Elisa Ingrà Consortium GARR- Roma elisa.ingra@ct.infn.it gLite UI Installation Elisa Ingrà Consortium GARR- Roma elisa.ingra@ct.infn.it

Preliminaries The instructions provided in this presentation assume that you are going to use a machine with Scientific Linux 5.4 installed. Virtual Machine image (GILDA VM Base_SLC5.4_x86_64) available at: https://gilda.ct.infn.it/VirtualServices.html

ssh root@ceristxx. grid. arn. dz XX = 31, 32, 33, … ssh root@ceristxx.grid.arn.dz XX = 31, 32, 33, ….., 41, 42, 43 Password: gridvm

REPOS="dag ig glite-generic lcg-ca glite-ui" Repository settings Specify the mrepo host: export MREPO=http://wn03.grid.arn.dz/repos/SL5/ Configure the repository as follows: REPOS="dag ig glite-generic lcg-ca glite-ui" Get repositories with: for name in $REPOS; do wget $MREPO/$name.repo -O /etc/yum.repos.d/$name.repo; done Copy the gilda utils (ATTENTION PLEASE: DON’T MAKE THE FOLLOWING FOR YOUR SITE IT’S JUST FOR THE TEST INSTALLATION!) wget http://grid018.ct.infn.it/mrepo/repos/gilda.repo -O /etc/yum.repos.d/gilda.repo To get a full mirror of GILDA repository: wget -mp -nH -np http://grid018.ct.infn.it/mrepo/ Follows a brief explanations of the used parameters: -m This option is used to make mirrors. This means that the next time the command will be issued it will download just the updated files rather than the whole site again. -p It will include other elements like images to correctly show the mirrored web pages -nH This command avoids to create the subdirectories: ‘grid018.ct.infn.it/rep’ onthe destination Follows a brief explanations of the used parameters:-mThis option is used to make mirrors. This means that the next time the command will be issued it will download just the updated files rather than the whole site again.-pIt will include other elements like images to correctly show the mirrored web pages -nHThis command avoids to create the subdirectories: ‘grid018.ct.infn.it/rep’ onthe destination Then replace baseurl filed in any .repo file inside repos/ directorty #!/bin/bash # # Change repo host MREPO_FROM=http://grid018.ct.infn.it/mrepo MREPO_TO=http://grid-test-54.trigrid.it/mrepo MREPO_FROM_ESCAPE=$(echo $MREPO_FROM | sed s/'\/'/'\\\/'/g) MREPO_TO_ESCAPE=$(echo $MREPO_TO | sed s/'\/'/'\\\/'/g) for repo in $(ls -1 *.repo) do echo $repo mv $repo $repo.todo cat $repo.todo | sed s/"${MREPO_FROM_ESCAPE}"/"${MREPO_TO_ESCAPE}"/g > $repo rm -f $repo.todo done

System requirements Check if exists the ntp service otherwise install that: yum install ntp Please check: If you have a valid hostname To verify, type: hostname -f To edit the hostname: Then update your host: yum clean all vim /etc/hosts vim /etc/hostname vim /etc/sysconfig/network hostname <pc_name>

yum groupinstall ig_UI_noafs yum install gilda_utils Install CAs on ALL profiles: yum install lcg-CA Metapackage installation: yum groupinstall ig_UI_noafs Gilda utils: (ATTENTION PLEASE: DON’T MAKE THE FOLLOWING FOR YOUR SITE IT’S JUST FOR THE TEST INSTALLATION!) yum install gilda_utils

INFN Grid UI metapackage http://igrelease.forge.cnaf.infn.it/doku.php?id=doc:guides:install-3_2

site-info.def Copy the ig-site-info.def script template Open your own site-info.def and customize it: cp /opt/glite/yaim/examples/siteinfo/ig-site-info.def /opt/glite/yaim/examples/siteinfo/mysite-info.def vi /opt/glite/yaim/examples/siteinfo/mysite-info.def

ONLY FORT TESTING INSTALLATION Setup site-info.def ONLY FORT TESTING INSTALLATION RB_HOST=glite-rb.ct.infn.it BDII_HOST=gilda-bdii.ct.infn.it WMS_HOST=gilda-wms-01.ct.infn.it LB_HOST="gilda-lb-01.ct.infn.it:9000" PX_HOST=myproxy.ct.infn.it LFC_HOST=lfc-gilda.ct.infn.it DPM_HOST=aliserv6.ct.infn.it JAVA_LOCATION=/usr/lib/jvm/java-1.6.0-openjdk-1.6.0.0.x86_64/jre !(please verify if the JAVA_LOCATION is correct) which java RB_HOST=glite-rb.ct.infn.it WMS_HOST=gilda-wms-01.ct.infn.it LB_HOST="gilda-lb-01.ct.infn.it:9000” PX_HOST=myproxy.ct.infn.it LFC_HOST=lfc-gilda.ct.infn.it JAVA_LOCATION=/usr/java/jdk1.5.0_14

