globus-delegation-client

The globus-delegation-client program is a command-line tool to delegate a user's GSI credential to a web service. More...A new WS-Delegation resource will be created if the delegation is successful.

 Usage: globus-delegation-client [OPTION]... SERVICE-SPECIFIER EPR-FILENAME|-refresh
 Options:
  -a | --anonymous            Use anonymous authentication. Requires either -m
                              'conv' or transport (https) security.
  -d | --debug                Enable debug mode
  -e | --eprFile FILENAME     Load service EPR from FILENAME
  -g | --delegation MODE      Set the delegation mode. MODE can be 'limited' or
                              'full'. The default is 'limited'
  -h | --help                 Print this help message.
  -k | --key KEYNAME VALUE    Set resource key in service EPR to be named
                              KEYNAME with VALUE as its value.
  -m | --securityMech TYPE    Set authentication mechanism. TYPE is one of
                              'msg' for WS-SecureMessage or 'conv' for
                              WS-SecureConversation.
  -p | --protection LEVEL     Set message protection level. LEVEL is one of
                              'sig' for digital signature or 'enc' for
                              encryption. The default is 'sig'.
  -r | --refresh              Refresh a credential instead of creating a 
                              new delegated credential resource.
  -s | --service ENDPOINT     Set ENDPOINT the service URL to use.
  -t | --timeout SECONDS      Set client timeout to SECONDS.
  -u | --usage                Print short usage message.
  -V | --version              Show version information and exit.
  -v | --certKeyFiles CERTIFICATE-FILENAME KEY-FILENAME
                              Use credentials located in CERTIFICATE-FILENAME
                              and KEY-FILENAME. The key file must be
                              unencrypted.
  -x | --proxyFilename FILENAME
                              Use proxy credentials located in FILENAME
  -z | --authorization TYPE   Set authorization mode. TYPE can be 'self',
                              'host', 'none', or a string specifying the
                              identity of the remote party. The default is
                              'self'.
  --versions                  Show version information for all loaded modules
                              and exit.
   
 SERVICE-SPECIFIER: [-e FILENAME | -s URI [-k VALUE]]
 EPR-FILENAME: Name of file to store EPR of new delegated credential