Using a CCL Globus Certificate

The CCL uses the Globus software to create and manage certificates. First, make sure that you have obtained a Globus certificate from the CCL. Once that is complete, you can use the certificate to access CCL resources.

To begin, you must create a proxy certificate. A proxy is a temporary credential derived from your permanent keys. It is only good for a limited time so that, if you lose it, your identity will not be permanently compromised. To create a proxy, run grid-proxy-init and enter your passphrase:

    % grid-proxy-init
    Your identity: /O=Cooperative Computing Lab/CN=John Q Public
    Enter GRID pass phrase for this identity:
    Creating proxy .......................................................... Done
    Your proxy is valid until: Fri Sep 24 22:44:49 2004

Now you will be able to access resources with this credential for up to twelve hours. (To make the proxy last longer, use the -hours option to grid-proxy-init.) To see information about your proxy certificate:

    % grid-proxy-info
    subject  : /O=Cooperative Computing Lab/CN=John Q Public/CN=proxy
    issuer   : /O=Cooperative Computing Lab/CN=John Q Public
    identity : /O=Cooperative Computing Lab/CN=John Q Public
    type     : full legacy globus proxy
    strength : 512 bits
    path     : /tmp/x509up_u102744
    timeleft : 11:59:58

Now, you should be able to access any Globus-enabled resource from any host by using your proxy certificate. For example, if you are using Chirp, you can authenticate as follows:

     % chirp wombat00.cselab.nd.edu
    chirp wombat00.cselab.nd.edu
    connected to wombat00.cselab.nd.edu as
    globus:/O=Cooperative_Computing_Lab/CN=John_Q_Public

Using a CCL Globus Certificate

Related Links