EGI-InSPIRE RI EGI Training for AEGIS Site Administrators EGI-InSPIRE N G I A E G I S EGI Training for AEGIS Site Administrators Institute of Physics Belgrade EGI-InSPIRE RI EGI Training for AEGIS Site Administrators User Interface (UI) Nikola Grkic Institute of Physics Belgrade Serbia 07/03/2011 Strahinja Kustudic Faculty of Electric Engineering, Belgrade Serbia

EGI-InSPIRE RI EGI Training for AEGIS Site Administrators gLite UI List all the resources suitable to execute a given job Submit jobs for execution Cancel jobs Retrieve the output of finished jobs Show the status of submitted jobs Retrieve the logging and bookkeeping information of jobs Copy, replicate and delete files from the Grid Retrieve the status of different resources from the Information System

EGI-InSPIRE RI EGI Training for AEGIS Site Administrators Configure ntp First thing we should do is setup ntp: # Example of configuration file /etc/ntp.conf can be found on # vim /etc/ntp.conf # Create /etc/ntp.drift and /etc/ntp.drift.TEMP files that # should be owned by ntp.ntp: touch /etc/ntp.drift /etc/ntp.drift.TEMP chown ntp.ntp /etc/ntp.drift /etc/ntp.drift.TEMP # Set ntp daemon to launch on system startup chkconfig ntpd on # Start ntp service (if it’s not started) service ntpd restart # Example of configuration file /etc/ntp.conf can be found on # vim /etc/ntp.conf # Create /etc/ntp.drift and /etc/ntp.drift.TEMP files that # should be owned by ntp.ntp: touch /etc/ntp.drift /etc/ntp.drift.TEMP chown ntp.ntp /etc/ntp.drift /etc/ntp.drift.TEMP # Set ntp daemon to launch on system startup chkconfig ntpd on # Start ntp service (if it’s not started) service ntpd restart

EGI-InSPIRE RI EGI Training for AEGIS Site Administrators Repository Configuration Add scl-glite-UI.repo and egi-trustanchors.repo repositories to /etc/yum.repos.d/ # cd to /etc/yum.repos.d/ cd /etc/yum.repos.d/ # Download the latest version of the scl-glite-UI.repo wget # Download the latest version of the egi-trustanchors.repo wget # cd to /etc/yum.repos.d/ cd /etc/yum.repos.d/ # Download the latest version of the scl-glite-UI.repo wget # Download the latest version of the egi-trustanchors.repo wget

EGI-InSPIRE RI EGI Training for AEGIS Site Administrators Installing glite-UI Now we need to install lcg-CA and java compatibility packages: After this we can install glite-UI group: yum install lcg-CA yum install java sun-compat.x86_64 yum install lcg-CA yum install java sun-compat.x86_64 # First we need to enable the DAG repo by setting enabled to 1 vim /etc/yum.repos.d/dag.repo # (set enabled=1) # Install glite-UI yum groupinstall glite-UI # Disable the DAG repo, since it’s not needed anymore vim /etc/yum.repos.d/dag.repo # (set enabled=0) # First we need to enable the DAG repo by setting enabled to 1 vim /etc/yum.repos.d/dag.repo # (set enabled=1) # Install glite-UI yum groupinstall glite-UI # Disable the DAG repo, since it’s not needed anymore vim /etc/yum.repos.d/dag.repo # (set enabled=0)

EGI-InSPIRE RI EGI Training for AEGIS Site Administrators Configuring Yaim After you configured groups.conf, site- info.def, users.conf, wn-list.conf and vo.d # Append /opt/glite/yaim/bin to the PATH # variable in ~/.bash_profile, so it looks like this: # PATH=$PATH:$HOME/bin:/opt/glite/yaim/bin vim ~/.bash_profile # Append /opt/glite/yaim/bin to the PATH # variable in ~/.bash_profile, so it looks like this: # PATH=$PATH:$HOME/bin:/opt/glite/yaim/bin vim ~/.bash_profile # Now start yaim with the following arguments # so it configures glite-UI: yaim -c -s /site-info.def -n glite-UI # Now start yaim with the following arguments # so it configures glite-UI: yaim -c -s /site-info.def -n glite-UI

EGI-InSPIRE RI EGI Training for AEGIS Site Administrators Check vomses If yaim finishes without any errors, you need to check if vomses are correct: # cd to /opt/glite/etc/vomses/ and check if all files have the # name of the institution written between a single pair of # quotes. If there are more quotes, delete them! cd /opt/glite/etc/vomses/ cat aegis-voms.ipb.ac.rs "aegis" "voms.ipb.ac.rs" "15001" "/C=RS/O=AEGIS/OU=Institute of Physics" "Belgrade/CN=host/voms.ipb.ac.rs" "aegis“ # Quotation marks colored in red need to be deleted. # cd to /opt/glite/etc/vomses/ and check if all files have the # name of the institution written between a single pair of # quotes. If there are more quotes, delete them! cd /opt/glite/etc/vomses/ cat aegis-voms.ipb.ac.rs "aegis" "voms.ipb.ac.rs" "15001" "/C=RS/O=AEGIS/OU=Institute of Physics" "Belgrade/CN=host/voms.ipb.ac.rs" "aegis“ # Quotation marks colored in red need to be deleted.

EGI-InSPIRE RI EGI Training for AEGIS Site Administrators Public and Private Keys Create usercert.pem and userkey.pem from your signed certificate and copy to ~/.globus: # Go to your home folder and make a.globus directory: cd mkdir.globus # Generate your public key: openssl pkcs12 -clcerts -nokeys -in ~/YOUR_CERT.p12 -out usercert.pem # Generate your private key: openssl pkcs12 -nocerts -in ~/YOUR_CERT.p12 -out userkey.pem # Only you should be able to read your private key chmod 400 userkey.pem # Everyone should be able to read your public key chmod 644 usercert.pem # Go to your home folder and make a.globus directory: cd mkdir.globus # Generate your public key: openssl pkcs12 -clcerts -nokeys -in ~/YOUR_CERT.p12 -out usercert.pem # Generate your private key: openssl pkcs12 -nocerts -in ~/YOUR_CERT.p12 -out userkey.pem # Only you should be able to read your private key chmod 400 userkey.pem # Everyone should be able to read your public key chmod 644 usercert.pem

EGI-InSPIRE RI EGI Training for AEGIS Site Administrators Does It Work? Now that we added our user keys, we can test if everything works correctly: # You need to import /opt/glite/etc/profile.d/grid-env.sh source /opt/glite/etc/profile.d/grid-env.sh # or you can append that to your ~/.bash_profile so it will # import every time you login echo "source /opt/glite/etc/profile.d/grid-env.sh" >> ~/.bash_profile # Try to do a voms-proxy-init for your VO: voms-proxy-init --voms aegis # Check if it has been created correctly: voms-proxy-info -all # You need to import /opt/glite/etc/profile.d/grid-env.sh source /opt/glite/etc/profile.d/grid-env.sh # or you can append that to your ~/.bash_profile so it will # import every time you login echo "source /opt/glite/etc/profile.d/grid-env.sh" >> ~/.bash_profile # Try to do a voms-proxy-init for your VO: voms-proxy-init --voms aegis # Check if it has been created correctly: voms-proxy-info -all

EGI-InSPIRE RI EGI Training for AEGIS Site Administrators Links