# LCMAPS policy file/plugin definition
#
# default path
path = /opt/edg/lib/lcmaps/modules

# Plugins:
example          = "lcmaps_plugin_example.mod Some bogus arguments"
localaccount     = "lcmaps_localaccount.mod -gridmapfile /etc/grid-security/grid-mapfile"
poolaccount      = "lcmaps_poolaccount.mod -gridmapfile /etc/grid-security/grid-mapfile -gridmapdir /etc/grid-security/gridmapdir"
posix_enf        = "lcmaps_posix_enf.mod -maxuid 1 -maxpgid 1 -maxsgid 32"
vomsextract      = "lcmaps_voms.mod -vomsdir /etc/grid-security -certdir /etc/grid-security/certificates"
vomslocalgroup   = "lcmaps_voms_localgroup.mod -groupmapfile /etc/grid-security/groupmapfile"
vomspoolgroup    = "lcmaps_voms_poolgroup.mod -groupmapfile /etc/grid-security/groupmapfile -groupmapdir /etc/grid-security/groupmapdir"
vomspoolaccount  = "lcmaps_voms_poolaccount.mod -gridmapfile /etc/grid-security/grid-mapfile -gridmapdir /etc/grid-security/gridmapdir"

# Policies:
default:
localaccount -> posix_enf | poolaccount
poolaccount -> posix_enf

voms:
vomsextract -> vomslocalgroup | vomspoolgroup
vomslocalgroup -> vomspoolgroup | vomspoolaccount
vomspoolgroup -> vomspoolaccount
vomspoolaccount -> ldap_enf | posix_enf
ldap_enf -> posix_enf