ONLY FORT TESTING INSTALLATION Add GILDA Settings ONLY FORT TESTING INSTALLATION VOS="gilda"  Add gilda here [..] ######### # gilda # VO_GILDA_VOMS_CA_DN="/C=IT/O=INFN/OU=Host/L=Catania/CN=voms.ct.infn.it" VO_GILDA_SW_DIR=$VO_SW_DIR/gilda VO_GILDA_DEFAULT_SE=$DPM_HOST VO_GILDA_STORAGE_DIR=$CLASSIC_STORAGE_DIR/gilda VO_GILDA_VOMS_SERVERS="voms://voms.ct.infn.it:8443/voms/gilda?/gilda" VO_GILDA_VOMSES="gilda voms.ct.infn.it 15001 /C=IT/O=INFN/OU=Host/L=Catania/CN=voms.ct.infn.it gilda" ######## # gilda # VO_GILDA_SW_DIR=$VO_SW_DIR/gilda VO_GILDA_DEFAULT_SE=$DPM_HOST VO_GILDA_STORAGE_DIR=$CLASSIC_STORAGE_DIR/gilda VO_GILDA_VOMS_SERVERS="vomss://voms.ct.infn.it:8443/voms/gilda?/gilda" VO_GILDA_VOMSES="gilda voms.ct.infn.it 15001 /C=IT/O=INFN/OU=Host/L=Catania/CN=voms.ct.infn.it gilda"

EUMED Settings - Setup site-info.def BDII_HOST=wms-01.eumedgrid.eu (or your own if you have one) WMS_HOST=wms-01.eumedgrid.eu (or wms-4.dir.garr.it (or your own if you have one)) LB_HOST="wms-01.eumedgrid.eu:9000" (or your own if you have one) PX_HOST=myproxy.ct.infn.it LFC_HOST=lfc.ulakbim.gov.tr (or your own if you have one) DPM_HOST=torik1.ulakbim.gov.tr (or your own if you have one) JAVA_LOCATION=/usr/lib/jvm/java-1.6.0-openjdk-1.6.0.0.x86_64/jre !(please verify if the JAVA_LOCATION is correct) which java RB_HOST=glite-rb.ct.infn.it WMS_HOST=gilda-wms-01.ct.infn.it LB_HOST="gilda-lb-01.ct.infn.it:9000” PX_HOST=myproxy.ct.infn.it LFC_HOST=lfc-gilda.ct.infn.it JAVA_LOCATION=/usr/java/jdk1.5.0_14

Add EUMED Settings VOS="eumed"  Add eumed here ######### # eumed # VO_EUMED_SW_DIR=$VO_SW_DIR/eumed VO_EUMED_DEFAULT_SE=$SE_HOST VO_EUMED_STORAGE_DIR=$CLASSIC_STORAGE_DIR/eumed VO_EUMED_VOMS_SERVERS="'vomss://voms2.cnaf.infn.it:8443/voms/eumed?/eumed' 'vomss://voms-02.pd.infn.it:8443/voms/eumed?/eumed'" VO_EUMED_VOMSES="'eumed voms2.cnaf.infn.it 15016 /C=IT/O=INFN/OU=Host/L=CNAF/CN=voms2.cnaf.infn.it eumed' 'eumed voms-02.pd.infn.it 15016 /C=IT/O=INFN/OU=Host/L=Padova/CN=voms-02.pd.infn.it eumed'" VO_EUMED_VOMS_CA_DN="'/C=IT/O=INFN/CN=INFN CA' '/C=IT/O=INFN/CN=INFN CA'" VO_EUMED_WMS_HOSTS="prod-wms-01.pd.infn.it wms.ulakbim.gov.tr wms-01.eumedgrid.eu" ######## # gilda # VO_GILDA_SW_DIR=$VO_SW_DIR/gilda VO_GILDA_DEFAULT_SE=$DPM_HOST VO_GILDA_STORAGE_DIR=$CLASSIC_STORAGE_DIR/gilda VO_GILDA_VOMS_SERVERS="vomss://voms.ct.infn.it:8443/voms/gilda?/gilda" VO_GILDA_VOMSES="gilda voms.ct.infn.it 15001 /C=IT/O=INFN/OU=Host/L=Catania/CN=voms.ct.infn.it gilda"

