UI Installation and Configuration Dong Xu (xud@ihep.ac.cn) IHEP, CAS Asia 1 2010 - EPIKH School for Grid Site Administrators Beijing, 01.09.2010

Introductions The access point to the WLCG/EGEE Grid is the User Interface (UI). This can be any machine where users have a personal account and where their user certificate is installed. The gLite user Interface is a suite of clients and APIs that users and applications can use to access the gLite services from both the LCG and gLite software stack. From a UI a user can be authenticated and authorized to use the WLCG/EGEE resources, and can access the functionalities offered by the Information, Workload and Data Management Systems.

Check your host Vi /etc/hosts (for example) Start ntpd # Do not remove the following line, or various programs # that require network functionality will fail. 127.0.0.1 localhost.localdomain localhost 202.122.37.107 gilda01.ihep.ac.cn gilda01 Start ntpd service ntpd stop ntpdate ntp-1.infn.it service ntpd start

Repository settings Specify the mrepo host: export MREPO=http://grid-it.cnaf.infn.it/mrepo/repos/ Configure the repository as follows: REPOS="dag ig glite-generic lcg-ca glite-ui" Get repositories with: for name in $REPOS; do wget $MREPO/$name.repo -O /etc/yum.repos.d/$name.repo; done Copy LCG-CA wget http://grid-it.cnaf.infn.it/mrepo/repos/sl5/x86_64/lcg-ca.repo -O /etc/yum.repos.d/lcg-ca.repo Copy the gilda utils: wget http://grid018.ct.infn.it/mrepo/repos/gilda.repo -O /etc/yum.repos.d/gilda.repo

Edit /etc/yum.repos.d/glite-ui.repo （NOTICE！！） # This is the official YUM repository string for the glite 3.2 User Interface # Fetched from: http:///grid-deployment.web.cern.ch/grid-deployment/yaim/repos/glite-UI.repo # Place it to /etc/yum.repos.d/ and run 'yum update' [glite-UI] name=gLite 3.2 User Interface baseurl=http://glitesoft.cern.ch/EGEE/gLite/R3.2/glite-UI/sl5/x86_64/RPMS.release/ gpgkey=http://glite.web.cern.ch/glite/glite_key_gd.asc gpgcheck=1 enabled=1 [glite-UI_updates] baseurl=http://glitesoft.cern.ch/EGEE/gLite/R3.2/glite-UI/sl5/x86_64/RPMS.updates/ [glite-UI_ext] baseurl=http://glitesoft.cern.ch/EGEE/gLite/R3.2/glite-UI/sl5/x86_64/RPMS.externals/ gpgcheck=0

install by yum generic installation: UI specific Install: Update java update the host: yum clean all update CA: yum install lcg-CA install Gilda utils: yum install gilda_utils UI specific Install: install UI: yum groupinstall ig_UI_noafs Update java yum install java

get host certificates ready $# cp hostcert.pem /etc/grid-security/ $# cp hostkey.pem /etc/grid-security/ $# chmod 644 /etc/grid-security/hostcert.pm $# chmod 400 /etc/grid-security/hostkey.pem

edit site-info.def Edit site-info.def: vi /opt/glite/yaim/examples/siteinfo/ig-site-info.def RB_HOST=RB_hostname BDII_HOST=top-BDII-hostname WMS_HOST=wms-hostname LB_HOST=“lb-hostname:9000" PX_HOST=myproxy.ct.infn.it LFC_HOST=lfc-hostname DPM_HOST=se-hostname JAVA_LOCATION=/usr/lib/jvm/java-1.6.0-openjdk-1.6.0.0.x86_64/jre VOS="gilda" VO_GILDA_SW_DIR=$VO_SW_DIR/gilda VO_GILDA_DEFAULT_SE=$DPM_HOST VO_GILDA_STORAGE_DIR=$CLASSIC_STORAGE_DIR//gilda VO_GILDA_QUEUES="short long infinite" VO_GILDA_VOMS_SERVERS="vomss://voms.ct.infn.it:8443/voms/gilda?/gilda" VO_GILDA_VOMSES="'gilda voms.ct.infn.it 15001 /C=IT/O=INFN/OU=Host/L=Catania/CN=voms.ct.infn.it gilda'" VO_GILDA_VOMS_CA_DN="'/C=IT/O=INFN/CN=INFN CA' '/C=IT/O=INFN/CN=INFN CA'"

