Changes between Version 33 and Version 34 of FeddCommands
- Timestamp:
- Jun 12, 2014 2:09:42 PM (10 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
FeddCommands
v33 v34 62 62 === db_to_certs.py === 63 63 64 This utility extracts the credentials needed to make local testbed requests from individual users to the local DETER testbed from the testbed database and stores them in a directory. It is helpful to do this when setting up a DETER access controller. 65 66 The arguments are: 67 68 '''--user='''''username''':: 69 Extract the information for ''username''. Once '''--user''' is given once, only the users selected will be output. The option may be specified more than once. 70 '''--project='''''projectname'':: 71 Extract information only for the given project. The option may be specified multiple times. 72 '''--cert_dir='''''dir'':: 73 Use ''dir'' as the directory containing user certificates. The directory must exist. 64 74 65 75 === exp_access_db.py === … … 107 117 As with other commands in the fedd package, it is installed in `/usr/local/bin` by default. 108 118 109 110 === fedid.py === 111 112 The `fedid.py` command prints the [Feddabout#Globalidentifiers:Fedids fedid] of the public key of an X.509 certificate to the standard output. This is handy in getting fedids for the various [FeddDatabases databases] that `fedd` uses. The command is invoked with 0 or more '''--attribute='''''attr'' parameters and 0 or more filenames. The command prints the fedids and the attributes in the format of a [FeddDatabases#GlobalAccessDB global access database] and can be used directly to construct those files. For example, this invocation: 113 114 {{{ 115 $ fedid.py --attribute=split --attribute=allocate fedd.pem deterboss.pem 116 }}} 117 118 produces 119 120 {{{ 121 fedid:ce90957dd5b7d20f9c3890c4599313b7f1cf31ea split,allocate 122 fedid:9b8e7f2b114956ad516befc93fa7e7eae3751bf9 split,allocate 123 }}} 124 125 126 === ABAC Utilities === 119 == ABAC Utilities == 127 120 128 121 There are several utilities for converting text-based configurations to ABAC and manipulating ABAC logic statements directly. … … 427 420 The `fedd_client.py` command was the original command line interface to most of `fedd`'s interfaces. It has been superceded by the individual scripts above. There are one or two functions it still provides, but these are very specialized debugging functions, and most users will not need it. 428 421 422 === fedid.py === 423 424 The `fedid.py` command prints the [FeddAuthorizationArchitecture#Globalidentifiers:Fedids fedid] of the public key of an X.509 certificate to the standard output. This is handy in getting fedids for the various [FeddDatabases databases] that `fedd` uses. The command is invoked with 0 or more '''--attribute='''''attr'' parameters and 0 or more filenames. The command prints the fedids and the attributes in the format of a [FeddDatabases#GlobalAccessDB global access database] and can be used directly to construct those files. For example, this invocation: 425 426 {{{ 427 $ fedid.py --attribute=split --attribute=allocate fedd.pem deterboss.pem 428 }}} 429 430 produces 431 432 {{{ 433 fedid:ce90957dd5b7d20f9c3890c4599313b7f1cf31ea split,allocate 434 fedid:9b8e7f2b114956ad516befc93fa7e7eae3751bf9 split,allocate 435 }}}
