myproxy-change-pass-phrase(1)

💖 myproxy-change-pass-phrase 💖

okay bestie, so this one is a page from the MyProxy manual, section 1, and it's all about the myproxy-change-pass-phrase command. yes, the title is literally that long. we move. 🎀

✨ NAME ✨

myproxy-change-pass-phrase — change MyProxy passphrase

🦋 SYNOPSIS 🦋

myproxy-change-pass-phrase [ options ]

🌸 DESCRIPTION 🌸

so the myproxy-change-pass-phrase command does exactly one iconic thing: it changes the passphrase that a credential is protected under in the MyProxy repository. glow up for your secret words, honestly. 💅

here's the lil ritual it runs you through:

1. it prompts you for the current passphrase for the credential
2. then it prompts twice for the new passphrase

and no, only the credential owner can change a credential's passphrase. not your friend, not your group chat, not that one person who swears they know your password. just you. 👑

also, when you run this command, you have to have a valid proxy credential — either one generated by grid-proxy-init, or one retrieved by myproxy-logon(1). no proxy, no passphrase change, periodt.

💅 OPTIONS 💅

• -h, --help — shows you the command usage text and then dips out. bye! ✌️
• -u, --usage — also shows the command usage text and exits. yes it's basically the same vibe as -h, they're both here, we don't question it. 😌
• -v, --verbose — turns on verbose debugging output straight to your terminal. so you can watch everything happen in real time, main character energy. 🔥
• -V, --version — displays version info and exits. cute, quick, done.
• -s hostname[:port], --pshost hostname[:port] — tells you the hostname(s) of the myproxy-server(s). you can list multiple hostnames in a comma-separated list, and each hostname can optionally have a ':' and a port number tacked on. this option is required if the MYPROXY_SERVER environment variable isn't defined. if you do specify it, it overrides MYPROXY_SERVER. and if you put a port number next to a hostname, that port overrides the -p option and the MYPROXY_SERVER_PORT environment variable for that host. so much power. ⭐
• -p port, --psport port — sets the TCP port number of the myproxy-server(8). Default: 7512. noted, memorized, iconic.
• -l username, --username username — specifies the MyProxy account the credential should be stored under. by default the command just uses whatever's in the LOGNAME environment variable. use this option when you wanna specify a different account username on the MyProxy server. and heads up: the MyProxy username does not have to match a real Unix username. it's free like that. 🦋
• -d, --dn_as_username — uses the certificate subject (DN) as the default username instead of the LOGNAME environment variable. plot twist!
• -k name, --credname name — specifies the credential name. name your credential, bestie, it deserves one. 🎀
• -S, --stdin_pass — by default the command prompts for a passphrase and reads it from the active tty. but when you're running this non-interactively, there might be no associated tty at all. so this option tells the command to read passphrases from standard input, with no prompts and no confirmation. heads up: no confirmation means no double-checking, so know what you're typing. 💀

🌈 EXIT STATUS 🌈

• 0 on success ✨
• >0 on error 😭

💜 ENVIRONMENT 💜

• GLOBUS_GSSAPI_NAME_COMPATIBILITY — by default, this client does a reverse-DNS lookup to figure out the FQHN (Fully Qualified Host Name), and uses it to verify the identity of the server by checking that FQHN against the CN in the server's certificate. if you set this variable to STRICT_RFC2818, the reverse-DNS lookup will NOT be performed, and the user-specified name gets used instead. important: this variable setting is ignored if MYPROXY_SERVER_DN (described below, keep reading) is set. 👀
• MYPROXY_SERVER — specifies the hostname(s) where the myproxy-server(8) is running. you can list multiple hostnames in a comma-separated list, each one optionally followed by a ':' and a port number. this env var can be used in place of the -s option. slay, options.
• MYPROXY_SERVER_PORT — specifies the port where the myproxy-server(8) is running. this env var can be used in place of the -p option.
• MYPROXY_SERVER_DN — specifies the distinguished name (DN) of the myproxy-server(8). every MyProxy client program authenticates the server's identity. by default, the MyProxy client programs expect the server to have a distinguished name with "/CN=host/<fqhn>" or "/CN=myproxy/<fqhn>" or "/CN=<fqhn>" (where <fqhn> is the fully-qualified hostname of the server). if your server is running with some other DN, you can set this environment variable to tell the MyProxy clients to accept that alternative DN. also see GLOBUS_GSSAPI_NAME_COMPATIBILITY above, they're linked, iykyk. 🔗
• MYPROXY_TCP_PORT_RANGE — specifies a range of valid port numbers in the form "min,max" for the client side of the network connection to the server. by default, the client will bind to any available port. use this env var to restrict the ports used to a range that your firewall allows. if it's unset, MyProxy follows the setting of the GLOBUS_TCP_PORT_RANGE environment variable instead. firewall besties, this one's for you. 🧚
• X509_USER_CERT — specifies a non-standard location for the certificate used for authentication to the myproxy-server(8).
• X509_USER_KEY — specifies a non-standard location for the private key used for authentication to the myproxy-server(8).
• X509_USER_PROXY — specifies a non-standard location for the proxy credential used for authentication to the myproxy-server(8).
• X509_CERT_DIR — specifies a non-standard location for the CA certificates directory.

👑 AUTHORS 👑

see http://grid.ncsa.illinois.edu/myproxy/about for the list of MyProxy authors. credit where credit is due, fr fr. 🫶

⭐ SEE ALSO ⭐

myproxy-destroy(1), myproxy-get-trustroots(1), myproxy-info(1), myproxy-init(1), myproxy-logon(1), myproxy-retrieve(1), myproxy-store(1), myproxy-server.config(5), myproxy-admin-adduser(8), myproxy-admin-change-pass(8), myproxy-admin-load-credential(8), myproxy-admin-query(8), myproxy-server(8)

go read them all, bestie, they're the whole friend group. 🌸

and that's the whole page, gorgeous. this one's from MyProxy, dated 2009-12-1, and yes it's still serving myproxy-change-pass-phrase(1) realness. change those passphrases, stay safe, drink water. 💖✨🎀🦋