1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
|
.TH SLASHGRID 8 "September 2006" "slashgrid" "GridSite Manual"
.SH NAME
.B slashgrid
\- Local and remote virtual filesystems using grid credentials
.SH "SYNOPSIS"
.BR slashgrid
[--debug] [--domain DOMAIN --groups GROUPS] [--local-root PATH --local-user USER] [--gridmapdir PATH] [--foreground]
.SH "SUMMARY"
SlashGrid provides remote virtual filesystems under /grid ("slash grid")
using HTTP/HTTPS as a transport protocol, and a local filesystem under
/grid/local which can give access to the DocumentRoot area of a webserver
on the same machine. In both local and remote cases, X.509, GSI Proxy
and VOMS credentials can be used as the basis of authorization decisions.
.SH "REMOTE HTTP(S) SERVERS"
SlashGrid maps URLs of the form https://d.n.s:port/path/file into virtual paths
of the form /grid/https/d.n.s:port/path/file (with /grid/http/ for
HTTP URLs.)
SlashGrid attempts to obtain a user credential in the form of a GSI Proxy
file, either indicated by the variable X509_USER_PROXY in the environment
of the user's process, or a file of the form /tmp/x509up_uUID, where UID is
their Unix user ID. If none is found, an authenticated HTTPS request is made.
SlashGrid searches /etc/grid-security/certificates by default for CA root
files when verifying the host certificate of remote servers. This can be
overridden by users setting the variable X509_CERT_DIR in their environment.
.SH "SITECAST DOMAINS"
If the slashgrid daemon is started with the option --domain, then URLs
with DNS component matching the given domain will be located using SiteCast
requests. SlashGrid will attempt to use UDP multicast queries to find a
transfer URL of a copy of the file requested. The option --groups must also
be used to specify a comma-separted list of one or more UDP multicast groups,
which will be searched in order.
The SiteCast area of the virtual filesystem is read-only (to prevent
corruption of replicas.)
.TP
--domain DOMAIN
SiteCast domain to use.
.TP
--groups GROUPS
SiteCast multicast groups to query.
.SH "LOCAL FILESYSTEM"
This filesystem is intended for use with GridSite/Apache webservers, which
control access via .gacl policy files in each directory hierarchy. SlashGrid
can interpret these files internally, and this allows other services, such
as GridFTP running in chroot mode, to share access to a common file store.
.TP
--local-root PATH
Top level directory in the underlying filesystem, which will be mapped to
/grid/local/
.TP
--local-user USER
Local user who will own the files created in the underlying filesystem.
.TP
--gridmapdir PATH
Private gridmapdir used for mapping of pool users back to X.509 DNs. For
example, after configuring GridFTP to use this gridmapdir.
.SH "OTHER OPTIONS"
.TP
--debug
Turn on debugging.
.TP
--blocksize BLOCKSIZE
Change the default HTTP(S) block size in bytes. For streaming data,
a much larger value than the default of 4096 may be appropriate. This may
also be set for
.B each user process
if users set the environment variable SLASHGRID_BLOCKSIZE.
.SH "MORE INFORMATION"
http://www.gridsite.org/wiki/SlashGrid
.SH AUTHORS
Andrew McNab <Andrew.McNab@manchester.ac.uk>
SlashGrid is part of GridSite: http://www.gridsite.org/
.SH "SEE ALSO"
.BR htcp(1),
.BR mod_gridsite(8)
|
