globus-k5(8) [debian man page]

GLOBUS-K5(8)							  Globus Toolkit						      GLOBUS-K5(8)

NAME

       globus-k5 - Acquire Kerberos Credentials for use with Grid Services

SYNOPSIS

       globus-k5 SERVICE-COMMAND [SERVICE-ARGS...]

DESCRIPTION

       The globus-k5 program is an authorization module used by the globus-gatekeeper program to acquire Kerberos 5 Credentials prior to executing
       a Grid Service. This may be accomplished by running kinit with a password stored in the globuskmap file, using the NCSA krb525 command, or
       the sslk5 command to use the X509 user proxy.

       The arguments passed to globus-k5 will not be used by it, but will be passed onto the job manager. The first parameter must be the path to
       the Grid Service.

       It is expected that the environment will contain the variables GLOBUSID and USER for the Grid and local POSIX user identities. This program
       is normally run as root, and will call seteuid() prior to executing the Grid Service.

       The parameters to use and the mapping for the globus to K5 user are located in the globuskmap file.

FORMAT OF THE GLOBUSKMAP FILE

       The globuskmap file is a line-oriented file which each line containing a command to run to acquire Kerberos 5 credentials for a Grid
       identity. Each line consists of an optionally-quoted GLOBUSID value followed by a command-line for running a process to acquire a Kerberos
       credential. For example:

	   "/O=Example/OU=Grid/CN=Joe User" /usr/afsws/bin/klog -principal juser -password mypasswd -cell infn.it

ENVIRONMENT

       If the following variables affect the execution of globus-k5:

       GLOBUSKMAP
	   Path to the globuskmap file.

       USER
	   POSIX username that the service will run as.

       KRB5CCNAME
	   Path to a Kerberos credential cache.

       GLOBUS_ID
	   Grid identity to generate Kerberos credentials for.

FILES

       /etc/globuskmap
	   Default file mapping Grid identities to Kerberos 5 principals.

SEE ALSO

       globus-k5(8), globus-job-manager(8)

University of Chicago						    01/06/2012							      GLOBUS-K5(8)

GLOBUS-GATEKEEPER-(8)					       University of Chicago					     GLOBUS-GATEKEEPER-(8)

NAME

       globus-gatekeeper-admin - Manage globus-gatekeeper services

SYNOPSIS

       globus-gatekeeper-admin [-h]

       globus-gatekeeper-admin [-l] [-n NAME]

       globus-gatekeeper-admin [-e SERVICE] [-n NAME]

       globus-gatekeeper-admin [-E]

       globus-gatekeeper-admin [-d SERVICE]

DESCRIPTION

       The globus-gatekeeper-admin program manages service entries which are used by the globus-gatekeeper to execute services. Service entries
       are located in the /etc/grid-services directory. The globus-gatekeeper-admin can list, enable, or disable specific services, or set a
       service as the default. The -h command-line option shows a brief usage message.

   Listing services
       The -l command-line option to globus-gatekeeper-admin will cause it to list all of the services which are available to be run by the
       globus-gatekeeper. In the output, the service name will be followed by its status in brackets. Possible status strings are ENABLED,
       DISABLED, and ALIAS to NAME, where NAME is another service name.

       If the -n NAME is used, then only information about the service named NAME is printed.

   Enabling services
       The -e SERVICE command-line option to globus-gatekeeper-admin will cause it to enable a service so that it may be run by the
       globus-gatekeeper.

       If the -n NAME option is used as well, then the service will be enabled with the alias NAME.

   Enabling a default service
       The -E command-line option to globus-gatekeeper-admin will cause it to enable a service alias with the name jobmanager. The
       globus-gatekeeper-admin program will choose the first service it finds as the default. To enable a particular service as the default, use
       the -e parameter described above with the -n parameter.

   Disabling services
       The -d SERVICE command-line option to globus-gatekeeper-admin will cause it to disable a service so that it may not be run by the
       globus-gatekeeper. All aliases to a disabled service are also disabled.

FILES

       /etc/grid-services
	   Default location of enabled gatekeeper service descriptions.

University of Chicago						    12/13/2011						     GLOBUS-GATEKEEPER-(8)