summaryrefslogtreecommitdiff
path: root/docs/netdb-role-api
blob: c90182a6df95484162b783eb98c6b47911ba6278 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
                              NetDB Role API

Basic API

    remctl netdb-node-roles-rc netdb node-roles <sunetid> <node>

    Note that the remctl principal used here is actually the underlying
    host principal, not the principal for that alias.  <node> must be
    fully qualified.  This will return a list of all roles that <sunetid>
    has with <node>, chosen from admin, team, or user.  For our purposes,
    we probably want to look at admin and team, but we may want user as
    well.

    You must be a current NetDB user to use it.  It just sucks rows out of
    a view matching on the SUNet ID and node name, so getting no result
    can mean "no such SUNet ID," "no such node," or "SUNet ID isn't
    associated with node."

Examples

    % remctl netdb-node-roles-rc netdb node-roles riepel zathras.stanford.edu
    admin
    team
    user
    % remctl netdb-node-roles-rc netdb node-roles riepel calgon.stanford.edu
    admin
    %

Wallet Issues

    We'll need to get a principal registered to use it that can query
    anything for any node but isn't otherwise authorized to use NetDB.

License

    Copyright 2006, 2007, 2013
        The Board of Trustees of the Leland Stanford Junior University

    Copying and distribution of this file, with or without modification,
    are permitted in any medium without royalty provided the copyright
    notice and this notice are preserved.  This file is offered as-is,
    without any warranty.