1myproxy-admin-adduser(8)            MyProxy           myproxy-admin-adduser(8)
2
3
4

NAME

6       myproxy-admin-adduser - add a user or service credential
7

SYNOPSIS

9       myproxy-admin-adduser [ options ]
10
11       myproxy-admin-addservice [ options ]
12

DESCRIPTION

14       The  myproxy-admin-adduser and myproxy-admin-addservice commands create
15       a new credential for a user or service and load  it  into  the  MyProxy
16       repository.   They  are  perl(1)  scripts that run grid-cert-request (a
17       standard Globus Toolkit program) and grid-ca-sign (from the Globus Sim‐
18       ple  CA  package)  to create the credential and then run myproxy-admin-
19       load-credential(8) to load the credential into the MyProxy repository.
20
21       The command prompts for the common name to be included in the new  cer‐
22       tificate  (if  the  -c argument is not specified), the Globus Simple CA
23       key password for signing the certificate, the MyProxy username (if  the
24       -l  or  -d arguments are not specified), and the MyProxy passphrase for
25       the credential.  Most of the command-line options for this command  are
26       passed directly to the myproxy-admin-load-credential(8) command.
27
28       The  grid-ca-sign  program is not provided in the MyProxy distribution.
29       It must be installed separately, from the Globus Simple CA package.
30

OPTIONS

32       -h     Displays command usage text and exits.
33
34       -u     Displays command usage text and exits.
35
36       -v     Enables verbose debugging output to the terminal.
37
38       -c cn  Specifies the Common Name for the new credential  (for  example:
39              "Jim Basney").
40
41       -s dir Specifies the location of the credential storage directory.  The
42              directory must be  accessible  only  by  the  user  running  the
43              myproxy-server   process   for   security   reasons.    Default:
44              /var/myproxy or $GLOBUS_LOCATION/var/myproxy
45
46       -l username
47              Specifies the MyProxy account under which the credential  should
48              be stored.
49
50       -t hours
51              Specifies the maximum lifetime of credentials retrieved from the
52              myproxy-server(8) using  the  stored  credential.   Default:  12
53              hours
54
55       -p CA-password
56              Specifies the password for the CA's private key using the format
57              documented in the PASS PHRASE ARGUMENTS section of openssl(1).
58
59       -n     Disables passphrase authentication for  the  stored  credential.
60              If  specified, the command will not prompt for a passphrase, the
61              credential will not be encrypted by a passphrase in the  reposi‐
62              tory,   and   the  credential  will  not  be  retrievable  using
63              passphrase authentication with myproxy-logon(1).  This option is
64              used for storing renewable credentials and is implied by -R.
65
66       -d     Use the certificate subject (DN) as the username.
67
68       -a     Allow  credentials to be retrieved with just pass phrase authen‐
69              tication.  By default, only entities with credentials that match
70              the   myproxy-server.config(5)   default  retriever  policy  may
71              retrieve  credentials.   This  option  allows  entities  without
72              existing  credentials to retrieve a credential using pass phrase
73              authentication by including "anonymous" in the  set  of  allowed
74              retrievers.   The  myproxy-server.config(5)  server-wide  policy
75              must also allow "anonymous" clients for this option to  have  an
76              effect.
77
78       -A     Allow  credentials to be renewed by any client.  Any client with
79              a valid credential with a subject name that matches  the  stored
80              credential may retrieve a new credential from the MyProxy repos‐
81              itory if this option is given.  Since this  effectively  defeats
82              the  purpose  of  proxy  credential  lifetimes, it is not recom‐
83              mended.  It is included only for sake of completeness.
84
85       -r dn  Allow the specified entity to retrieve credentials.  By default,
86              the argument will be matched against the common name (CN) of the
87              client (for example: "Jim  Basney").   Specify  -x  before  this
88              option  to  match  against the full distinguished name (DN) (for
89              example: "/C=US/O=National Computational Science Alliance/CN=Jim
90              Basney") instead.
91
92       -R dn  Allow  the  specified  entity to renew credentials.  By default,
93              the argument will be matched against the common name (CN) of the
94              client (for example: "condorg/modi4.ncsa.uiuc.edu").  Specify -x
95              before this option to match against the full distinguished  name
96              (DN)   (for  example:  "/C=US/O=National  Computational  Science
97              Alliance/CN=condorg/modi4.ncsa.uiuc.edu") instead.  This  option
98              implies  -n since passphrase authentication is not used for cre‐
99              dential renewal.
100
101       -x     Specifies that the DN used by options -r and -R will be  matched
102              as a regular expression.
103
104       -X     Specifies  that the DN used by options -r and -R will be matched
105              against the Common Name (CN) of the subject.
106
107       -k name
108              Specifies the credential name.
109
110       -K description
111              Specifies credential description.
112

EXIT STATUS

114       0 on success, >0 on error
115

AUTHORS

117       See http://myproxy.ncsa.uiuc.edu/about for the list of MyProxy authors.
118

SEE ALSO

120       myproxy-change-pass-phrase(1),   myproxy-destroy(1),   myproxy-info(1),
121       myproxy-init(1),    myproxy-logon(1),   myproxy-retrieve(1),   myproxy-
122       store(1),    myproxy-server.config(5),    myproxy-admin-change-pass(8),
123       myproxy-admin-load-credential(8),    myproxy-admin-query(8),   myproxy-
124       server(8)
125
126
127
128MyProxy                            2009-12-1          myproxy-admin-adduser(8)
Impressum