myproxy-get-trustroots(1)           MyProxy          myproxy-get-trustroots(1)

NAME

       myproxy-get-trustroots - fetch trustroots from a myproxy-server

SYNOPSIS

       myproxy-get-trustroots [ options ]

DESCRIPTION

       The  myproxy-get-trustroots  command retrieves the trusted certificates
       from the myproxy-server(8) and stores them in the location specified by
       the  X509_CERT_DIR  environment  variable  if  set  or  /etc/grid-secu-
       rity/certificates if running as root or ~/.globus/certificates if  run-
       ning as non-root.

       An  example cron job for running myproxy-get-trustroots periodically to
       keep  the  X509_CERT_DIR  up-to-date  is  provided   at   $GLOBUS_LOCA-
       TION/share/myproxy/myproxy-get-trustroots.cron.

OPTIONS

       -h, --help
              Displays command usage text and exits.

       -u, --usage
              Displays command usage text and exits.

       -v, --verbose
              Enables verbose debugging output to the terminal.

       -V, --version
              Displays version information and exits.

       -s hostname, --pshost hostname
              Specifies  the  hostname(s)  of the myproxy-server(s).  Multiple
              hostnames may be specified  in  a  comma-separated  list.   This
              option is required if the MYPROXY_SERVER environment variable is
              not  defined.   If  specified,   this   option   overrides   the
              MYPROXY_SERVER environment variable.

       -p port, --psport port
              Specifies   the   TCP  port  number  of  the  myproxy-server(8).
              Default: 7512

       -q, --quiet
              Only write output messages on error.

       MYPROXY_SERVER
              Specifies the hostname(s) where the  myproxy-server(8)  is  run-
              ning.   This environment variable can be used in place of the -s
              option.

       MYPROXY_SERVER_PORT
              Specifies the port where the myproxy-server(8) is running.  This
              environment variable can be used in place of the -p option.

       MYPROXY_SERVER_DN
              Specifies  the distinguished name (DN) of the myproxy-server(8).
              All MyProxy client programs authenticate the server's  identity.
              By  default,  MyProxy  servers run with host credentials, so the
              MyProxy client programs expect the  server  to  have  a  distin-
              guished  name  with "/CN=host/<fqhn>" or "/CN=myproxy/<fqhn>" or
              "/CN=<fqhn>" (where <fqhn> is the  fully-qualified  hostname  of
              the  server).   If the server is running with some other DN, you
              can set this environment variable to tell the MyProxy clients to
              accept the alternative DN.

       MYPROXY_TCP_PORT_RANGE
              Specifies  a  range  of valid port numbers in the form "min,max"
              for the client side of the network connection to the server.  By
              default,  the  client will bind to any available port.  Use this
              environment variable to restrict  the  ports  used  to  a  range
              allowed  by  your  firewall.   If unset, MyProxy will follow the
              setting of the GLOBUS_TCP_PORT_RANGE environment variable.

       X509_USER_CERT
              Specifies a non-standard location for the certificate to be used
              for authentication to the myproxy-server(8).

       X509_USER_KEY
              Specifies a non-standard location for the private key to be used
              for authentication to the myproxy-server(8).

       X509_USER_PROXY
              Specifies a non-standard location for the proxy credential to be
              used for authentication to the myproxy-server(8).

       X509_CERT_DIR
              Specifies a non-standard location for the CA certificates direc-
              tory.

AUTHORS

       Bill Baker, Jim Basney,  Shiva  Shankar  Chetan,  Patrick  Duda,  Terry
       Fleury,  Jarek  Gawor,  Monte  Goode,  Daniel Kouril, Zhenmin Li, Neill
       Miller, Jason Novotny, Miroslav Ruda, Benjamin Temko, and Von Welch

SEE ALSO

       myproxy-change-pass-phrase(1),   myproxy-destroy(1),   myproxy-info(1),
       myproxy-init(1),    myproxy-logon(1),   myproxy-retrieve(1),   myproxy-
       server.config(5), myproxy-store(1), myproxy-admin-adduser(8),  myproxy-
       admin-change-pass(8),  myproxy-admin-load-credential(8), myproxy-admin-
       query(8), myproxy-server(8)



Globus                            2009-03-16         myproxy-get-trustroots(1)