Options may be specified indifferently with either a "-" or "--" prefix. Their meaning is the following.
-help-usage
These options print a list of options that the server accepts. They are synonyms.
-foreground
Runs part of the server in foreground. Easier debugging.
-portport
Listens on port port. The default is 754.
-backlognum
Sets the maximum backlof for the connections. The default is 50.
-logfilefile
Selects the file for logging. The default is /ver/log/voms.
-globusidid-globuspwdfile
These options are supported for backwards compatibility only. They have no effect, and indeed do not get
listed by the -help option.
-passfilefile
Reads the password to access the DB from file. The default is to read it from the console during server's
startup.
-x509_cert_dirpath-x509_cert_filefile-x509_user_certfile-x509_user_keyfile-x509_user_proxyfile
These options set the respective variables.
-dbnamename
Sets the name of the DB. Default voms.
-usernamename
Sets the name of the user for the DB login. The default is voms.
-voname
Sets the name of the VO that owns this server. The default is unspecified.
-timeoutlimit
Sets the length of time that the information is valid, measured in secods. The default is 86400 seconds
(24 hours).
-test
Prints information about the server startup and then exits.
-conffile
Reads option from the file file. The options must be present one per line in the format -option[=value]
where the value part must obviously be present only if it is required.
-uriuri
Defines the uri of the server that will be included in the generated pseudo certificate. The default
value is hostname:port
-version
Prints information about the server and then exits.
-codec-globusversion
These options are obsolete and only present for backwards compatibility with old installations.
Currently, their values are ignored. Do not specify them in new installations.
-logtypetype
Sets the type of messages that will be loggged. Acceptable values are:
• 1 - STARTUP, print startup messages.
• 2 - REQUEST, print messages during the request interpretation phase.
• 4 - RESULT, print messages during the result sending phase.
This values can be ORed together to indicate that all the corresponding types of messages are required.
The default values is 255.
-loglevellev
Sets the level of verbosity of log messages. Acceptable values are:
• 1 - LEV_NONE, do not log anything.
• 2 - LEV_ERROR, the default, logs only error conditions.
• 3 - LEV_WARNINGS, logs also warning messages.
• 4 - LEV_INFO, logs also general informational messages.
• 5 - LEV_DEBUG, logs also a lot of debug messages. Setting this level of verbosity overwrites the
value of the -logtype option to 255.
Higher values include all messages printed by lower ones, and values not documented here are translated
as the highest level possible, LEV_DEBUG
-logformatstr
Sets the format used by the logging system according to a printf-like format string with the following
directives format: \%[size][char] where size, if present, sets the maximum length of the field and char
selects the type of substitution done. Possible values are the following:
• % - Substitutes a plain '%'.
• d - Substitutes the date. The date format is specified by the -logdateformat option.
• f - Substitutes the name of the source file that logs the message.
• F - Substitutes the name of the function that logs the message.
• h - Substitutes the hostname of the machine hosting the service.
• l - Substitutes the line number that logs the message.
• m - Substitutes the message proper.
• p - Substitutes the process' pid.
• s - Substitutes the service name ("vomsd").
• t - Substitutes the number of the message type. (see the -logtype option)
• T - Substitutes the name of the message type. (see the -logtype option)
• v - Substitutes the number of the message level. (see the -loglevel option)
• V - Substitutes the name of the message level. (see the -loglevel option)
The default value for this options is: "%d:%h:%s(%p):%V:%T:%F (%f:%l):%m"
-logdateformatstr
This option sets the format used to print the date. The format is the same used by the strftime(3)
function, and its default value is: "%c".
-debug
This option puts the server into debug mode. This mode automatically implies -loglevel5. Also, this
option hurts scalability and is not suggested in a production environment
-sqlloc/path/file
This option specifies the full path for the DB access library. Please note that there is no default for
this option!
-socktimeoutnum
This option sets the amount of time, in seconds, after which the server will drop an inactive connection.
The default is 60 seconds.
-maxlognum
This options sets the maximum size of a log file. Please note that this size is approximate, and may be
exceeded by a few thousand bytes. In any case, when the specified amount is surpassed, logfiles are
rotated. The default is 10Mb
-newformat
This forces the server to generate ACs in the new (correct) format. This is meant as a compatibility
feature to ease migration while the servers upgrade to the new version.
-skipcacheck
This option, if specified, forces voms to drop some of the checks done as the authorization step before
AC creation. Specifically, voms will no longer be capable of distinguishing to certificates with the same
DN but different issuers. For obvious reasons, use of this option is discouraged. Note also that
activating this option requires a previous check by the voms server administrator that there are no
certificates registered in the DB which the same DN and different issuers. If there are, the result of a
voms-proxy-init command for one of those users will be unpredictable.
-contactstringcontact
This string specifies information on how to contact the DB server. Its exact meaning depends on the DB
backend used. For MySQL it is the hostname of the MySQL server, and it defaults to 'localhost'. For
Oracle it is the contactstring of the DB. However, for oracle it is better to put what whould be the
argument of this string into the 'tnsnames.ora' file and ignore this option,
-mysql-portport
This option specified the port on which the MySQL server is listening if it is different from its 3306
default. This value is ignored for Oracle backends.
-mysql-socketsocket
MySQL servers may be configured to allow access through a unix-level socket. This option allows one to
specify this method of contact. However, it is almost always better to contact the server through the
port. This option is ignored for Oracle backends.
-shortfqans
This option instructs the server to always generate FQANs in their short form, i.e. without the
/Role=NULL and /Capability=NULL parts. Successive server version will make this behaviour the default,
and provide a -noshortfqans option to fallback to the longer format. Specifying this option is
recommended.
-syslog
This option allows log messages to be sent to syslog.
-base64
This option instructs the server to use the base64 encoding for its messages, rather than the in-house
encoding. This option will be made the default in future versions and -nobase64 will be provided to
fallback to the inhouse encoding. Specifying this option is recommended.
-nologfile
This option disables logging on the voms specific logfile. Please note that specifying this option
without at the same time specifying -syslog implies that no logging will take place.