| Home |
| Services | |
| MyProxy | |
| VOMS | |
| Monitoring | |
| Guides | |
| Seminars | |
| Certificate Authorities | |
 |
 |
myproxy-init
The myproxy-init command uploads a credential to a myproxy-server for later retrieval. A credential with a lifetime of one week (by default) is then delegated to the myproxy-server and stored with the given MyProxy pass phrase. Proxy credentials with default lifetime of 12 hours can then be retrieved by myproxy-get-delegation using the MyProxy passphrase.
The myproxy-init command can also upload a credential to a myproxy-server to support credential renewal. Renewal allows a trusted service (for example, a batch job scheduler) to obtain a new credential for a user before the existing credential it has for that user expires.
Note: A credential may be used either for retrieval or renewal but not both. If both are desired, upload a different credential for each use, with a different name using the -k option.
To store a credential in the MyProxy repository, run the myproxy-init command on a computer where your Grid credentials are located. For example:
$ myproxy-init -s myproxy.grid.auth.gr
By default, myproxy-init will use your credentials in $HOME/.globus/usercert.pem and $HOME/.globus/userkey.pem. To upload credentials from a different location to the Myproxy server, set the X509_USER_KEY and X509_USER_CERT environment variables.
It is possible that long jobs may outlive the validity of the initial credential; if so and the proxy is not renewed, the job will die prematurely. There are two ways to avoid this:
Set the lifetime of the credential to be greater than that of the job. Use:
$ myproxy-init -s myproxy.grid.auth.gr -c <hours> -t <hours> -d -R 'service/system hostname'
or if the service is not known(NOT recommented)
$ myproxy-init -s myproxy.grid.auth.gr -c <hours> -t <hours> -d -A
Where:
For example to create a proxy credential with a lifetime on the myproxy server of a 1000 hours from which credentials with lifetime of 1000 hours could be retrieved:
$ myproxy-init -s myproxy.grid.auth.gr -c 1000 -t 1000 -d -R 'host/rb.isabella.grnet.gr'
myproxy-get-delegation
Once you've stored a credential in the MyProxy repository, you can retrieve a proxy credential whenever you need one with the myproxy-get-delegation command. For example:
$ myproxy-get-delegation -s myproxy.grid.auth.gr
The myproxy-get-delegation command prompts for the pass phrase you set previously with myproxy-init, retrieves a proxy credential for you, and stores it in the correct default location for use with Globus. The default lifetime of a proxy credential is 12 hours or that specified with the -t option when creating the stored credential with the myproxy-init command.
myproxy-info
The myproxy-info command displays information about a user's credentials stored on a myproxy-server.
myproxy-destroy
The myproxy-destroy command removes a credential from the myproxy server that was previously stored using myproxy-init.
$ myproxy-destroy -s myproxy.grid.auth.gr