voms-proxy-init2 man page

voms-proxy-init — create a proxy with VOMS extensions


voms-proxy-init [options]


The voms-proxy-init generates a proxy with the VOMS information included in a non critical extension.


Options may be specified indifferently with either a "-" or "--" prefix. The options from -help to -out are present for compatibility with grid-proxy-init, and have the exact same meaning. The meaning of the other ones is the following.


Displays usage
Displays version
Enables extra debug output


Quiet mode, minimal output
Verifies proxy
Allows passphrase from stdin
Creates a limited proxy
 H Proxy is valid for H hours (default:12) This option is deprecated and is only present for compatibility with grid-proxy-init, since this option does not set the validity of the credentials returned by VOMS. Use -valid instead.
 H Tries to get a pseudo cert with information valid for H hours. The default is "as long as the proxy certificate". The special value 0 means as long as the server will allow. This option is deprecated, since it does not set the validity of the generated proxy. Use -valid instead.
 HH:MM This option attempts to set the validity for both the proxy and the credentials returned by the VOMS server. The latter validity may however be shortened due to server policy. This option obsoletes both -hours and -vomslife, and should be used in preference to both
 B Number of bits in key {0|512|1024|2048|4096}. 0 is a special value which means: same number of bits as in the issuing certificate.
 certfile Non-standard location of user certificate
 keyfile Non-standard location of user key
 certdir Non standard location where the trusted CAs certificates are kept.
 proxyfile Location of new proxy cert
 voms[:command] Specifies the VOMS server to contact using the nickname voms. It also allows to send a specific command to the server. The default command is :all, and it gets all group membership information. Other commands are :/Role=rolename which grants the rolename VO-wide role if the server allows it, and :/group/Role=rolename which grants the role rolename only in the group /group, again only if the server allows it.

Example : voms-proxy-init --voms myVO:/myVO/Role=VO-Admin

 fqan Specified fqans, if present, are put on top of the list of attributes returned by the server in the order in which they are passed (using more -order call). The order of the others is not specified. If some of the fqans are not returned no warning is given. Capability selection is not supported.
 file Includes file in the certificate (in a non critical extension)
 file Read options from file.
 file Specifies the name of a configuration file from which a list of nicknames is read. The format of the file is the following: nick  host  port  subject  vo where nick is the nickname, host and port are the hostname and port of the server to contact, subject is the subject of the server's certificate, while vo is the name of the VO that owns the server. The default filenames are $PREFIX/etc/vomses and $HOME/.voms/vomses.

Moreover, permissions must be 644 if a file is specified, and 755 if a directory is specified

The three options are synonyms. -confile and -userconf are deprecated. -vomses should be used instead.

The file containing the policy expression.

-policy-language pl

-pl pl
The language in which the policy is expressed. Default is IMPERSONATION_PROXY.
Maximum depth of proxy certfificate that can be signed from this.
 version Underlying Globus version. This will influence the default value of the -proxyver.
Version of the proxy certificate to create. May be 2, 3 or 4. Default value is decided upon underlying globus version.
This option is a synonym of -proxyver 4 and it generates a RFC-compliant proxy.
This option is a synonym of -proxyver 2 and it generates a legacy proxy.
 hostname This option targets the generated AC to a specific host. This option may be specified multiple times to allow for multiple hosts.
 seconds This option allows to specify the maximum number of seconds that voms-proxy-init will wait while trying to establish a connection with the server. Its default value is -1 (unlimited).
Use existing proxy to contact the server and to sing the new proxy.
 file Saves the voms credential on file file.
Ignore all warnings. They are not shown to the user.
Warnings become failures. The program will translates all warnings into errors and will react accordingly, by returning a failure itself.
Instead of producing an attribute certificate, this optin will print on screen a list of all attributes available to the user.
 file Adds the VOMS AC in file to the proxy.


EGEE Bug Tracking Tool: https://savannah.cern.ch/projects/jra1mdw/

See Also

voms-proxy-info(1), voms-proxy-destroy(1)

EDT Auth Home page: http://grid-auth.infn.it

CVSweb: http://datagrid.in2p3.fr/cgi-bin/cvsweb.cgi/Auth/voms

RPM repository: http://datagrid.in2p3.fr/distribution/autobuild/i386-rh7.3


Vincenzo Ciaschini <Vincenzo.Ciaschini@cnaf.infn.it>.

Valerio Venturi <Valerio.Venturi@cnaf.infn.it>.