Voms-Proxy-Init GUI Help
VOMS (VO Management Service) is used to manage information about the roles
and privileges of users within a Virtual Organisation. This information is
presented to Grid services via an extension your Grid proxy credentials. At the
time the proxy is created one or more VOMS servers are contacted, and they return a mini certificate known as an
Attribute Certificate (AC) which is signed by the VO and contains information about group membership and any
associated roles within the VO.
Overview
- This application is used to dynamically build -voms options and
performs 'voms-proxy-init' requests.
- To perform a voms-proxy-init request, you must first build a list of
'-voms' options using the graphical user interface.
- -voms options represent a list of Fully Qualified Attribute Names
or 'FQANs' for short.
- FQANs have the following syntax: 'voName:fqan' (e.g. cms:/cms/Role=lcgadmin).
The 'fqan' part is optional and represents specifically requested VO groups and roles.
- You must be a member of a Virtual Organisation before you can perform 'voms-proxy-init'
Voms-Proxy-Init GUI Layout
This panel is used to select between the different ways you can use to build a list of -voms options.
You can select attributes from:
-
Your Vomses files. These files contain lists of VO names and the associated
server information that is required to contact the voms server.
-
A Voms Profie file containing pre-configured -voms options that have
been previously created by you for convenience.
-
A cached voms enabled proxy that already contains voms attributes.
This panel displays a tree listing the available -voms attributes according to
the tab that is selected in panel A). Make tree selections in this panel to
build your list of -voms options.
This panel displays a tree listing the currently select -voms attributes
that will be used to invoke 'voms-proxy-init'. The attributes listed in the
tree are requested in the order shown.
-
= A VO name that will be requested in the voms-proxy-init operation.
-
= VO name will be excluded from the voms-proxy-init operation.
-
= A Group / Role that will be requested in the voms-proxy-init operation.
-
= Group / Role will be excluded from the voms-proxy-init operation.
This panel displays the command line equivalent of tree C),
showing the currently selected -voms attributes
that will be used to invoke 'voms-proxy-init' command.
This panel will perform a 'voms-proxy-init' using the current
-voms options as shown in C) and D).
When selecting VO Roles, you can choose between:
-
Fetch All - Performs a voms-proxy-init
and generates all your Groups and Roles for all the selected VO names
(same as 'voms-proxy-init voName:all').
-
Selected - Performs a voms-proxy-init
with the selected Roles only. By default, ALL Groups but NO Roles
are created.