Download GLITE 3.1 USER GUIDE

#IgnoreCertificateNameMismatch = 0
# If server certificates are verified, CA certificates need to be loaded:
TrustedCertDir = /etc/grid-security/certificates
The following parameters can be configured:
• Host: the name of the host where the AMGA server is running. Default is localhost
• Port: the port of the host to connect to. Default is 8822.
• Login: the login name used for the AMGA server. This will be the owner of the new entries created in the
catalog.
• Home: the home-directory. The default is ”/”.
• UseSSL: possible values are no, try, require (or yes). The default value is no. It has to be set to yes
if the user wants to make the authentication via certificates or proxies. If UseSSL is on, all the session is
encrypted. If it is off, all the parameters below will be ignored.
• AuthenticateWithCertificate: set to 1 to enable certificate based authentication. If this option is on,
then you should provide either a key and certificate pair, or a proxy. If both options are provided, then the
proxy has the priority.
• CertFile: the path to the certificate file. It has to be in .pem format. Note that the UseGridProxy option
should be disabled, otherwise the grid proxy has the priority.
• KeyFile: the path to the key file. Like for the CertFile option, the UseGridProxy option should be
disabled.
• UseGridProxy: the path to the X509 user grid proxy. The default value is /tmp/x509up u[userId].
• Password: you can also use a password to authenticate with your login. Password is sent encrypted if SSL
is used.
• VerifyServerCert: if set to 1 (default value), verifies the server certificate against the CA certificate
located in TrustedCertDir (see below for this option).
• IgnoreCertificateNameMismatch: if set to yes, do not try to match the DN in the server certificate with
the host name of the server. Useful for services that are multi-homed (for example that have an alias for the
host name)
• TrustedCertDir: the directory where the CA certificate is stored.
7.9.3. Metadata access from the shell
AMGA provides two ways to access metadata from the shell: via the cli command line and via the mdclient
metadata terminal interface.
To start the mdclient interface, just enter:
mdclient [-p port] [hostname]
CERN-LCG-GDEIS-722398
Manuals Series
Page 132