VOMRS Command Line Client
A vomrs command line client exists for interacting with VOMRS. These are examples all relate the to CERN LHC
VOMRS instance but everything can be repeated for other VOMRS services.
- Download the client vomrs-client-1.3-2.tgz.
- Unpack the tar ball and then a simple help is available via the command with no arguments.
Usage: ./client/bin/vomrs_soapclient host port vo_name service_name ["arg1" "arg2" ...]
In order to list all services use :
./client/bin/vomrs_soapclient host port <VOMRS_ROOT_NAME>/<VO_NAME> getServices
In order to list roles that can execute a give service use:
./client/bin/vomrs_soapclient host port <VOMRS_ROOT_NAME>/<VO_NAME> getServiceRoles service_name
In order to list arguments for give service and role use:
./client/bin/vomrs_soapclient host port <VOMRS_ROOT_NAME>/<VO_NAME> getServiceArguments service_name role_name
In order to list service return values for a given service, role and set of arguments use:
./client/bin/vomrs_soapclient host port <VOMRS_ROOT_NAME>/<VO_NAME> getServiceReturnValues service_name role_name "arguments"
Obtain a list of all Services Possible.
There are lots of services available , here are the first 9 for dteam.
$ ./client/bin/vomrs_soapclient lcg-voms.cern.ch 8443 /vo/dteam getServices | head
- Client CN=lcg-voms.cern.ch, OU=computers, DC=cern, DC=ch accepted
AddCA
AddGroup
AddGroupManager
AddGroupOwner
AddGroupRole
AddGroupRoleToGroup
AddInstitution
AddLRP
AddMbrDN
Obtain a list of Services Suitable for Querying Information
These services are all prefixed with
Get
. Again lots, here are the first 10.
$ ./client/bin/vomrs_soapclient lcg-voms.cern.ch 8443 /vo/dteam getServices | grep Get | head
GetAllSbscrbEvents
GetCA
GetCAs
GetGroup
GetGroupManagers
GetGroupMembers
GetGroupOwners
GetGroupRole
GetGroupRoles
GetGroups
Obtain a List of Which Roles can Access a Service.
Only certain vomrs roles (statuses) within VOMRS can access different Services. e.g. GetSitePI (PI=personal info)
./client/bin/vomrs_soapclient lcg-voms.cern.ch 8443 /vo/dteam getServiceRoles GetSitePI
- Client CN=lcg-voms.cern.ch, OU=computers, DC=cern, DC=ch accepted
Visitor
Candidate
Applicant
Member
SiteAdmin
Get a List of Options for A Particular Service with a Particular Role
From above a
Member
is able to use the GetSitePI method but needs to know how to use it.
$ ./client/bin/vomrs_soapclient lcg-voms.cern.ch 8443 /vo/dteam getServiceArguments GetSitePI Member
- Client CN=lcg-voms.cern.ch, OU=computers, DC=cern, DC=ch accepted
INSTITUTION
Use a Particular Method.
Having obtained the arguments for the
GetSitePI
service we can now use it.
$ ./client/bin/vomrs_soapclient lcg-voms.cern.ch 8443 /vo/dteam GetSitePI CERN-PROD
Examples
Get A List of Members in a Group
e.g the root group "/test"
$ ./client/bin/vomrs_soapclient lcg-voms.cern.ch 8443 /vo/test GetGroupMembers /test
- Client CN=lcg-voms.cern.ch, OU=computers, DC=cern, DC=ch accepted
/DC=ch/DC=cern/OU=Organic Units/OU=Users/CN=aretico/CN=Bill
/DC=ch/DC=cern/CN=CERN Trusted Certification Authority
/DC=ch/DC=cern/OU=Organic Units/OU=Users/CN=diana/CN=Ben
/DC=ch/DC=cern/CN=CERN Trusted Certification Authority
/DC=ch/DC=cern/OU=Organic Units/OU=Users/CN=dimou/CN=Flower
/DC=ch/DC=cern/CN=CERN Trusted Certification Authority
/DC=ch/DC=cern/OU=Organic Units/OU=Users/CN=straylen/CN=613539/CN=Pot Men
/DC=ch/DC=cern/CN=CERN Trusted Certification Authority
Note how this DN, CA, DN, CA, ... on alternate lines.
Get A List of Personal Information Fields
To get a list of Personal Information Fields
$ ./client/bin/vomrs_soapclient lcg-voms.cern.ch 8443 /vo/test GetPI- Client CN=lcg-voms.cern.ch, OU=computers, DC=cern, DC=ch accepted
First name
Last name
Phone
SpecialName
nickname
headwear
AreYouSuper
Get Your Own Personal Information Values
./client/bin/vomrs_soapclient lcg-voms.cern.ch 8443 /vo/test GetMbrPI
- Client CN=lcg-voms.cern.ch, OU=computers, DC=cern, DC=ch accepted
Steve
Traylen012345
Sausage
straylen
FlatCap
Get Other People's Personal Information Values.
First you must be an
VOAdmin
to be able to do this, check with:
$ ./client/bin/vomrs_soapclient lcg-voms.cern.ch 8443 /vo/test getServiceRoles GetMbrPI
- Client CN=lcg-voms.cern.ch, OU=computers, DC=cern, DC=ch accepted
Candidate
Applicant
Member
VOAdmin
You can then check the arguments.
./client/bin/vomrs_soapclient lcg-voms.cern.ch 8443 /vo/test getServiceArguments GetMbrPI VOAdmin
- Client CN=lcg-voms.cern.ch, OU=computers, DC=cern, DC=ch accepted
DN CA
Finally you can query other peoples personal information.
$ /client/bin/vomrs_soapclient lcg-voms.cern.ch 8443 /vo/test GetMbrPI "/DC=ch/DC=cern/OU=Organic Units/OU=Users/CN=aretico/CN=624562/CN=Fred Ginger" \
"/DC=ch/DC=cern/CN=CERN Trusted Certification Authority"
- Client CN=lcg-voms.cern.ch, OU=computers, DC=cern, DC=ch accepted
Fred
Ginger
+41227676321
elegant
tie
shirt
--
SteveTraylen - 17 Nov 2008