Difference between revisions of "VOMS-API"
Andrea.turli (Talk | contribs) (→The VOMS-APi library) |
Andrea.turli (Talk | contribs) (→The VOMS-APi library) |
||
| Line 1: | Line 1: | ||
| − | == The VOMS- | + | == The VOMS-API library == |
The library offers a number of facilities for interacting with VOMS server. | The library offers a number of facilities for interacting with VOMS server. | ||
[[https://technical.wiki.d4science.research-infrastructures.eu/documentation/index.php/How_to_use_VOMS_api_library Read More]] | [[https://technical.wiki.d4science.research-infrastructures.eu/documentation/index.php/How_to_use_VOMS_api_library Read More]] | ||
| Line 10: | Line 10: | ||
These two classes are, respectively, a usage example of ''VOMSAdminImpl'' class and ''CredentialsManagerImpl''. | These two classes are, respectively, a usage example of ''VOMSAdminImpl'' class and ''CredentialsManagerImpl''. | ||
| − | ===VOMSAdminImpl=== | + | ====VOMSAdminImpl==== |
This class provides a subset of VOMS operations. We can manage VOMS users, groups and roles. Some operations are overloaded in order to simplify management of the users with a proxy certificate provided by gCube SimpleCA. | This class provides a subset of VOMS operations. We can manage VOMS users, groups and roles. Some operations are overloaded in order to simplify management of the users with a proxy certificate provided by gCube SimpleCA. | ||
| Line 21: | Line 21: | ||
If the user choose to instantiate a ''VOMSAdminImpl'' object specifying client credentials, this will overwrite the host certificate set by default. | If the user choose to instantiate a ''VOMSAdminImpl'' object specifying client credentials, this will overwrite the host certificate set by default. | ||
| − | ===CredentialsManagerImpl=== | + | ====CredentialsManagerImpl==== |
This class provides a method to retrieve user's credentials. It manages communication with MyProxyCA server to generate simple credentials for the username provided and some operations are overloaded in order to simplify management of the users with a proxy certificate provided by gCube SimpleCA. | This class provides a method to retrieve user's credentials. It manages communication with MyProxyCA server to generate simple credentials for the username provided and some operations are overloaded in order to simplify management of the users with a proxy certificate provided by gCube SimpleCA. | ||
Revision as of 15:43, 27 January 2009
The VOMS-API library
The library offers a number of facilities for interacting with VOMS server. [Read More]
Sample usage
The VOMS-API SA ships also a voms-api-test-suite where it is possible to use two sample classes:
- VOMSTest
- CredTest
These two classes are, respectively, a usage example of VOMSAdminImpl class and CredentialsManagerImpl.
VOMSAdminImpl
This class provides a subset of VOMS operations. We can manage VOMS users, groups and roles. Some operations are overloaded in order to simplify management of the users with a proxy certificate provided by gCube SimpleCA.
This utility can be instantiate in three different ways: by default VOMSAdminImpl will use host credentials contained in /etc/grid-security/hostpubliccert.pem and /etc/grid-security/hostprivatekey.pem.
Alternatively a user can specify his own credentials:
- a user can specify CLIENT creds by indicating the triple (CLIENT_CERT, CLIENT_KEY, CLIENT_PWD) or
- a user can specify CLIENT creds by indicating a CLIENT_PROXY, that's a proxy certificate of the pem cerficates.
If the user choose to instantiate a VOMSAdminImpl object specifying client credentials, this will overwrite the host certificate set by default.
CredentialsManagerImpl
This class provides a method to retrieve user's credentials. It manages communication with MyProxyCA server to generate simple credentials for the username provided and some operations are overloaded in order to simplify management of the users with a proxy certificate provided by gCube SimpleCA.