Edit ig-groups.conf Edit /opt/glite/yaim/examples/siteinfo/ig-groups.conf, "/gilda/ROLE=SoftwareManager":::sgm: "/gilda/grelc/das/*":gilda::: "/gilda":::: Remove ig.repo （NOTICE！！！） cd /etc/yum.repo.d mv ig.repo ig.repo.backup

Configuration /opt/glite/yaim/bin/yaim -c -s /opt/glite/yaim/examples/siteinfo/ig-site-info.def -n glite-UI

Set environment variable LFC_HOST vi /opt/glite/etc/profile.d/grid-env.sh gridenv_set “LFC_HOST” “your lfc hostname”

Test UI login as a non root users to UI and initialize your voms proxy. $# voms-proxy-init –voms gilda [xud@gilda08 ~]$ voms-proxy-init -voms gilda Enter GRID pass phrase: Your identity: /C=CN/O=HEP/O=IHEP/OU=CC/CN=dong xu Creating temporary proxy .................. Done Contacting voms.ct.infn.it:15001 [/C=IT/O=INFN/OU=Host/L=Catania/CN=voms.ct.infn.it] "gilda" Done Creating proxy ........................................ Done Your proxy is valid until Wed Sep 1 07:25:32 2010 [xud@gilda08 ~]$

Test UI check LFC: $# echo $LFC_HOST $# lfc-ls /grid/gilda/home $# lfc-mkdir /grid/gilda/home/xud $# glite-wms-job-delegate-proxy -d xud [xud@gilda08 ~]$ echo $LFC_HOST gilda07.ihep.ac.cn [xud@gilda08 ~]$ lfc-ls /grid/gilda/home xud [xud@gilda08 ~]$ glite-wms-job-delegate-proxy -d xud Connecting to the service https://gilda11.ihep.ac.cn:7443/glite_wms_wmproxy_server ================== glite-wms-job-delegate-proxy Success ================== Your proxy has been successfully delegated to the WMProxy(s): https://gilda11.ihep.ac.cn:7443/glite_wms_wmproxy_server with the delegation identifier: xud ========================================================================== [xud@gilda08 ~]$

Submit a job $# vi test.jdl $# vi hello.sh Type="Job"; JobType="Normal"; Executable="/bin/sh"; Arguments="hello.sh"; StdOutput="hello.out"; StdError="hello.err"; InputSandbox="hello.sh"; OutputSandbox={"hello.out","hello.err"}; $# vi hello.sh #!/bin/bash echo "hello!World!!"

Submit a job glite-wms-job-submit -d xud -o jobid test.jdl [xud@gilda08 ~]$ glite-wms-job-submit -d xud -o jobid test.jdl Connecting to the service https://gilda11.ihep.ac.cn:7443/glite_wms_wmproxy_server ====================== glite-wms-job-submit Success ====================== The job has been successfully submitted to the WMProxy Your job identifier is: https://gilda11.ihep.ac.cn:9000/7ll7bHKvbgEW9nFyZhDLPA The job identifier has been saved in the following file: /home/xud/jobid ==========================================================================

Submit a job $# glite-wms-job-status -i jobid [xud@gilda08 ~]$ glite-wms-job-status -i jobid ======================= glite-wms-job-status Success ===================== BOOKKEEPING INFORMATION: Status info for the Job : https://gilda11.ihep.ac.cn:9000/7ll7bHKvbgEW9nFyZhDLPA Current Status: Scheduled Status Reason: Job successfully submitted to Globus Destination: gilda-01.pd.infn.it:2119/jobmanager-lcgpbs-gilda Submitted: Tue Aug 31 19:32:03 2010 CST ========================================================================== [xud@gilda08 ~]$ $# glite-wms-job-output -i jobid

Thank you very much!