Voms-Proxy-Init GUI Help

VOMS (VO Management Service) is used to manage information about the roles and privileges of users within a Virtual Organisation. This information is presented to Grid services via an extension your Grid proxy credentials. At the time the proxy is created one or more VOMS servers are contacted, and they return a mini certificate known as an Attribute Certificate (AC) which is signed by the VO and contains information about group membership and any associated roles within the VO.


Overview

  1. This application is used to dynamically build -voms options and performs 'voms-proxy-init' requests.
  2. To perform a voms-proxy-init request, you must first build a list of '-voms' options using the graphical user interface.
  3. -voms options represent a list of Fully Qualified Attribute Names or 'FQANs' for short.
  4. FQANs have the following syntax: 'voName:fqan' (e.g. cms:/cms/Role=lcgadmin). The 'fqan' part is optional and represents specifically requested VO groups and roles.
  5. You must be a member of a Virtual Organisation before you can perform 'voms-proxy-init'


Voms-Proxy-Init GUI Layout

help
A) Voms attribute selection options
This panel is used to select between the different ways you can use to build a list of -voms options. You can select attributes from:
  1. Your Vomses files. These files contain lists of VO names and the associated server information that is required to contact the voms server.
  2. A Voms Profie file containing pre-configured -voms options that have been previously created by you for convenience.
  3. A cached voms enabled proxy that already contains voms attributes.


B) Choose -voms options tree
This panel displays a tree listing the available -voms attributes according to the tab that is selected in panel A). Make tree selections in this panel to build your list of -voms options.

C) Current -voms options tree
This panel displays a tree listing the currently select -voms attributes that will be used to invoke 'voms-proxy-init'. The attributes listed in the tree are requested in the order shown.

D) Current -voms options text
This panel displays the command line equivalent of tree C), showing the currently selected -voms attributes that will be used to invoke 'voms-proxy-init' command.

E) Do voms-proxy-init
This panel will perform a 'voms-proxy-init' using the current -voms options as shown in C) and D). When selecting VO Roles, you can choose between:
  1. Fetch All - Performs a voms-proxy-init and generates all your Groups and Roles for all the selected VO names (same as 'voms-proxy-init voName:all').
  2. Selected - Performs a voms-proxy-init with the selected Roles only. By default, ALL Groups but NO Roles are created.