WMS Installation and Configuration Introductions WMS Installation and Configuration Miguel Angel Díaz Corchero (miguelangel.diaz@ciemat.es) CETA-CIEMAT Asia 11 2011 - EPIKH School for Grid Site Administrators Amman , 21.11.2011

Check your host Vi /etc/hosts (for example) Start ntpd yum install ntp # Do not remove the following line, or various programs # that require network functionality will fail. 127.0.0.1 localhost.localdomain localhost 202.122.37.107 gilda01.ihep.ac.cn gilda01 Start ntpd yum install ntp chkconfig --list | grep ntp chkconfig --level 2345 ntpd on ntpdate ntp-1.infn.it service ntpd start

Repository settings 1) Disable DAG repositories. 2) Install the EPEL repository rpm -ivh http://download.fedora.redhat.com/pub/epel/5/x86_64/epel-release-5- 4.noarch.rpm 3) Install the EMI middleware repository wget http://emisoft.web.cern.ch/emisoft/dist/EMI/1/sl5/x86_64/base/emi-release- 1.0.0-1.sl5.noarch.rpm yum install ./emi-release-1.0.0-1.sl5.noarch.rpm 4) Install the Certification Authority repository wget http://repository.egi.eu/sw/production/cas/1/current/repo-files/EGI- trustanchors.repo -O /etc/yum.repos.d/EGI-trustanchors.repo

Install by yum WMS specific Installation: Install the metapackage: yum clean all yum install emi-wms (This is a trainning. We are not going to install all the CAs)

edit site-info.def Edit site-info.def: wget 10.248.251.140/mrepo/site-info.def -O /opt/glite/yaim/etc/site-info.def nano /opt/glite/yaim/etc/site-info.def Other fields have been configured before. Have a look to all the site-info.def chmod -c 755 /opt/glite/yaim/etc/site-info.def SITE_BDII_HOST=ce-xx BDII_HOST=bdii-xx LB_HOST=lb-xx WMS_HOST=wms-xx SE_LIST=se-xx CE_HOST=ce-xx MY_DOMAIN=xxxxxxxx

Other files to do the mapping Get users.conf: wget 10.248.251.140/mrepo/users.conf -O /opt/glite/yaim/etc//users.conf Get groups.conf: wget 10.248.251.140/mrepo/groups.conf -O /opt/glite/yaim/groups.conf Get host-certificates wget 10.248.251.140/mrepo/hostcert-xx.pem -O /etc/grid- security/hostcert.pem wget 10.248.251.140/mrepo/hostkey-xx.pem -O /etc/grid- security/hostkey.pem chmod 644 /etc/grid-security/hostcert.pem chmod 400 /etc/grid-security/hostkey.pem

Configure CA and VO Gilda provides a package with all the necessary Configure Certification Authority (CA) and Virtual Organization (VO): wget http://grid018.ct.infn.it/mrepo/repos/gilda.repo -O /etc/yum.repos.d/gilda.repo yum install gilda_utils Fixing the VO configuration 1 ) mkdir /etc/grid-security/vomsdir/gilda/ mv /etc/grid-security/vomsdir/voms.ct.infn.it.pem /etc/grid- security/vomsdir/gilda/ 2) mv /opt/glite/yaim/etc/gilda/vo.d /opt/glite/yaim/etc

Running Yaim /opt/glite/yaim/bin/yaim -c -s /opt/glite/yaim/etc/site-info.def -n WMS (Several ERRORS appear!! .... Next slide)

Running Yaim Let's fix hostname gildaXX.junet.jo Vi /etc/hosts /opt/glite/yaim/bin/yaim -c -s /opt/glite/yaim/etc/site-info.def -n WMS (Again … several ERRORS appear!! .... Next slide) 192.168.18.129 gildaXX.junet.jo gilda01 192.168.18.130 bdii-XX.xxxxxxxx bdii-xx 192.168.18.131 lb-XX.xxxxxxxx lb-xx ::1 localhost6.localdomain6 localhost6

Running Yaim Let's fix /etc/init.d/glite-wms-wmproxy start We see that the error is related with the certificate. -check the certificate and the hostname (OK) (openssl x509 -in /home/glite/.certs/hostcert.pem -noout -text) -check voms certificate - /opt/glite/yaim/bin/yaim -c -s /opt/glite/yaim/etc/site-info.def -n WMS (Again … several ERRORS appear!! .... Next slide)

Thank you very much!