myproxy-server.8

代理服务器源代码 供大家学习使用,希望大家喜欢

.TH myproxy-server 8 "2005-6-8" "NCSA" "MyProxy"
.SH NAME
myproxy-server \- store credentials in an online repository
.SH SYNOPSIS
.B myproxy-server
[
.I options
]
.SH DESCRIPTION
The
.B myproxy-server
is a server that runs on a trusted, secure host and manages a database
of security credentials for use from remote sites.  The
.BR myproxy-init (1)
program stores credentials with associated policies that specify
credential lifetimes and who is authorized to retrieve credentials.  The
.BR myproxy-server.config (5)
file sets server-wide policies that are used in conjunction with the
policies set by
.BR myproxy-init (1)
to control who is authorized to store and retrieve credentials.
.SH OPTIONS
.TP
.B -h, --help
Displays command usage text and exits.
.TP
.B -u, --usage
Displays command usage text and exits.
.TP
.B -v, --verbose
Enables verbose debugging output to the terminal.
.TP
.B -V, --version
Displays version information and exits.
.TP
.B -d, --debug
Run the server in debug mode.  In this mode, the server will run in
the foreground, will accept one connection, write log messages to the
terminal while processing the incoming request, and exit after
completing one request.
.TP
.BI -p " port, " --port " port"
Specifies the TCP port number that the
.B myproxy-server
should listen on.  Default: 7512
.TP
.BI -c " file, " --config " file"
Specifies the location of the
.B myproxy-server
configuration file.  Default: /etc/myproxy-server.config or $GLOBUS_LOCATION/etc/myproxy-server.config
.TP
.BI -s " dir, " --storage " dir"
Specifies the location of the credential storage directory.
The directory must be accessible only by the user running the 
.B myproxy-server
process for security reasons.  Default: /var/myproxy or $GLOBUS_LOCATION/var/myproxy
.SH FILES
.TP
.I /etc/myproxy-server.config
Default location of the server configuration file (see 
.BR myproxy-server.config (5)).
If not found, 
.I $GLOBUS_LOCATION/etc/myproxy-server.config
will be used.
An alternate location can be specified by using the
.B -c
option.
.TP
.I /var/myproxy
Default location of the credential storage directory.
If not found, 
.I $GLOBUS_LOCATION/var/myproxy
will be used.
If neither exist, the myproxy-server will first attempt to create
.I /var/myproxy
and if that fails will attempt to create
.I $GLOBUS_LOCATION/var/myproxy
and use that.
The directory must be accessible only by the user running the 
.B myproxy-server
process for security reasons.
An alternate location can be specified by using the
.B -s
option.
.SH ENVIRONMENT
.TP
.B GLOBUS_LOCATION
Specifies the root of the MyProxy installation, used to find the
default location of the 
.I myproxy-server.config
file and the credential storage directory.
.TP
.B LD_LIBRARY_PATH
The MyProxy server is typically linked dynamically with Globus
security libraries, which must be present in the dynamic linker's
search path.  This typically requires 
.I $GLOBUS_LOCATION/lib
to be included in the list in the
.B LD_LIBRARY_PATH
environment variable, which is set by the
.I $GLOBUS_LOCATION/libexec/globus-script-initializer
script, which should be called from any
.B myproxy-server
startup script.
Alternatively, to set
.B LD_LIBRARY_PATH
appropriately for the Globus libraries in an interactive shell, source
.I $GLOBUS_LOCATION/etc/globus-user-env.sh
(for sh shells) or 
.I $GLOBUS_LOCATION/etc/globus-user.env.csh
(for csh shells).
.TP
.B X509_USER_CERT
Specifies an alternative location for the server's certificate.  By
default, the server uses 
.I /etc/grid-security/hostcert.pem
when running as root or
.I ~/.globus/usercert.pem
when running as non-root.
.TP
.B X509_USER_KEY
Specifies an alternative location for the server's private key.  By
default, the server uses
.I /etc/grid-security/hostkey.pem
when running as root or
.I ~/.globus/userkey.pem
when running as non-root.
.TP
.B X509_USER_PROXY
Specifies an alternative location for the server's certificate and
private key (in the same file).  Use when running the server with a
proxy credential.  Note that the proxy will need to be periodically
renewed before expiration to allow the 
.B myproxy-server
to keep functioning.  When the 
.B myproxy-server
runs with a non-host credential, clients must have the
.B MYPROXY_SERVER_DN
environment variable set to the distinguished name of the certificate
being used by the server.
.SH AUTHORS
Bill Baker,
Jim Basney,
Shiva Shankar Chetan,
Patrick Duda,
Jarek Gawor,
Monte Goode,
Daniel Kouril,
Zhenmin Li,
Jason Novotny,
Miroslav Ruda,
Benjamin Temko,
and Von Welch
.SH "SEE ALSO"
.BR myproxy-change-pass-phrase (1),
.BR myproxy-destroy (1),
.BR myproxy-info (1),
.BR myproxy-init (1),
.BR myproxy-logon (1),
.BR myproxy-retrieve (1),
.BR myproxy-store (1),
.BR myproxy-server.config (5),
.BR myproxy-admin-adduser (8),
.BR myproxy-admin-change-pass (8),
.BR myproxy-admin-load-credential (8),
.BR myproxy-admin-query (8)