001 user1
kubectl --namespace=${instance} exec ctaeos -- useradd --uid 11000 --gid 1002 admin1
# use krb5 and then unix fod xrootd protocol on the client pod for eos, xrdcp and cta everything should be fine!
echo "XrdSecPROTOCOL=krb5,unix" | kubectl --namespace=toto exec -i client -- bash -c "cat >> /etc/xrootd/client.conf"
echo OK
echo "klist for client:"
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment