globus-gridftp-server-setup-chroot(8) [debian man page]

GLOBUS-GRIDFTP-SERVER-SETUP-CHROOT(8)				  Globus Toolkit			     GLOBUS-GRIDFTP-SERVER-SETUP-CHROOT(8)

NAME

       globus-gridftp-server-setup-chroot  -  creates  the  specific  contents of a directory that can specified as a root of the file system tree
       exposed by the Globus GridFTP server

SYNOPSYS

       globus-gridftp-server-setup-chroot [-c certificate_dir] -r chroot_path_to_create

DESCRIPTION

       GridFTP server can be configured to restrict access to specific path using the command line  option  -chroot-path  of  the  globus-gridftp-
       server command. The specified path will become the new root after authentication.

       That path must contain a valid certificate structure, and the files /etc/passwd and /etc/groups.

       The command globus-gridftp-server-setup-chroot helps creating such a suitable directory structure.

OPTIONS

       -r chroot_path_to_create
	      Creates  in  chroot_path_to_create the directory structure expected by the globus-gridftp-server command, when started with -chroot-
	      path command line option.

       -c certificate_dir
	      Specifies explicitly the directory from which the certificates will be copied into the directory chroot_path_to_create. The  default
	      path is /etc/grid-security/certificates.

AUTHOR

       Initiative for Globus in Europe (IGE), http://www.ige-project.eu

COPYRIGHT

       Copyright (C) 2012 Initiative for Globus in Europe (IGE)

SEE ALSO

       globus-gridftp-server(8)

								February 16th, 2012			     GLOBUS-GRIDFTP-SERVER-SETUP-CHROOT(8)

GLOBUS-K5(8)							  Globus Toolkit						      GLOBUS-K5(8)

NAME

       globus-k5 - Acquire Kerberos Credentials for use with Grid Services

SYNOPSIS

       globus-k5 SERVICE-COMMAND [SERVICE-ARGS...]

DESCRIPTION

       The globus-k5 program is an authorization module used by the globus-gatekeeper program to acquire Kerberos 5 Credentials prior to executing
       a Grid Service. This may be accomplished by running kinit with a password stored in the globuskmap file, using the NCSA krb525 command, or
       the sslk5 command to use the X509 user proxy.

       The arguments passed to globus-k5 will not be used by it, but will be passed onto the job manager. The first parameter must be the path to
       the Grid Service.

       It is expected that the environment will contain the variables GLOBUSID and USER for the Grid and local POSIX user identities. This program
       is normally run as root, and will call seteuid() prior to executing the Grid Service.

       The parameters to use and the mapping for the globus to K5 user are located in the globuskmap file.

FORMAT OF THE GLOBUSKMAP FILE

       The globuskmap file is a line-oriented file which each line containing a command to run to acquire Kerberos 5 credentials for a Grid
       identity. Each line consists of an optionally-quoted GLOBUSID value followed by a command-line for running a process to acquire a Kerberos
       credential. For example:

	   "/O=Example/OU=Grid/CN=Joe User" /usr/afsws/bin/klog -principal juser -password mypasswd -cell infn.it

ENVIRONMENT

       If the following variables affect the execution of globus-k5:

       GLOBUSKMAP
	   Path to the globuskmap file.

       USER
	   POSIX username that the service will run as.

       KRB5CCNAME
	   Path to a Kerberos credential cache.

       GLOBUS_ID
	   Grid identity to generate Kerberos credentials for.

FILES

       /etc/globuskmap
	   Default file mapping Grid identities to Kerberos 5 principals.

SEE ALSO

       globus-k5(8), globus-job-manager(8)

University of Chicago						    01/06/2012							      GLOBUS-K5(8)