Note

The Grid Community Toolkit documentation was taken from the Globus Toolkit 6.0 documentation. As a result, there may be inaccuracies and outdated information. Please report any problems to the Grid Community Forums as GitHub issues.

GCT → MyProxy → GT 6.0 Release Notes: MyProxy

Component Overview

MyProxy is open source software for managing X.509 Public Key Infrastructure (PKI) security credentials (certificates and private keys). MyProxy combines an online credential repository with an online certificate authority to allow users to securely obtain credentials when and where needed. Users run myproxy-logon to authenticate and obtain credentials, including trusted CA certificates and Certificate Revocation Lists (CRLs). For more information about MyProxy, see the MyProxy Home Page.

Feature summary

Supported Features

  • Users can obtain certificates and trust roots from the MyProxy CA using myproxy-logon.

  • Users can store and retrieve multiple X.509 proxy credentials using myproxy-init and myproxy-logon.

  • Users can store and retrieve multiple X.509 end-entity credentials using myproxy-store and myproxy-retrieve.

  • Users and administrators can manage trustroots (CA certificates and CRLs) using myproxy-logon and myproxy-get-trustroots.

  • Administrators can load the repository with X.509 end-entity credentials on the users' behalf using myproxy-admin-load-credential.

  • Administrators can use the myproxy-admin-adduser command to create user credentials and load them into the MyProxy repository.

  • Administrators can use the myproxy-admin-addservice command to create host credentials and load them into the MyProxy repository.

  • Users and administrators can set access control policies on the credentials in the repository.

  • If allowed by policy, job managers (such as Condor-G) can renew credentials before they expire.

  • The MyProxy server enforces local site passphrase policies using a configurable external call-out.

Deprecated Features

  • None

Summary of Changes in MyProxy

GCT 6.0 contains MyProxy 6.0rc3. See the MyProxy Release Notes for more details on this and other MyProxy versions.

Known Problems

The following problems and limitations are known to exist for MyProxy at the time of the 6.0 release:

Limitations

  • No known limitations exist.

Outstanding bugs

  • Bug 2709: The MyProxy package isn’t internationalized.

Technology dependencies

MyProxy depends on the following GCT component:

Tested platforms

Tested Platforms for MyProxy:

Table 1. Tested Platforms
Operating System Distribution Version(s) Architecture(s)

Linux

CentOS

5, 6

i386, x86_64

7

x86_64

Fedora

20, 21, 22

i386, x86_64

Red Hat Enterprise Linux

5, 6

i386, x86_64

7

x86_64

Scientific Linux

5, 6

i386, x86_64

7

x86_64

SUSE Linux Enterprise Server

11SP3

x86_64

Debian

6, 7, 8

i386, amd64

Ubuntu

12.04LTS, 14.04LTS, 14.10, 15.04

i386, amd64

Mac OS X

10.6-10.10

i386, x86_64

Solaris

OmniOS

r151006

x86_64

Windows 7

Cygwin

i386, x86_64

MingW64

i386, x86_64

Backward compatibility summary

All MyProxy versions are fully backwards compatible.

Associated Standards

Associated standards for MyProxy:

For More Information

See MyProxy for more information about this component.