The gridmap file is a common configuration in the toolkit and is typically configured within the GridmapPDP configuration. To specify a default value to be used across the toolkit, if not specified with in the GrimapPDP configuration, the defaultAuthz element in container security descriptor is used as described inSection 5, “Default Authorization Chain”.

The gridmap authorization can be specified with any prefix, but the default configuration uses gridmapAuthz as shown in the example below.

Example:

<containerSecurityConfig xmlns="http://www.globus.org/security/descriptor/container" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.globus.org/security/descriptor name_value_type.xsd" xmlns:param="http://www.globus.org/security/descriptor">
    <defaultAuthzParam>
        <interceptor name="gridmapAuthz:org.globus.wsrf.impl.security.GridMapPDP">
            <parameter>
                <param:nameValueParam>
                    <param:parameter name="gridmap-file"
                    value="/etc/grid-security/grid-mapfile"/>
                </param:nameValueParam>
            </parameter>
        </interceptor>
     </defaultAuthzParam>
</containerSecurityConfig>

If the gridmap file is updated at runtime, it will be reloaded.