VOMS : Virtual Organisation Membership Service

TL;DR

A VOMS adds permissions to your identity, allowing you to use services on the grid.

Quickstart :

  • [x] Register in VO with your personal certificate
  • [x] Copy personal certificate to $HOME/.globus/user[cert,key].pem
  • [x] Create a proxy : voms-proxy-init --voms (e.g. sagrid) 
                
                  voms-proxy-init 
                  --voms
                   sagrid
                  

                  Your identity: /C
                  =
                  IT/O
                  =
                  INFN/OU
                  =
                  Personal Certificate/L
                  =
                  ZA-MERAKA/CN
                  =
                  Bruce Becker
                  

                  Creating temporary proxy ................................................... Done
                  

                  Contacting  voms.sagrid.ac.za:15001 
                  [
                  /C
                  =
                  IT/O
                  =
                  INFN/OU
                  =
                  Host/L
                  =
                  ZA-UFS/CN
                  =
                  voms.sagrid.ac.za] 
                  "sagrid"
                   Done
                  

                  Creating proxy .................................. Done
                  

                  Your proxy is valid 
                  until 
                  Tue Dec 15 05:46:27 2015
  • [x] Check that the proxy is still valid : voms-proxy-info --all 
                
                  subject   : /C
                  =
                  IT/O
                  =
                  INFN/OU
                  =
                  Personal Certificate/L
                  =
                  ZA-MERAKA/CN
                  =
                  Bruce Becker/CN
                  =
                  proxy
                  

                  issuer    : /C
                  =
                  IT/O
                  =
                  INFN/OU
                  =
                  Personal Certificate/L
                  =
                  ZA-MERAKA/CN
                  =
                  Bruce Becker
                  

                  identity  : /C
                  =
                  IT/O
                  =
                  INFN/OU
                  =
                  Personal Certificate/L
                  =
                  ZA-MERAKA/CN
                  =
                  Bruce Becker
                  

                  type
                        : proxy
                  

                  strength  : 1024 bits
                  

                  path      : /tmp/x509up_u500
                  

                  timeleft  : 11:56:53
                  

                  key usage : Digital Signature, Key Encipherment, Data Encipherment
                  

                  ===
                   VO sagrid extension information 
                  ===
                  

                  VO        : sagrid
                  

                  subject   : /C
                  =
                  IT/O
                  =
                  INFN/OU
                  =
                  Personal Certificate/L
                  =
                  ZA-MERAKA/CN
                  =
                  Bruce Becker
                  

                  issuer    : /C
                  =
                  IT/O
                  =
                  INFN/OU
                  =
                  Host/L
                  =
                  ZA-UFS/CN
                  =
                  voms.sagrid.ac.za
                  

                  attribute : /sagrid/Role
                  =
                  NULL/Capability
                  =
                  NULL
                  

                  timeleft  : 11:56:53
                  

                  uri       : voms.sagrid.ac.za:15001

Virtual Organisations

In order to register to a Virtual Organisation, you need a personal certificate from a trusted Certificate Authority . There are several VO’s supported - see a full list at the EGI Operations Portal

Attributes

Attributes define what permissions you have. These are added to a proxy of your personal certificate by the VOMS.

Proxies