GFAL-TOKEN(1)

NAME
gfal-token - retrieve SE-issued token for a given path

SYNOPSIS
gfal-token [ OPTION ]... PATH [ ACTIVITY ]...

DESCRIPTION
gfal-token This command retrieves a Storage Element issued token for a given path. Additionally, a token issuer URL may be passed. The command can take either a list of user-defined activities or use predefined activities for the read/write access flag. Behind the scenes, Gfal2 will try to first retrieve a SciTokens-style token, followed by a macaroon-style token. If at any point, a token is successfully retrieved, operation stops and the token is printed.

OPTIONS

-h, --help
    show help about the command.

-V, --version
    output version information and exit.

-v, --verbose
    verbose mode. Repeat up to 3 times for the most verbose mode.

-D, --definition DEFINITION
    define properties for gfal2. Definitions have the following syntax: "CONFIG_GROUP:KEY=VALUE"

-t, --timeout TIMEOUT
    global timeout for the execution of the command. Command is interrupted if time expires before it finishes. Note: A grace period of 30 seconds is given to the global timeout.

-E, --cert CERT
    user certificate. (This option takes effect only after X509_USER_PROXY environment variable and default /tmp/x509up_u`id -u` location cannot provide a certificate)

--key KEY
    user private key.

-4  forces Gfal2 to use IPv4 addresses only. (Option valid only for GridFTP protocol)

-6  forces Gfal2 to use IPv6 addresses only. (Option valid only for GridFTP protocol)

-C, --client-info CLIENT_INFO
    provide custom client-side information.

--log-file LOG_FILE
    write Gfal2 library logs to the given file location.

--issuer ISSUER
    token issuer endpoint.

--validity VALIDITY
    token validity expressed in minutes.

-w, --write
    token read/write access flag. Default activities associated with these flags: read = [LIST,DOWNLOAD], write = [LIST,DOWNLOAD,MANAGE,UPLOAD,DELETE]

PATH
    resource URI for which token is requested.

ACTIVITY
    optional argument, user-specified activity list. This list takes precedence over the read/write access flag default activities.

EXAMPLES

Retrieve a SE-issued token using default write activities
    gfal-token --write https://endpoint.cern.ch/path/file

Retrieve a SE-issued token using custom activities
    gfal-token https://endpoint.cern.ch/path/file LIST MANAGE UPLOAD

FILES
/etc/gfal2.d/*
    All configuration files in this directory affect the behavior of the underlying gfal2.

AUTHORS
Duarte Meneses <duarte.meneses@cern.ch>
Adrien Devresse <adrien.devresse@cern.ch>
Alejandro Alvarez Ayllon <alejandro.alvarez.ayllon@cern.ch>
Andrea Manzi <andrea.manzi@cern.ch>
Mihai Patrascoiu <mihai.patrascoiu@cern.ch>
Joao Lopes <joao.pedro.batista.lopes@cern.ch>

SEE ALSO
gfal-cat(1), gfal-chmod(1), gfal-copy(1), gfal-ls(1), gfal-mkdir(1), gfal-rename(1), gfal-rm(1), gfal-save(1), gfal-stat(1), gfal-sum(1), gfal-token(1), gfal-xattr(1), gfal-evict(1), gfal-bringonline(1), gfal-archivepoll(1)