| 1 | * Q: Can i use two or more authentication methods in one service instance |
| 2 | * A: Yes. Simply repeat the `<sm:Module xsi:type="sm:ecm_gsoap.service">` in the `<sm:Transport>` section. Example: |
| 3 | {{{ |
| 4 | <sm:Transport> |
| 5 | <sm:Module xsi:type="sm:ecm_gsoap.service"> |
| 6 | <sm:Host>qcg.example.com</sm:Host> |
| 7 | <sm:Port>19021</sm:Port> |
| 8 | <sm:KeepAlive>false</sm:KeepAlive> |
| 9 | <sm:Authentication> |
| 10 | <sm:Module xsi:type="sm:atc_transport_ssl.service"> |
| 11 | <sm:ServiceAuthentication> |
| 12 | <sm:X509CertKeyFile>/opt/plgrid/qcg/etc/qcg-comp/certs/qcgcertkey.pem</sm:X509CertKeyFile> |
| 13 | </sm:ServiceAuthentication> |
| 14 | </sm:Module> |
| 15 | <sm:Module xsi:type="sm:atc_msg_wsse_username.service"> |
| 16 | <sm:UserdirModule> |
| 17 | <sm:Module xsi:type="sm:userdir_pam"/> |
| 18 | </sm:UserdirModule> |
| 19 | </sm:Module> |
| 20 | </sm:Authentication> |
| 21 | <sm:Authorization> |
| 22 | <sm:Module xsi:type="sm:atz_username"/> |
| 23 | </sm:Authorization> |
| 24 | </sm:Module> |
| 25 | <sm:Module xsi:type="sm:ecm_gsoap.service"> |
| 26 | <sm:Host>qcg.example.com</sm:Host> |
| 27 | <sm:Port>19022</sm:Port> |
| 28 | <sm:KeepAlive>false</sm:KeepAlive> |
| 29 | <sm:Authentication> |
| 30 | <sm:Module xsi:type="sm:atc_transport_ssl.service"> |
| 31 | <sm:MutualAuthentication> |
| 32 | <sm:X509CertKeyFile>/opt//qcg/etc/qcg-comp/certs/qcgcertkey.pem</sm:X509CertKeyFile> |
| 33 | <sm:TrustedCAPath>/etc/grid-security/certificates</sm:TrustedCAPath> |
| 34 | </sm:MutualAuthentication> |
| 35 | </sm:Module> |
| 36 | </sm:Authentication> |
| 37 | <sm:Authorization> |
| 38 | <sm:Module xsi:type="sm:atz_mapfile"> |
| 39 | <sm:Mapfile>/etc/grid-security/grid-mapfile</sm:Mapfile> |
| 40 | </sm:Module> |
| 41 | </sm:Authorization> |
| 42 | </sm:Module> |
| 43 | <sm:Module xsi:type="smc:qcg-comp-service"/> |
| 44 | </sm:Transport |
| 45 | |
| 46 | }}} |