NAME¶

gfal-token - retrieve SE-issued token for a given path

SYNOPSIS¶

gfal-token [ OPTION ]... PATH [ ACTIVITY ]...

DESCRIPTION¶

gfal-token This command retrieves a Storage Element issued token for a given path. Additionally, a token issuer URL may be passed. The command can take either a list of user-defined activities or use predefined activities for the read/write access flag. Behind the scenes, Gfal2 will try to first retrieve a SciTokens-style token, followed by a macaroon-style token. If at any point, a token is successfully retrieved, operation stops and the token is printed.

OPTIONS¶

-h, --help

show help about the command.

-V, --version

output version information and exit.

-v, --verbose

verbose mode. Repeat up to 3 times for the most verbose mode.

-D, --definition DEFINITION

define properties for gfal2. Definitions have the following syntax: "CONFIG_GROUP:KEY=VALUE"

-t, --timeout TIMEOUT

global timeout for the execution of the command. Command is interrupted if time expires before it finishes. Note: A grace period of 30 seconds is given to the global timeout.

-E, --cert CERT

user certificate. (This option takes effect only after X509_USER_PROXY environment variable and default /tmp/x509up_u`id -u` location cannot provide a certificate)

--key KEY

user private key.

-4

forces Gfal2 to use IPv4 addresses only. (Option valid only for GridFTP protocol)

-6

forces Gfal2 to use IPv6 addresses only. (Option valid only for GridFTP protocol)

-C, --client-info CLIENT_INFO

provide custom client-side information.

--log-file LOG_FILE

write Gfal2 library logs to the given file location.

--issuer ISSUER

token issuer endpoint.

--validity VALIDITY

token validity expressed in minutes.

-w, --write

token read/write access flag. Default activities associated with these flags: read = [LIST,DOWNLOAD], write = [LIST,DOWNLOAD,MANAGE,UPLOAD,DELETE]

PATH

resource URI for which token is requested.

ACTIVITY

optional argument, user-specified activity list. This list takes precedence over the read/write access flag default activities.

EXAMPLES¶

Retrieve a SE-issued token using default write activities

gfal-token --write https://endpoint.cern.ch/path/file

Retrieve a SE-issued token using custom activities

gfal-token https://endpoint.cern.ch/path/file LIST MANAGE UPLOAD

FILES¶

/etc/gfal2.d/*

AUTHORS¶

Duarte Meneses <duarte.meneses@cern.ch>
Adrien Devresse <adrien.devresse@cern.ch>
Alejandro Alvarez Ayllon <alejandro.alvarez.ayllon@cern.ch>
Andrea Manzi <andrea.manzi@cern.ch>
Mihai Patrascoiu <mihai.patrascoiu@cern.ch>
Joao Lopes <joao.pedro.batista.lopes@cern.ch>

SEE ALSO¶

gfal-cat(1), gfal-chmod(1), gfal-copy(1), gfal-ls(1), gfal-mkdir(1), gfal-rename(1), gfal-rm(1), gfal-save(1), gfal-stat(1), gfal-sum(1), gfal-token(1), gfal-xattr(1), gfal-evict(1), gfal-bringonline(1), gfal-archivepoll(1)