Provided by: myproxy-admin_5.5-1_i386 bug

NAME

       myproxy-admin-adduser - add a user or service credential

SYNOPSIS

       myproxy-admin-adduser [ options ]

       myproxy-admin-addservice [ options ]

DESCRIPTION

       The  myproxy-admin-adduser and myproxy-admin-addservice commands create
       a new credential for a user or service and load  it  into  the  MyProxy
       repository.   They  are  perl(1)  scripts that run grid-cert-request (a
       standard Globus Toolkit program)  and  grid-ca-sign  (from  the  Globus
       Simple CA package) to create the credential and then run myproxy-admin-
       load-credential(8) to load the credential into the MyProxy repository.

       The command prompts for the common name  to  be  included  in  the  new
       certificate (if the -c argument is not specified), the Globus Simple CA
       key password for signing the certificate, the MyProxy username (if  the
       -l  or  -d arguments are not specified), and the MyProxy passphrase for
       the credential.  Most of the command-line options for this command  are
       passed directly to the myproxy-admin-load-credential(8) command.

       The  grid-ca-sign  program is not provided in the MyProxy distribution.
       It must be installed separately, from the Globus Simple CA package.

OPTIONS

       -h     Displays command usage text and exits.

       -u     Displays command usage text and exits.

       -v     Enables verbose debugging output to the terminal.

       -c cn  Specifies the Common Name for the new credential  (for  example:
              "Jim Basney").

       -s dir Specifies the location of the credential storage directory.  The
              directory must be  accessible  only  by  the  user  running  the
              myproxy-server   process   for   security   reasons.    Default:
              /var/lib/myproxy or /var/myproxy or $GLOBUS_LOCATION/var/myproxy

       -l username
              Specifies the MyProxy account under which the credential  should
              be stored.

       -t hours
              Specifies the maximum lifetime of credentials retrieved from the
              myproxy-server(8) using  the  stored  credential.   Default:  12
              hours

       -p CA-password
              Specifies the password for the CA's private key using the format
              documented in the PASS PHRASE ARGUMENTS section of openssl(1).

       -n     Disables passphrase authentication for  the  stored  credential.
              If  specified, the command will not prompt for a passphrase, the
              credential  will  not  be  encrypted  by  a  passphrase  in  the
              repository,  and  the  credential  will not be retrievable using
              passphrase authentication with myproxy-logon(1).  This option is
              used for storing renewable credentials and is implied by -R.

       -d     Use the certificate subject (DN) as the username.

       -a     Allow   credentials  to  be  retrieved  with  just  pass  phrase
              authentication.  By default, only entities with credentials that
              match  the myproxy-server.config(5) default retriever policy may
              retrieve  credentials.   This  option  allows  entities  without
              existing  credentials to retrieve a credential using pass phrase
              authentication by including "anonymous" in the  set  of  allowed
              retrievers.   The  myproxy-server.config(5)  server-wide  policy
              must also allow "anonymous" clients for this option to  have  an
              effect.

       -A     Allow  credentials to be renewed by any client.  Any client with
              a valid credential with a subject name that matches  the  stored
              credential  may  retrieve  a  new  credential  from  the MyProxy
              repository if this option  is  given.   Since  this  effectively
              defeats  the  purpose  of  proxy credential lifetimes, it is not
              recommended.  It is included only for sake of completeness.

       -r name
              Allow the specified entity to retrieve credentials. See  -x  and
              -X options for controlling name matching behavior.

       -R name
              Allow  the  specified entity to renew credentials. See -x and -X
              options for controlling name  matching  behavior.   This  option
              implies  -n  since  passphrase  authentication  is  not used for
              credential renewal.

       -Z name, --retrievable_by_cert name
              Allow the specified entity to  retrieve  credentials  without  a
              passphrase.  See -x and -X options for controlling name matching
              behavior.  This option implies -n.

       -x     Specifies that names used with following options -r, -R, and  -Z
              will   be   matched   against   the   full  certificate  subject
              distinguished name (DN)  according  to  REGULAR  EXPRESSIONS  in
              myproxy-server.config(5).

       -X     Specifies  that names used with following options -r, -R, and -Z
              will be matched against the certificate subject common name (CN)
              according  to  REGULAR  EXPRESSIONS in myproxy-server.config(5).
              For example, if an argument of -r  "Jim  Basney"  is  specified,
              then  the  resulting  policy will be "*/CN=Jim Basney".  This is
              the default behavior.

       -k name
              Specifies the credential name.

       -K description
              Specifies credential description.

EXIT STATUS

       0 on success, >0 on error

AUTHORS

       See http://myproxy.ncsa.uiuc.edu/about for the list of MyProxy authors.

SEE ALSO

       myproxy-change-pass-phrase(1),   myproxy-destroy(1),   myproxy-info(1),
       myproxy-init(1),    myproxy-logon(1),   myproxy-retrieve(1),   myproxy-
       store(1),    myproxy-server.config(5),    myproxy-admin-change-pass(8),
       myproxy-admin-load-credential(8),    myproxy-admin-query(8),   myproxy-
       server(8)