Skip to content

feat(afs): use user:virt:eduPersonPrincipalNames to determine AFS cell

Pavel Zlámal requested to merge zlamalp/afs into main

Description

feat(afs): use user:virt:eduPersonPrincipalNames to determine AFS cell

  • Use "user:virt:eduPersonPrincipalNames" to determine proper users target AFS cell instead of "user:virt:organizationsWithLoa:en" attribute.
  • Remove references to 'ruk.cuni.cz' cell since it doesn't exist anymore.

DEPLOYMENT NOTE: Remove "user:virt:organizationsWithLoa:en" from required attributes of AFS service. Add "user:virt:eduPersonPrincipalNames" instead. Users formerly belonging to 'ruk.cuni.cz' cell will use facility default, most probably 'ics.muni.cz'.

How to test

Generate data for service using old and new script, sort lines. It should differ only in the target afs cell, where users formerly having ruk.cuni.cz should have ics.muni.cz.

Author's checklist

  • I have followed the contribution guidelines
  • This MR has been tested or does not change functionality
  • I have added relevant merge request dependencies (if this MR has any)
  • I have added the correct labels
  • I have assigned reviewers (if any are relevant)
  • I have edited the documentation (if the changes require it) or I have noted the need for the change if I do not have access to the documentation
  • I have marked all introduced BREAKING CHANGES or necessary DEPLOYMENT NOTES in the commit message(s)

Reviewer's checklist

  • This MR has been tested or does not change functionality
  • This MR has correct commit message format

Other information

none

Related issues

none

Edited by Pavel Zlámal

Merge request reports