User Interface installation and configuration
description
Transcript of User Interface installation and configuration
Fourth EELA Tutorial for Managers and Users
www.eu-eela.org
E-infrastructure shared between Europe and Latin America
User Interface installation and configuration
Yubiryn RamírezULA – Mérida - VenezuelaFourth EELA Tutorial for Managers and UsersMexico City, 28 August – 01 September 2006
Fourth EELA Tutorial, México City, 28 August - 01 September 2006 2
E-infrastructure shared between Europe and Latin America
Outline
• What is a UI?
• Installing User Interface– Installation pre-requisites– Security pre-requisites– site-info.def– UI Installation and Configuration– Default VO
• Testing User Interface
Fourth EELA Tutorial, México City, 28 August - 01 September 2006 3
E-infrastructure shared between Europe and Latin America
What is a UI?
• The UI is a suite of clients and API that users and applications can use to access the gLite services.
• The gLite UI includes the following components:
– VOMS command-line tools– Workload Management System clients and APIs– Logging and Bookkeeping clients and APIs– Data Transfer command-line clients and APIs– Data Catalog command-line clients and APIs– gLite I/O client and APIs– R-GMA client and APIs
Fourth EELA Tutorial, México City, 28 August - 01 September 2006 4
E-infrastructure shared between Europe and Latin America
Installing User Interface
Fourth EELA Tutorial, México City, 28 August - 01 September 2006 5
E-infrastructure shared between Europe and Latin America
Pre-requisites (1)
• Start from a fresh install of SLC 3.0.x
• Verify that apt is installed and properly configured– Install apt if necessary:
rpm -ivh http://linuxsoft.cern.ch/cern/slc30X/i386/SL/RPMS/apt-0.5.15cnc6-8.SL.cern.i386.rpm
• Extra packages needed (non freely distributable) :– Sun Java SDK >= 1.4.2_08 from :
http://java.sun.com/j2se/1.4.2/download.html
Fourth EELA Tutorial, México City, 28 August - 01 September 2006 6
E-infrastructure shared between Europe and Latin America
Pre-requisites (2)
• Install ntp if not already available for your system:apt-get install ntp
• Add your time server in /etc/ntp.confrestrict 193.206.144.10 mask 255.255.255.255 nomodify notrap
noquery server ntp-1.infn.it
• Edit /etc/ntp/step-tickers adding your(s) time server(s) hostname
• If you are running a firewall, you will have to allow inbound comminication on the NTP port:-A INPUT -s <NTP-serverIP-1> -p udp --dport 123 -j ACCEPT
• Activate the ntpd service with the following commands:ntpdate cronos.cenam.mx service ntpd startchkconfig ntpd on
• You can check ntpd’s status with:
ntpq -p
Fourth EELA Tutorial, México City, 28 August - 01 September 2006 7
E-infrastructure shared between Europe and Latin America
Pre-requisites (3)
• Add gLite apt repository – Create the file glite.list in the /etc/apt/sources.list.d directory and put
this row on it:rpm http://glitesoft.cern.ch/EGEE/gLite/APT/R1.4/ rhel30 externals Release1.4 updates
• Update apt repositoryapt-get update apt-get upgrade
• Install glite-yaim-3.0.0 rpm http://glitesoft.cern.ch/EGEE/gLite/APT/R3.0/rhel30/RPMS.Release3.0/glite-yaim-3.0.0
• Install gilda_ig-yaim-3.0.0 rpm http://grid018.ct.infn.it/apt/gilda_app-i386/utils/gilda_ig-yaim-3.0.0
Fourth EELA Tutorial, México City, 28 August - 01 September 2006 8
E-infrastructure shared between Europe and Latin America
Security pre-requisites
• Request a X509 host certificate for the User Interface you are going to install from a Certification Autority (CA). For example, to get host certificates from the GILDA CA, go to: https://gilda.ct.infn.it/CA/mgt/restricted/srvreq.php
• Install host certificates (hostcert.pem and hostkey.pem) in /etc/grid-security chmod 644 hostcert.pemchmod 400 hostkey.pem
• If you plan to use certificates released by unsupported EGEE CA’s, be sure that their public key, signing policy and CRLs (usually distributed with an rpm) are installed in /etc/grid-security/certificates
– For the VO GILDA, the RPM is available from https://gilda.ct.infn.it/RPMS/ca_GILDA-1.0-2.i386.rpm
Fourth EELA Tutorial, México City, 28 August - 01 September 2006 9
