VOMS WS X509 AC Restful Interface

URL

Description

This API is used by a member of VO vo-name to retrieve a valid VOMS AttributeCertificate.

The caller can specify which VOMS FQANs she wants in the AttributeCertificate using the requestedFQANs parameter. Requested FQANs are returned in the order in which they are requested.

The caller can request a different lifetime for the generated AttributeCertificate using the lifetime parameter. The lifetime of the AC is however bound to the maximum lifetime allowed by the server configuration.

Parameters

XML Response

The response is a simple XML document. The root element voms has a child element ac that contains the base64 encoded VOMS AC.

<?xml version="1.0" encoding="UTF-8"?>
<voms>
  <ac>MIIGqTCCB....</ac>
</voms>

Error messages

In case of errors, a simple XML document reporting an error message is returned. The root element voms has a child element error that contains the error message.

<?xml version="1.0" encoding="UTF-8"?>
<voms>
  <error>org.glite.security.voms.admin.database.NoSuchUserException: User '...' not found in database</error>
</voms>

Example Request/Response

Request:

GET /voms/voms-ws/rest/ac HTTP/1.1
Host: devel13.cnaf.infn.it:8443
Accept: */*

Response:

HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Set-Cookie: JSESSIONID=E95A6C247E1DEDBF104491162A6C56CC; Path=/voms/voms-ws; Secure
Content-Type: text/html;charset=ISO-8859-1
Content-Length: 158
Date: Thu, 02 Oct 2008 17:06:42 GMT

<?xml version="1.0" encoding="UTF-8"?><voms><ac>...</ac></voms>

-- AndreaCeccanti - 02 Oct 2008