/etc/init.d/ntpd status /etc/init.d/ntpd start Configuring UI for GILDA Update the date ntpdate ntp-1.infn.it /etc/init.d/ntpd status /etc/init.d/ntpd start Configure the UI with YAIM /opt/glite/yaim/bin/ig_yaim -c –s \ /opt/glite/yaim/examples/siteinfo/mysite-info.def -n ig_UI_noafs If everything is ok, the UI is now READY for testing YAIM does not configure the LFC_HOST variable; please edit the file /opt/glite/etc/profile.d/grid-env.sh and add the following for gilda: And the following for EUMED gridenv_set "LFC_HOST" "lfc-gilda.ct.infn.it" gridenv_set "LFC_HOST" "lfc.ulakbim.gov.tr"

Testing UI for GILDA Add a user Add a password Copy your personal certificate inside user .globus directory, for the testing installation you can use: [root@cerist30 ~]# adduser user01 [root@cerist30 ~]# su - user01 [gildauser01@cerist30 ~]$ passwd user01 [gildauser01@cerist30 ~]$ scp -rp algiers01@glite-tutor.ct.infn.it:.globus . The authenticity of host 'glite-tutor.ct.infn.it (193.206.208.141)' can't be est ablished. RSA key fingerprint is b0:82:de:f0:66:4c:2a:d7:47:c0:0a:b1:1e:e4:36:02. Are you sure you want to continue connecting (yes/no)? yes Warning: Permanently added 'glite-tutor.ct.infn.it,193.206.208.141' (RSA) to the list of known hosts. algiers01@glite-tutor.ct.infn.it's password:[GridALG01] usercert.pem 100% 1050 0.5KB/s 00:02 userkey.pem 100% 951 0.9KB/s 00:01 ALGIERS01.p12 100% 1749 0.9KB/s 00:02

Testing UI only for GILDA [root@cerist30 ~]# adduser gildauser01 [root@cerist30 ~]# su - gildauser01 [gildauser01@cerist30 ~]$ scp -rp algiers01@glite-tutor.ct.infn.it:.globus . The authenticity of host 'glite-tutor.ct.infn.it (193.206.208.141)' can't be est ablished. RSA key fingerprint is b0:82:de:f0:66:4c:2a:d7:47:c0:0a:b1:1e:e4:36:02. Are you sure you want to continue connecting (yes/no)? yes Warning: Permanently added 'glite-tutor.ct.infn.it,193.206.208.141' (RSA) to the list of known hosts. algiers01@glite-tutor.ct.infn.it's password:[GridALG01] usercert.pem 100% 1050 0.5KB/s 00:02 userkey.pem 100% 951 0.9KB/s 00:01 ALGIERS01.p12 100% 1749 0.9KB/s 00:02 [gildauser01@cerist30 ~]$ voms-proxy-init --voms gilda Enter GRID pass phrase: [ALGIERS] Your identity: /C=IT/O=GILDA/OU=Personal Certificate/L=ALGIERS/CN=ALGIERS01 Creating temporary proxy ............................................... Done Contacting voms.ct.infn.it:15001 [/C=IT/O=INFN/OU=Host/L=Catania/CN=voms.ct.inf n.it] "gilda" Done Creating proxy .............................................. Done Your proxy is valid until Mon Jun 28 23:14:43 2010

glite-wms-job-submit -a hostname.jdl Testing UI for GILDA OtherTests: Copy a jdl file: Submint a job: lfc-ls /grid scp -rp algiers01@glite-tutor.ct.infn.it:hostname.jdl . glite-wms-job-submit -a hostname.jdl

Testing UI for EUMED Installation For the real installation you have to export you personal certificate from web browser to the UI and than have a look at the following: ATTENTION USE eumed INSTEAD gilda Certificate management: https://grid.ct.infn.it/twiki/bin/view/GILDA/HowToConvertPkcs12ToPem Voms creation with extentions https://grid.ct.infn.it/twiki/bin/view/GILDA/AuthenticationAuthorization#Creation_of_a_proxy_with_voms_ex Job Submission https://grid.ct.infn.it/twiki/bin/view/GILDA/SimpleJobSubmission Data Management https://grid.ct.infn.it/twiki/bin/view/GILDA/DataManagement

References INFNGrid installation http://igrelease.forge.cnaf.infn.it/doku.php?id=doc:guides:install-3_2