grid-ca-package(1) [debian man page]
GRID-CA-PACKAGE(1) Globus Commands GRID-CA-PACKAGE(1) NAME
grid-ca-package - Prepare a CA certificate, configuration, and policy for distribution SYNOPSIS
grid-ca-package [-help] [-h] [-usage] [-version] [-versions] grid-ca-package [-ca HASH] [-g] [-b] [-r] [-d] DESCRIPTION
The grid-ca-package utility creates a tarball containing an RPM spec file and the files needed to use a CA with grid tools. It optionally will also create a GPT package for distributing a CA. By default, the grid-ca-package utility displays a list of installed grid CA and prompts for which CA to package. It then creates a tarball containing the CA certificate, signing policy, CA configuration files, and an spec script to generate a binary RPM package containing the CA. If the CA hash is known prior to running grid-ca-package, it may provided as an argument to the -ca parameter to avoid prompting. In addition to generating a spec script and tarball, grid-ca-package creates a GPT package if either the -g or -b options are used on the command-line. These packages may be used to distribute a CA and configuration to systems which do not support RPM packages. The grid-ca-package utility writes the package tarballs to the current working directory. The full set of command-line options to grid-ca-package follows. -help, -h, -usage Display the command-line options to grid-ca-package and exit. -version, -versions Display the version number of the grid-ca-package command. The second form includes more details. -ca CA Use the CA whose name matches the hash string CA. When invoked with this option, grid-ca-package runs non-interactively. -g Create a GPT binary package in addition to the RPM script tarball. This package may be installed on other systems using the gpt-install program. -b Create a GPT binary package with GPT metadata located in the path expected by GPT 3.2 (used in Globus 2.0.0-5.0.x) instead of ${datadir}/globus/packages as used in Globus 5.2.x. This option overrides the -g command-line option. -r Create a binary RPM package for the CA. This option currently only works on RPM-based distributions. -d Create a binary Debian package for the CA. This option currently only works on Debian-based distributions. EXAMPLES
Package a Simple CA with hash 0146c503 % grid-ca-package -ca 0146c503 Creating RPM source tarball... done globus_simple_ca_0146c503.tar.gz ENVIRONMENT VARIABLES
The following environment variables affect the execution of grid-ca-package: GLOBUS_LOCATION Non-standard installation path of the Globus toolkit. SEE ALSO
grid-cert-request(1), grid-ca-sign(1), grid-default-ca(1), grid-ca-create(1) AUTHOR
University of Chicago Globus Toolkit 5.2.0 07/22/2011 GRID-CA-PACKAGE(1)
Check Out this Related Man Page
GRID-MAPFILE-ADD-(8) Globus Commands GRID-MAPFILE-ADD-(8) NAME
grid-mapfile-add-entry - Add an entry to a gridmap file SYNOPSIS
grid-mapfile-add-entry [-help] [-usage] [-version] [-versions] grid-mapfile-add-entry {-dn DISTINGUISHED-NAME} {-ln LOCAL-NAME...} [[-d] | [-dryrun]] [[-mapfile MAPFILE] | [-f MAPFILE]] DESCRIPTION
The grid-mapfile-add-entry program adds a new mapping from an X.509 distinguished name to a local POSIX user name to a gridmap file. Gridmap files are used as a simple authorization method for services such as GRAM5 or GridFTP. The grid-mapfile-add-entry program verifies that the LOCAL-NAME is a valid user name on the system on which it was run, and that the mapping between DISTINGUISHED-NAME and LOCAL-NAME does not already exist in the gridmap file. By default, grid-mapfile-add-entry will modify the gridmap file named by the GRIDMAP environment variable if present, or the file /etc/grid-security/grid-mapfile if not. This can be changed by the use of the -mapfile or -f command-line options. If the gridmap file does not exist, grid-mapfile-add-entry will create it. If it already exists, grid-mapfile-add-entry will save the current contents of the file to a new file with the string .old appended to the file name. The full set of command-line options to grid-mapfile-add-entry are: -help, -usage Display the command-line options to grid-mapfile-add-entry. -version, -versions Display the version number of the grid-mapfile-add-entry command. The second form includes more details. -dn DISTINGUISHED-NAME The X.509 distinguished name to add a mapping for. The name should be in OpenSSL's oneline format. -ln LOCAL-NAME... The POSIX user name to map the distinguished name to. This name must be a valid username. Add multiple LOCAL-NAME strings after the -ln command-line option. If any of the local names are invalid, no changes will be made to the gridmap file. Note that if multiple occurances of the -ln command-line option are present, only the the last one will be added. -d, -dryrun Verify local names and display diagnostics about what would be added to the gridmap file, but don't actually modify the file. -mapfile MAPFILE, -f MAPFILE Modify the gridmap file named by MAPFILE instead of the default. EXAMPLES
Add a mapping between the current user's certificate to the current user id to a gridmap file in $HOME/.gridmap: % grid-mapfile-add-entry -f $HOME/.gridmap -dn "`grid-cert-info -subject`" -ln "`id -un`" Modifying /home/juser/.gridmap ... /home/juser/.gridmap does not exist... Attempting to create /home/juser/.gridmap New entry: "/DC=org/DC=example/DC=grid/CN=Joe User" juser (1) entry added Add a mapping between the a distinguished name and multiple local names: % grid-mapfile-add-entry -dn "/DC=org/DC=example/DC=grid/CN=Joe User" juser" local1 local2 Modifying /home/juser/.gridmap ... /home/juser/.gridmap does not exist... Attempting to create /home/juser/.gridmap New entry: "/DC=org/DC=example/DC=grid/CN=Joe User" local1,local2 (1) entry added ENVIRONMENT VARIABLES
The following environment variables affect the execution of grid-mapfile-add-entry: GRIDMAP Path to the default gridmap to modify. FILES
The following files affect the execution of grid-mapfile-add-entry: /etc/grid-security/grid-mapfile Path to the default gridmap to modify if GRIDMAP environment variable is not set. SEE ALSO
grid-mapfile-check-consistency(8), grid-mapfile-delete-entry(8) AUTHOR
University of Chicago Globus Toolkit 5.0.1 03/19/2010 GRID-MAPFILE-ADD-(8)