Table of Contents
MyProxy is an online credential repository. You can store X.509 proxy credentials in the MyProxy repository, protected by a passphrase, for later retrieval over the network. This eliminates the need for manually copying private key and certificate files between machines. MyProxy can also be used for authentication to grid portals and credential renewal with job managers.
Supported Features
- Users can store and retrieve multiple X.509 proxy credentials using myproxy-init and myproxy-logon.
- Users can store and retrieve multiple X.509 end-entity credentials using myproxy-store and myproxy-retrieve.
- Administrators can load the repository with X.509 end-entity credentials on the users' behalf using myproxy-admin-load-credential.
- Administrators can use the myproxy-admin-adduser command to create user credentials and load them into the MyProxy repository.
- Users and administrators can set access control policies on the credentials in the repository.
- If allowed by policy, job managers (such as Condor-G) can renew credentials before they expire.
- The MyProxy server enforces local site passphrase policies using a configurable external call-out.
Deprecated Features
- None
No changes have occurred for MyProxy since the last stable release, 4.0.x.
The following problems and limitations are known to exist for MyProxy at the time of the 4.2.0 release:
- Bug 2709: The MyProxy package isn't internationalized.
MyProxy depends on the following GT component:
- Non-WS Authentication and Authorization
MyProxy depends on the following 3rd party software:
- None
Protocol changes since GT 4.0.x
- None.
API changes since GT 4.0.x
- None.
Exception changes since GT 4.0.x
- Not applicable
Schema changes since GT 4.0.x
- Not applicable
Associated standards for MyProxy:
See MyProxy for more information about this component.
P
- private key
The private part of a key pair. Depending on the type of certificate the key corresponds to it may typically be found in
$HOME/.globus/userkey.pem(for user certificates),/etc/grid-security/hostkey.pem(for host certificates) or/etc/grid-security/(for service certificates).<service>/<service>key.pemFor more information on possible private key locations see this.
- proxy credentials
The combination of a proxy certificate and its corresponding private key. GSI typically stores proxy credentials in
/tmp/x509up_u, where <uid> is the user id of the proxy owner.<uid>