gLite 3.00 User Interface Installation and configuration

Riccardo Bruno - INFNSevilla, 10-14 September 2007

2

Outline

• What is a User Interface (UI) ?

• How to install and configure a User Interface

3

What is a UI?

• The UI is a suite of clients and APIs that users and applications can use to access the gLite services

• The gLite UI includes the following components:

– VOMS command-line tools – Workload Management System clients and APIs – Logging and Bookkeeping clients and APIs – Data Transfer command-line clients and APIs – Data Catalog command-line clients and APIs – gLite I/O client and APIs – R-GMA/BDII client and APIs

4

• Installing and configuring User Interface (UI)

5

Installation pre-requisites

• Start from the base machine you installed in the INTRODUCTORY tutorial for site admin

• Verify that all pre-requisites are successfully installed

Java SDK (j2sdk-1_4_2_14)(http://java.sun.com/j2se/1.4.2/download.html)(http://sunsite.rediris.es/mirror/grid.infn.it/java/j2sdk-1_4_2_14-linux-i586-rpm.bin)

glite-yaim-3.0.0(http://www.cern.ch/grid-deployment/gis/yaim/)(http://sunsite.rediris.es/mirror/grid.infn.it/gilda/glite-yaim-latest.rpm)

gilda_ig-yaim-3.0.0(http://grid018.ct.infn.it/rep/gilda_app-i386/RPMS/?C=M;O=D)(http://sunsite.rediris.es/mirror/grid.infn.it/gilda/gilda_ig-yaim-

latest.rpm)

Please look for latest releases of both yaim and gilda_ig-yaim.

6

Installation pre-requisites 1/3

• Copy the yaim configuration template file into the root dir:

#cp /opt/glite/yaim/examples/siteinfo/gilda_ig-site-info.def \ /root/my-site-info.def

• Open /root/my-site-info.def file using a text editor and check/modify the following items:

MY_DOMAIN=cica.esCE_HOST=grid010.ct.infn.it

RB_HOST=glite-rb.ct.infn.it

WMS_HOST=glite-rb.ct.infn.it

PX_HOST=grid001.ct.infn.it

BDII_HOST=grid004.ct.infn.it

MON_HOST=rgmasrv.ct.infn.it

FTS_HOST=fts.ct.infn.it

AMGA_HOST=amga.ct.infn.it

REG_HOST=rgmasrv.ct.infn.it

NTP_HOSTS_IP="130.206.1.3“

…

JAVA_LOCATION=“/usr/java/j2sdk1.4.2_14”

7

Installation pre-requisites 2/3

• Setup the proper GILDA repository

Change the string: http://grid018.ct.infn.it/rep(*) with: http://sunsite.rediris.es/mirror/grid.infn.it/rep on:

OS_REPOSITORY="rpm (*) slc306-i386 os updates extras"LCG_REPOSITORY="rpm (*) glite_sl3-i386 3_0_0 3_0_0_externals 3_0_0_updates"IG_REPOSITORY="rpm (*) ig_sl3-i386 3_0_0 utils"GILDA_REPOSITORY="rpm (*) gilda_app-i386 app 3_0_0"CA_REPOSITORY="rpm (*) glite_sl3-i386 security“

Check/Modify VO/VOMS and VO specific configurations:VOS=“gilda alice eumed eela euchina …ALL_VOS=“gilda alice eumed eela euchina …ALL_VOMS=“gilda alice eumed eela euchina …

#Specific VO settings

VO_<VONAME>_<CONFIG_ITEM>=……

8

Installation pre-requisites 3/3

• Site configuration settings

# Site-wide settings

SITE_EMAIL=grid-prod@ct.infn.it # customize here

SITE_NAME=INFN-CATANIA # customize here

SITE_LOC="Catania, Italy" # customize here

SITE_LAT=37.5 # customize here

SITE_LONG=15.152 # customize here

SITE_WEB="http://grid.ct.infn.it" # customize here

SITE_TIER="GILDA Testbed"

SITE_SUPPORT_SITE="grid-prod@ct.infn.it" # customize here

9

Install and configure UI

• We are now ready to install the UI:

/opt/glite/bin/gilda_ig_install_node /root/my-site-info.def GILDA_ig_UI

• This command will download and install all the needed packages:

• Now we can configure the node:

/opt/glite/bin/gilda_ig_configure_node /root/my-site-info.def GILDA_ig_UI

10

Add a user into the UI

Use the Unix commands:

# passwd gildauser

Log on it with:

# su – gildauser (from root)

# adduser gildauser (or any other user name)

# exit

… or type:

Then logon with the new user

11

Certificate handling 1/2

Copy your own certificates to the UI:

# scp -rp <madridXX>@glite-tutor.ct.infn.it:.globus .

Verify permissions of the certificates; they must be:

-r------- 1 gildauser gildauser 1169 Jun 15 11:03 userkey.pem-rw-r—r-- 1 gildauser gildauser 1326 Jun 15 11:03 usercert.pem

If file permissions are wrong use:

# chmod 400 userkey.pem# chmod 644 usercert.pem

12

Certificate handling 2/2

Certificates must be in .globus directory:

# mkdir .globus# mv *.pem .globus/

How to use more then one certificates:

1) Use a separate account for each certificate

2) Use a symbolic link .globus to different certificate directories# mkdir .globus_EUMED# mv *.pem .globus_EUMED/ (EUMED usercert/userkey)# mkdir .globus_GILDA# mv *.pem .globus_GILDA/ (GILDA usercert/userkey)

Switch to the EUMED VO with:

Create the link with:# ln –s .globus_GILDA .globus

# ln –sf .globus_EUMED .globus

13

References

• gLite v3.0 Adv. Installation and Configuration Guide:http://glite.web.cern.ch/glite/packages/R3.0/R20060502/doc/installation_guide_3.0-2.html

• Gilda site install instructions:https://gilda.ct.infn.it/docs/GILDAsiteinstall-3_0_0.html

14

Questions…