FP6−2004−Infrastructures−6-SSA User Interface Installation Valeria Ardizzone INFN – Catania Grid tutorial for users and system administrators Beijing, April 2006

Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing,  What is a User Interface (UI) ?  How to install a User Interface.  How to configure a User Interface. Outline

Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, What is a User Interface?  The UI is a suite of clients and API that users and applications can use to access the gLite services.  The gLite UI includes the following components: – VOMS command-line tools – Workload Management System clients and APIs – Logging and Bookkeeping clients and APIs – Data Transfer command-line clients and APIs – Data Catalog command-line clients and APIs – gLite I/O client and APIs – R-GMA client and APIs

Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, Installing User Interface (UI)

Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, Node Syncronization with NTP  Syncronization among all nodes is mandatory. It can be achieved by the NTP protocol with a time server  Install ntp if not already available for your system : >apt-get install ntp  Add your time server in /etc/ntp.conf restrict mask nomodify notrap noquery server (you can use ntp-1.infn.it – IP )  Edit /etc/ntp/step-tickers adding your(s) time server(s) hostname  If you are running a firewall, you will have to allow inbound comminication on the NTP port: -A INPUT -s -p udp --dport 123 -j ACCEPT  Activate the ntpd service with the following commands: >ntpdate >service ntpd start >chkconfig ntpd on >ntpq –p = ntp-1.infn.it

Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, Installation Pre-requisites  Start from a fresh install of SLC 3.0.x and verify that apt is installed and properly configured: >rpm -qa | grep apt Install apt if necessary: >rpm -ivh 8.SL.cern.i386.rpmhttp://linuxsoft.cern.ch/cern/slc30X/i386/SL/RPMS/apt cnc6- 8.SL.cern.i386.rpm  Java SDK is required to install almost any LCG/gLite grid service. Due to license issues, it is not found in the LCG repositories. So please download and install a release of Sun Java SDK >= 1.4.2_08 from >chmod +x j2sdk-1_4_2_11-linux-i586-rpm.bin >./j2sdk-1_4_2_11-linux-i586-rpm.bin > rpm -ivh j2sdk-1_4_2_11-linux-i586.rpm Preparing... ########################################### [100%] 1:j2sdk ########################################### [100%]

Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, Security pre-requisites  If you plan to use certificates released by unsupported EGEE CA’s, be sure that their public key, signing policy and CRLs (usually distributed with an rpm) are installed in /etc/grid-security/certificates. For the VO GILDA, the RPM is available from Install it with the command: >rpm –ivh ca_GILDA i386.rpm

Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, Installing User Interface via apt 1. Create the file glite.list in the /etc/apt/sources.list.d directory and put this row on it: rpm glite_1.4-i386 1_4 externals updateshttp:// glite_1.4-i386 1_4 2. Digit the following commands: >apt-get update >apt-get dist-upgrade 3. Install User Interface: >apt-get install glite-ui-config See

Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, Installing User Interface via apt  If the installation is performed successfully, the following components are installed: – gLite in /opt/glite – Globus in /opt/globus – GPT in /opt/gpt

Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, Installation of VOMS Certificate  Install the GILDA's VOMS server host certificates gilda-voms.ct.infn.it.pem, e voms.ct.infn.it.pem, in the directory /etc/grid- security/vomsdir  Edit the /opt/glite/etc/vomses file as follow: "gilda" "voms.ct.infn.it" "15001" "/C=IT/O=GILDA/OU=Host/L=INFN "gilda“  Or install the following rpm file: >rpm –ivh glite-voms-vo-gilda noarch.rpm (download from 0.noarch.rpm)

Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, User Interface Configuration  Configuration comes through the execution of pyhton scripts, which takes as input XML files.  So services have to be configured by editing these XML files.  Attributes in XML file are well commented and selfexplaining.  XML files are provided as templates, under /opt/glite/etc/config/templates  Copy templates file to /opt/glite/etc/config  Edit each of them separately.  Then we could launch the configurator scripts for the User Interface.

Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, User Interface Configuration (cont.) List of XML files to configure:  Glite-global.cfg.xml  Glite-security-utils.cfg.xml  Glite-rgma-common.cfg.xml  Glite-rgma-client.cfg.xml  Glite-io-client.cfg.xml  Glite-file transfer-service-client-cfg.xml  Glite-services-discovery.cfg.xml  Glite-ui-cfg.xml  Glite-service-discovery.file-based-example-cfg.xml

Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, glite-global.cfg.xml <JAVA_HOME description="Environment variable pointing to the SUN Java JRE or J2SE package for example '/usr/java/j2re1.4.2_08/' or '$JAVA_HOME' (if it is defined as an environment variable)" value="/usr/java/j2sdk-1.4.2_11"/> Check your java package installed.

Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, glite-security-utils.cfg.xml <cron.mailto description=" address for sending cron job notifications“

Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, glite-rgma-common.cfg.xml <rgma.server.hostname value="rgmasrv.ct.infn.it"/> <rgma.schema.hostname value="rgmasrv.ct.infn.it"/> <rgma.registry.hostname rgmasrv.ct.infn.it

Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, glite-io-client.cfg.xml …. <service-discovery.file.service_name description="The globally unique name of the service. The convention is serviceHostName_voName_serviceType (for serviceType see parameter servicediscovery. file.service_type).“ value="IOServerGILDA"/> <service-discovery.file.url_endpoint description="URL endpoint of the service. The host name is the name of your io server, the port depends on your vo.“ value=“gliteio://egee015.cnaf.infn.it:9999"/>

Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, glite-file-transfer-service-client.cfg.xml (1)

Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, glite-file-transfer-serviceclient.cfg.xml (2) <service-discovery.file.service_version value="3.0.0"/>

Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, glite-service-discovery.cfg.xml (1)

Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, glite-service-discovery.cfg.xml (2) <service-discovery.vo description="Default VO to be used to find a friendly VO. Leave the parameter empty if you don't want to specify a default VO. Example: EGEE [Type: 'string']" value="gilda"/> <service-discovery.bdii.provider description="Host and port of the BDII service for service discovery.Leave empty or remove parameter if you do not use BDII as information provider.Example: lxb1386.cern.ch:2170 [Type: 'string']“ value="grid004.ct.infn.it:2170"/>

Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, glite-ui.cfg.xml (1) <set description="Unique name of the set. It might be set to the VO name. [Example: EGEE] [Type: 'string']“ name="gilda"> <ui.VirtualOrganisation description="Name of the VO corresponding to this set. [Example: EGEE] [Type: 'string']" name="gilda">

Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, glite-ui.cfg.xml (2) <ui.NSAddresses description="List of NSserver:port pairs corresponding to the given VO"> <item description="Network Server address and port on which the network server is running separated by the ':' character. In case of multiple Network Servers this tag can be repeated. [Example: lxb1420.cern.ch:7772] [Type: 'string']" value="glite-rb.ct.infn.it:7772"> <ui.LBAddresses description="List of Logging and Bookkeeping server address:port pairs corresponding to the given Network Server. Example: lxb1419.cern.ch:9000] [Type: 'string]"> glite-rb.ct.infn.it:9000

Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, glite-ui.cfg.xml (3)

Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, glite-ui.cfg.xml (4) <py-ui.requirements value=‘other.GlueCEStateStatus == "Production"'/>

Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, glite-ui.cfg.xml (5)

Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, glite-ui.cfg.xml (6) <service-discovery.file.service_name value="SEIndexGILDA"/> <service-discovery.file.url_endpoint value=" catalog-service-fr-mysql/services/SEIndex"/>

Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing,  In order to obtain a correct files configuration, is important to delete from all.XML file the contained string “changeme” and replace it with empty string if necessary. Configuration Note:

Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, Post configuration In order to commit configuration, execute the script in /opt/glite/etc/config/scripts./glite-uiconfig.py To assure the correct functionality of the gLite UI it is necessary to add, as root, the following rows in /etc/profile source /etc/glite/profile.d/glite_setenv.sh PATH=$PATH:/opt/glite/externals/myproxy- 1.14/bin:/opt/lcg/bin:/opt/lcg/sbin LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/opt/glite/externals/myproxy- 1.14/lib:/opt/lcg/lib

Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing,  Using one of the client just installed to required a grid services, but remember to create a user and to copy its certificate files (usercert.pem and userkey.pem) in the default dir ~/.globus. Functionality Test

Valeria Ardizzone, INFN Catania  Grid tutorial for users and system administrators  Beijing, Good Lucky for your Installation!