E-infrastructure shared between Europe and Latin America
site-info.def (1)
• Copy the yaim configuration template file:
cp /opt/glite/yaim/examples/gilda_ig-site-info.def /root/my-site-info.def
• Open /root/my-site-info.def file using a text editor and set the following values according to your grid environment:
MY_DOMAIN=super.unam.mxCE_HOST=gilda-ce.eela.ifufrj.brRB_HOST=glite-rb.ct.infn.itWMS_HOST=eela-138.$MY_DOMAINPX_HOST=grid001.ct.infn.itBDII_HOST=eela-136.$MY_DOMAINMON_HOST=rgmasrv.ct.infn.itFTS_HOST=fts.$MY_DOMAINREG_HOST=rgmasrv.ct.infn.it
Fourth EELA Tutorial, México City, 28 August - 01 September 2006 10
E-infrastructure shared between Europe and Latin America
site-info.def (2)
• Set the repositories:
OS_REPOSITORY="rpm http://eela-136.super.unam.mx/rep slc306-i386 os updates extras"
LCG_REPOSITORY="rpm http://eela-136.super.unam.mx/rep glite_sl3-i386 3_0 3_0_externals 3_0_updates"
IG_REPOSITORY="rpm http://eela-136.super.unam.mx/rep ig_sl3-i386 3_0_0 utils"
GILDA_REPOSITORY="rpm http://eela-136.super.unam.mx/rep gilda_app-i386 app 3_0_0"
CA_REPOSITORY="rpm http://eela-136.super.unam.mx/rep glite_sl3-i386 security"
Fourth EELA Tutorial, México City, 28 August - 01 September 2006 11
E-infrastructure shared between Europe and Latin America
site-info.def (3)
• Add LFC settings:
LFC_HOST=eela-131.$MY_DOMAIN
• Check/Modify VO and VOMS specific configurations:
VOS=“gilda alice eumed eela euchina …
ALL_VOS=“gilda alice eumed eela euchina …
ALL_VOMS=“gilda alice eumed eela euchina …
#Specific VO settings
VO_<VONAME>_<CONFIG_ITEM>=…
Fourth EELA Tutorial, México City, 28 August - 01 September 2006 12
E-infrastructure shared between Europe and Latin America
UI Installation and Configuration
• Install the UI:
/opt/glite/bin/gilda_ig_install_node /root/my-site-info.def GILDA_ig_UI
This command will download and install all the needed packages
• Configure the UI:
/opt/glite/bin/gilda_ig_configure_node /root/my-site-info.def GILDA_ig_UI
Fourth EELA Tutorial, México City, 28 August - 01 September 2006 13
E-infrastructure shared between Europe and Latin America
!WARNING! Due to a bug on VOMS RPM
Please verify the content of file:
/opt/glite/etc/vomses/gilda-voms.ct.infn.it
It must be:
"gilda" "voms.ct.infn.it" "15001" "/C=IT/O=GILDA/OU=Host/L=INFN Catania/CN=voms.ct.infn.it/[email protected]" "gilda“
Fourth EELA Tutorial, México City, 28 August - 01 September 2006 14
E-infrastructure shared between Europe and Latin America
Default VO
• You can set the default Virtual Organization for user accessing your UI editing the file /opt/glite/etc/glite_wmsui_cmd_var.conf
[ ErrorStorage = "/tmp/glite/glite-ui" ; DefaultLogInfoLevel = 1 ; LoggingTimeout = 10 ; rank = - other.GlueCEStateEstimatedResponseTime ; NSLoggerLevel = 1 ; LoggingSyncTimeout = 10 ; DefaultVo = "gilda" ; Set your default VO here OutputStorage = "/tmp/glite/glite-ui" ; ListenerStorage = "/tmp/glite/glite-ui" ; RetryCount = 3 ; DefaultStatusLevel = 1 ; requirements = other.GlueCEStateStatus ==
"Production" ;]
Fourth EELA Tutorial, México City, 28 August - 01 September 2006 15
E-infrastructure shared between Europe and Latin America
Testing User Interface
Fourth EELA Tutorial, México City, 28 August - 01 September 2006 16
E-infrastructure shared between Europe and Latin America
• Create user account# adduser <your surname># passwd <your surname>
• Log on with user account # su – gildauser
• Create .globus directory# mkdir .globus
• Copy your own certificates to the UI in directory .globus
• Verify permissions of the certificates# chmod 400 userkey.pem# chmod 644 usercert.pem
•
Fourth EELA Tutorial, México City, 28 August - 01 September 2006 17
E-infrastructure shared between Europe and Latin America
References
• gLite v3.0 Advanced Installation and Configuration Guide– http://glite.web.cern.ch/glite/packages/R3.0/R20060502/doc/
installation_guide_3.0-2.html
• Gilda site install instructions– https://gilda.ct.infn.it/docs/GILDAsiteinstall-3_0_0.html
Fourth EELA Tutorial, México City, 28 August - 01 September 2006 18
E-infrastructure shared between Europe and Latin America
Questions …