gLite User Interface Installation and configuration Antonio Fuentes Barcelona, Abril 2008

What is a User Interface (UI) ? Outline What is a User Interface (UI) ? How to install and configure a User Interface

What is a UI? The UI is a suite of clients and APIs that users and applications can use to access the gLite services The gLite UI includes the following components: – VOMS command-line tools – Workload Management System clients and APIs – Logging and Bookkeeping clients and APIs – Data Transfer command-line clients and APIs – Data Catalog command-line clients and APIs – gLite I/O client and APIs – R-GMA/BDII client and APIs

Installing and configuring User Interface (UI)

Installation pre-requisites Start from the base machine you installed in the INTRODUCTORY tutorial for site admin Verify that all pre-requisites are successfully installed Install JAVA. Install dependencies if needed. rpm -ihv http://grid-it.cnaf.infn.it/mrepo/ig_sl4-i386/RPMS.3_1_0_externals/jdk-1.5.0_14-fcs.i586.rpm rpm -ihv http://grid-it.cnaf.infn.it/mrepo/ig_sl4-i386/RPMS.3_1_0_externals/java-1.5.0-sun-compat-1.5.0.14-1.sl4.jpp.noarch.rpm Before installing java-1.5.0, the installation of ttmkfdir and chkfontpath will be needed.

Installation pre-requisites 1/3 wget http://grid018.ct.infn.it/mrepo/repos/ca.repo -O /etc/yum.repos.d/ca.repo wget http://grid018.ct.infn.it/mrepo/repos/gilda.repo -O /etc/yum.repos.d/gilda.repo yum install lcg-CA To install the AFS versions ig_WN and ig_UI profile yum install openafs openafs-client kernel-module-openafs-`uname -r`

Installation pre-requisites 2/3 yum install gilda_utils Host certificate installation is not necessary …

Install and configure UI We are now ready to install the UI: export REPOS="ca dag glite-ui ig jpackage gilda” for name in $REPOS; do wget http://grid018.ct.infn.it/mrepo/repos/$name.repo -O /etc/yum.repos.d/$name.repo; done yum install ig_UI cp /opt/glite/yaim/examples/siteinfo/ig-site-info.def /opt/glite/yaim/etc/gilda/<your_site-info.def>

Install and configure UI Edit your file my-site-info.def vi /opt/glite/yaim/etc/gilda/<your_site-info.def> Set the variable DOMAIN to your domain, ie, rediris.es MY_DOMAIN=$(hostname -d) (if you use this sentence, then check if the extended machine name is in /etc/hosts 130.206.176.118 grid-18.rediris.es grid-18

Install and configure UI Add gilda and geclipsetutor to VOS variable in /opt/glite/yaim/etc/gilda/<your-site-info.def> cp /opt/glite/yaim/examples/ig-groups.conf /opt/glite/yaim/etc/gilda/ cp /opt/glite/yaim/examples/ig-users.conf /opt/glite/yaim/etc/gilda/

Install and configure UI Append gilda and geclipsetutor users and groups definitions to /opt/glite/yaim/etc/gilda/ig-users.conf cat /opt/glite/yaim/etc/gilda/gilda_ig-users.conf >> /opt/glite/yaim/etc/gilda/ig-users.conf cat /opt/glite/yaim/etc/gilda/gilda_ig-groups.conf >> /opt/glite/yaim/etc/gilda/ig-groups.conf

Install and configure UI Define new path of your USERS_CONF and GROUPS_CONF file in /opt/glite/yaim/etc/gilda/<your_site-info.def> export GROUPS_CONF=/opt/glite/yaim/etc/gilda/ig-groups.conf export USERS_CONF=/opt/glite/yaim/etc/gilda/ig-users.conf

Install and configure UI Nodetype configuration /opt/glite/yaim/bin/ig_yaim -c -s /opt/glite/yaim/etc/gilda/my-site-info.def -n ig_UI

Add a user into the UI Use the Unix commands: # adduser gildauser (or any other user name) # passwd gildauser Log on it with: # su – gildauser (from root) … or type: # exit Then logon with the new user

Certificate handling 1/2 Copy your own certificates to the UI: # From your local PC: ssh barcellonaxx@glite.tutor.ct.infn.it # scp -pr .globus grid-xx.rediris.es:/home/gildauser Verify permissions of the certificates; they must be: -r------- 1 gildauser gildauser 1169 Jun 15 11:03 userkey.pem -rw-r—r-- 1 gildauser gildauser 1326 Jun 15 11:03 usercert.pem If file permissions are wrong use: # chmod 400 userkey.pem # chmod 644 usercert.pem

Certificate handling 2/2 Certificates must be in .globus directory: # mkdir .globus # mv *.pem .globus/ How to use more then one certificates: 1) Use a separate account for each certificate 2) Use a symbolic link .globus to different certificate directories # mkdir .globus_EUMED # mv *.pem .globus_EUMED/ (EUMED usercert/userkey) # mkdir .globus_GILDA # mv *.pem .globus_GILDA/ (GILDA usercert/userkey) Create the link with: # ln –s .globus_GILDA .globus Switch to the EUMED VO with: # ln –sf .globus_EUMED .globus

Gilda site install instructions: References Gilda site install instructions: https://grid.ct.infn.it/twiki/bin/view/GILDA/GILDASiteInstall#Released_profiles

Questions…