1GLOBUS-K5(8)             Grid Community Toolkit Manual            GLOBUS-K5(8)
2
3
4

NAME

6       globus-k5 - Acquire Kerberos Credentials for use with Grid Services
7

SYNOPSIS

9       globus-k5 SERVICE-COMMAND SERVICE-ARGS...
10

DESCRIPTION

12       The globus-k5 program is an authorization module used by the
13       globus-gatekeeper program to acquire Kerberos 5 Credentials prior to
14       executing a Grid Service. This may be accomplished by running kinit
15       with a password stored in the globuskmap file, using the NCSA krb525
16       command, or the sslk5 command to use the X509 user proxy.
17
18       The arguments passed to globus-k5 will not be used by it, but will be
19       passed onto the job manager. The first parameter must be the path to
20       the Grid Service.
21
22       It is expected that the environment will contain the variables GLOBUSID
23       and USER for the Grid and local POSIX user identities. This program is
24       normally run as root, and will call seteuid() prior to executing the
25       Grid Service.
26
27       The parameters to use and the mapping for the globus to K5 user are
28       located in the globuskmap file.
29
30   Format of the globuskmap file
31       The globuskmap file is a line-oriented file which each line containing
32       a command to run to acquire Kerberos 5 credentials for a Grid identity.
33       Each line consists of an optionally-quoted GLOBUSID value followed by a
34       command-line for running a process to acquire a Kerberos credential.
35       For example:
36
37           "/O=Example/OU=Grid/CN=Joe User" /usr/afsws/bin/klog -principal juser -password mypasswd -cell infn.it
38

ENVIRONMENT

40       The following variables affect the execution of globus-k5:
41
42       GLOBUSKMAP
43           Path to the globuskmap file.
44
45       USER
46           POSIX username that the service will run as.
47
48       KRB5CCNAME
49           Path to a Kerberos credential cache.
50
51       GLOBUS_ID
52           Grid identity to generate Kerberos credentials for.
53

FILES

55       The following files affect the execution of globus-k5:
56
57       /etc/globuskmap
58           Default file mapping Grid identities to Kerberos 5 principals.
59

SEE ALSO

61       globus-k5(8), globus-job-manager(8)
62

AUTHOR

64       Copyright © 1999-2016 University of Chicago
65
66
67
68Grid Community Toolkit 6          03/31/2018                      GLOBUS-K5(8)