VOMRS Command Line Client

A vomrs command line client exists for interacting with VOMRS. These are examples all relate the to CERN LHC VOMRS instance but everything can be repeated for other VOMRS services.

• Download the client vomrs-client-1.3-2.tgz.
• Unpack the tar ball and then a simple help is available via the command with no arguments.

Usage: ./client/bin/vomrs_soapclient host port vo_name service_name ["arg1" "arg2" ...]
In order to list all services use :
                ./client/bin/vomrs_soapclient host port <VOMRS_ROOT_NAME>/<VO_NAME> getServices
                In order to list roles that can execute a give service use:
                ./client/bin/vomrs_soapclient host port <VOMRS_ROOT_NAME>/<VO_NAME> getServiceRoles service_name
                In order to list arguments for give service and role use:
                ./client/bin/vomrs_soapclient host port <VOMRS_ROOT_NAME>/<VO_NAME> getServiceArguments service_name role_name
                In order to list service return values for a given service, role and set of arguments use:
                ./client/bin/vomrs_soapclient host port <VOMRS_ROOT_NAME>/<VO_NAME> getServiceReturnValues service_name role_name "arguments"

Obtain a list of all Services Possible.

There are lots of services available , here are the first 9 for dteam.

$ ./client/bin/vomrs_soapclient lcg-voms.cern.ch 8443 /vo/dteam getServices | head
- Client CN=lcg-voms.cern.ch, OU=computers, DC=cern, DC=ch accepted
AddCA
AddGroup
AddGroupManager
AddGroupOwner
AddGroupRole
AddGroupRoleToGroup
AddInstitution
AddLRP
AddMbrDN

Obtain a list of Services Suitable for Querying Information

These services are all prefixed with Get. Again lots, here are the first 10.

$ ./client/bin/vomrs_soapclient lcg-voms.cern.ch 8443 /vo/dteam getServices | grep Get | head
GetAllSbscrbEvents
GetCA
GetCAs
GetGroup
GetGroupManagers
GetGroupMembers
GetGroupOwners
GetGroupRole
GetGroupRoles
GetGroups

Obtain a List of Which Roles can Access a Service.

Only certain vomrs roles (statuses) within VOMRS can access different Services. e.g. GetSitePI (PI=personal info)

./client/bin/vomrs_soapclient lcg-voms.cern.ch 8443 /vo/dteam getServiceRoles GetSitePI
- Client CN=lcg-voms.cern.ch, OU=computers, DC=cern, DC=ch accepted
Visitor
Candidate
Applicant
Member
SiteAdmin

Get a List of Options for A Particular Service with a Particular Role

From above a Member is able to use the GetSitePI method but needs to know how to use it.

$ ./client/bin/vomrs_soapclient lcg-voms.cern.ch 8443 /vo/dteam getServiceArguments GetSitePI Member
- Client CN=lcg-voms.cern.ch, OU=computers, DC=cern, DC=ch accepted
INSTITUTION

Use a Particular Method.

Having obtained the arguments for the GetSitePI service we can now use it.

$ ./client/bin/vomrs_soapclient lcg-voms.cern.ch 8443 /vo/dteam GetSitePI CERN-PROD

Examples

Get A List of Members in a Group

e.g the root group "/test"

$ ./client/bin/vomrs_soapclient lcg-voms.cern.ch 8443 /vo/test GetGroupMembers /test
- Client CN=lcg-voms.cern.ch, OU=computers, DC=cern, DC=ch accepted
/DC=ch/DC=cern/OU=Organic Units/OU=Users/CN=aretico/CN=Bill
/DC=ch/DC=cern/CN=CERN Trusted Certification Authority
/DC=ch/DC=cern/OU=Organic Units/OU=Users/CN=diana/CN=Ben
/DC=ch/DC=cern/CN=CERN Trusted Certification Authority
/DC=ch/DC=cern/OU=Organic Units/OU=Users/CN=dimou/CN=Flower
/DC=ch/DC=cern/CN=CERN Trusted Certification Authority
/DC=ch/DC=cern/OU=Organic Units/OU=Users/CN=straylen/CN=613539/CN=Pot Men
/DC=ch/DC=cern/CN=CERN Trusted Certification Authority

Note how this DN, CA, DN, CA, ... on alternate lines.

Get A List of Personal Information Fields

To get a list of Personal Information Fields

$ ./client/bin/vomrs_soapclient lcg-voms.cern.ch 8443 /vo/test GetPI- Client CN=lcg-voms.cern.ch, OU=computers, DC=cern, DC=ch accepted
First name
Last name
Phone
SpecialName
nickname
headwear
AreYouSuper

Get Your Own Personal Information Values

 ./client/bin/vomrs_soapclient lcg-voms.cern.ch 8443 /vo/test GetMbrPI
- Client CN=lcg-voms.cern.ch, OU=computers, DC=cern, DC=ch accepted
Steve
Traylen012345
Sausage
straylen
FlatCap

Get Other People's Personal Information Values.

First you must be an VOAdmin to be able to do this, check with:

$ ./client/bin/vomrs_soapclient lcg-voms.cern.ch 8443 /vo/test getServiceRoles GetMbrPI 
- Client CN=lcg-voms.cern.ch, OU=computers, DC=cern, DC=ch accepted
Candidate
Applicant
Member
VOAdmin

You can then check the arguments.

./client/bin/vomrs_soapclient lcg-voms.cern.ch 8443 /vo/test getServiceArguments GetMbrPI VOAdmin
- Client CN=lcg-voms.cern.ch, OU=computers, DC=cern, DC=ch accepted
DN CA

Finally you can query other peoples personal information.

$ /client/bin/vomrs_soapclient lcg-voms.cern.ch 8443 /vo/test GetMbrPI "/DC=ch/DC=cern/OU=Organic Units/OU=Users/CN=aretico/CN=624562/CN=Fred Ginger" \
                          "/DC=ch/DC=cern/CN=CERN Trusted Certification Authority"
- Client CN=lcg-voms.cern.ch, OU=computers, DC=cern, DC=ch accepted
Fred
Ginger
+41227676321
elegant
tie
shirt

-- SteveTraylen - 17 Nov 2008